CN100401814C - A protection method for PHS mobile communication PIM card authentication data - Google Patents

Abstract

A method for protecting authentication data stored in a PIM card irrelevant to mobile equipment in PHS mobile communication, in addition to the usual authentication of PHS mobile communication, it also includes: specific user data and authentication when initially setting users The data writing step; the specific authentication step when authentication occurs; the timing data inspection and recovery step that occurs regularly; the shutdown data inspection and recovery step included in the shutdown process. This authentication data protection method adds a CRC check code in the PIM card file, backs up the PIM card authentication data, adds a verification and recovery process in the authentication, and increases the data check and recovery when timing and shutdown. It can protect the authentication data stored in the general permission file of the PIM card from being rewritten and destroyed, which increases the robustness of the machine-card separation technology and facilitates the promotion of machine-card separation; ensures the integrity of the authentication data and makes the authentication operation It can be carried out smoothly; the number of repairs due to the damage of authentication data is reduced, which not only reduces the cost of network operators, but also provides convenience for users.

Description

A protection method for PHS mobile communication PIM card authentication data

technical field

The present invention relates to mobile communication, in particular to a PIM card irrelevant to ME equipment in PHS mobile communication, and more specifically to a method for protecting authentication data stored in the PIM card.

Background technique

In the PHS mobile communication system, a PIM card that has nothing to do with ME equipment is provided to realize the separation of the machine and the card. The user's authentication data is stored in the PIM card, which is inserted into the PHS mobile phone or fixed station arbitrarily selected by the user; and according to the general RCR STD-28 standard of the existing PHS network, the mobile station will first perform position registration, After the authentication process is successful, the network provides the subscription service for the user. During the process of providing subscription services for the user, the network will require the user to register and authenticate as needed. The types of registration and authentication include outgoing call authentication, incoming call authentication, etc., all of which will use the user authentication data stored in the PIM card.

The PIM card belongs to a kind of smart card that needs to disclose data, and stores data through files; the files include two types: 1, high-level permission files that need high-level permissions (such as file creator permissions) to be able to rewrite; 2, only ordinary permissions It is a rewritable normal permission file, and the normal permission file has some free space or reserved bytes. With this type of smart card, anyone can easily read and copy the data stored in the PIM card through specific commands and instruments, and can also delete and change it with permission. The authentication data of the PIM card is stored in the specified file of the PIM card. At present, the files stored in the authentication data are divided into the above two categories: part of the authentication data stored in the advanced authority file, once the PIM card is manufactured and handed over to the user, General users do not have the ability to rewrite this part of the authentication data; some of the authentication data stored in the general permission file, the write permission of this file is relatively low, and this part of the authentication data is easy to be rewritten and destroyed.

Contents of the invention

The technical problem to be solved by the present invention is to provide a PHS mobile communication PIM by using some free space or reserved bytes of the common authority file in the PIM card to increase the data CRC check and error recovery protection process in the traditional authentication process. The method for protecting the card authentication data protects part of the authentication data stored in the ordinary permission file of the PIM card to reduce the situation of being rewritten and destroyed.

The above-mentioned technical problems of the present invention are solved like this, construct a kind of protection method of PHS mobile communication PIM card authentication data, comprise the usual authentication process of PHS mobile communication, it is characterized in that, also comprise the following steps:

Initial processing: When initially setting up users, write specific user data and authentication data;

Authentication processing: when authentication occurs, perform authentication;

Timing processing: timing data inspection and recovery at regular intervals;

Shutdown processing: the shutdown process includes shutdown data check and recovery steps;

Described writing specific user data and authentication data comprises specific user data writing step and specific authentication data writing step, refers to when user data or authentication data are written into PIM card, in PIM ID or Insert the check digit into the authentication data, then write it into the corresponding file, make multiple backups at the same time, and store them separately.

According to the protection method of PHS mobile communication PIM card authentication data provided by the present invention, described authentication processing comprises the following steps:

2.1) When authentication occurs, the PHS mobile phone or fixed station reads the file storing authentication data in its PIM card, parses out the authentication data and performs verification;

2.2) If the verification is passed, continue to perform the usual authentication steps of PHS mobile communication;

2.3) If the check is not passed, then utilize the backup in the initial processing step to carry out the data recovery operation, if the data recovery fails, end the authentication process, and return the PIM card error message;

Otherwise, use the restored authentication data and continue to execute the usual authentication steps of PHS mobile communication.

According to the protection method of the PHS mobile communication PIM card authentication data provided by the present invention, the authentication processing of the ME in the process of power-on registration includes the following steps:

3.1) Insert the PIM card into the ME, and after the ME starts up, send a request to read the PIM ID file to the PIM card;

3.2) PIM card sends PIM ID file to ME;

3.3) Analyze the PIM ID and perform CRC check;

3.4) If the CRC check passes, then perform step (3.6), otherwise perform data recovery operation;

3.5) If the data recovery is successful, then perform step (3.6), otherwise the PIM card is damaged, and the authentication process is ended;

3.6) ME sends a location registration request to CS, the request includes PIM ID;

3.7) CS sends an authentication request to ME, and at the same time transmits the authentication random number to ME;

3.8) Perform authentication;

3.9) If the authentication is passed, the CS sends a location registration confirmation message to the ME; if the authentication fails, the CS sends a location registration failure message to the ME. .

According to the protection method of the PHS mobile communication PIM card authentication data provided by the present invention, the data restoration operation described in step (2.3) comprises:

4.1) Read the authentication data backup stored separately in different locations of the PIM card, parse out the authentication data and verify it;

4.2) If the verification fails and the authentication data backup has not been read, return to step (4.1); otherwise return a data recovery error;

4.3) If the verification is passed, write the CRC verification code corresponding to the authentication data into the damaged position

According to the protection method of the PHS mobile communication PIM card authentication data provided by the present invention, the data restoration operation described in step (3.4) comprises:

5.1) One of the PIM ID backups stored in different positions of the PIM card, parse out the PIM ID and verify it;

5.2) If the verification fails and the authentication data backup has not been read, return to step (5.1); otherwise, return a data recovery error;

5.3) If the verification is passed, write the CRC check code corresponding to the PIM ID into the damaged position.

According to the protection method of PHS mobile communication PIM card authentication data provided by the present invention, it is characterized in that, in the step of writing specific user data and authentication data, the file is a common authority file.

According to the protection method of the PHS mobile communication PIM card authentication data provided by the present invention, the method described in the specific user data and the authentication data writing step is 32 CRC checks, and the authentication data or PIM ID is according to 4 byte groups, if less than 4 bytes, fill with "0xff", according to the check digit calculated by the formula, put the check digit in the back byte of each group, the formula is f( x) =

X^32+X^26+X^23+X^22+X^16+X^12+X^11+X^10+X^8+X^7+X^5+X^4+X^ 2+X^1+X^0.

According to the protection method of the PHS mobile communication PIM card authentication data provided by the present invention, described in the step (2.1) reads one of the authentication data backups stored separately in different positions of the PIM card, according to the priority of different positions The sequence is read one by one, and the different positions include the infrequently used files with priority from high to low, the infrequently used records of some files, and the reserved fields of some files.

According to the protection method of the PHS mobile communication PIM card authentication data provided by the present invention, the verification refers to that the authentication data parsed is grouped according to 4 bytes, if less than 4 bytes, then fill with "0xff", The check digit obtained according to the formula is compared with the check digit described in the specific user data and authentication data writing step, the same check is passed; the different check is failed; the formula is f(x) =

X^32+X^26+X^23+X^22+X^16+X^12+X^11+X^10+X^8+X^7+X^5+X^4+X^ 2+X^1+X^0.

According to the PHS mobile communication PIM card authentication data protection method provided by the present invention, the timing processing step includes the step of regularly performing CRC check to find out the correct authentication data and the specific authentication data writing step.

According to the PHS mobile communication PIM card authentication data protection method provided by the present invention, the shutdown processing step includes a step of performing a CRC check to find correct authentication data and a specific authentication data writing step when the ME is shut down.

Implement the protection method of the PHS mobile communication PIM card authentication data that the present invention provides, utilize in the PIM card file to increase the CRC check code, redundant PIM card authentication data distributed in multiple places, increase in the authentication process The verification and recovery process, while increasing the data check and recovery process at the time of timing and shutdown, protects part of the authentication data stored in the normal authority file of the PIM card, reduces the situation of being rewritten and destroyed, and further increases the security to a certain extent. The robustness of the machine-card separation technology facilitates the promotion of machine-card separation; it ensures the integrity of the authentication data, enabling the smooth operation of the authentication operation; it reduces the number of repairs due to damage to the authentication data, which not only reduces network operation The service cost of the provider reduces the user's troubles; at the same time, the same technology as above is further used to protect the PIM ID data, making the PIM card more reliable.

Description of drawings

Fig. 1 is a schematic diagram of the format of authentication data used in the method of the present invention.

Fig. 2 is a schematic flow chart of verifying authentication data by using the method of the present invention.

Fig. 3 is a schematic flow chart of restoring authentication data provided by the present invention.

Fig. 4 takes the SIM card as an example, and uses the method of the present invention to read the schematic flow chart of authentication data backup.

Fig. 5 is a schematic flow chart of timing authentication data checking and recovery using the method of the present invention.

Fig. 6 is a schematic flow chart of checking and recovering authentication data when the system is turned off by using the method of the present invention.

Detailed ways

The method of the present invention is further developed in conjunction with the accompanying drawings and embodiments. First, the main basic points for explaining the inventive method are as follows:

(1) CRC check:

1. write PIM ID and authentication data, wherein, the format of authentication data is as Fig. 1, and authentication data is written in the file, because the present embodiment has adopted 32 CRC checks, therefore, the data to be written according to 4 byte groups, if less than 4 bytes, fill with "0xff", and finally, according to the check code generation formula "f(x)=

X^32+X^26+X^23+X^22+X^16+X^12+X^11+X^10+X^8+X^7+X^5+X^4+X^ 2+X^1+X^0" to get the original check digit placed in the last byte of each group. The method of writing PIM ID data is the same as the method of writing authentication data.

② PIM ID and authentication data verification, the process is shown in Figure 2, the authentication data CRC verification steps include: ME authentication, power-on and ME self-set data inspection need to do authentication data CRC verification, CRC verification starts , ME reads the authentication data and judges whether the read data is authentication data (judged by the set authentication data flag bit), it is not the end; yes, a new check digit is generated according to the check code generation formula and ME When the authentication data is read and the original check digits read in are compared, if they are exactly the same, "passed" is returned; otherwise, "failed" is returned. The CRC data verification steps of the PIM ID are similar to the authentication data CRC verification steps.

(2) PIM ID and authentication data recovery:

①Backup PIM ID and authentication data, and store them in some free space or reserved bytes of the common permission file.

② When the original file containing PIM ID or authentication data is damaged and the CRC check fails, data recovery is performed. As shown in Figure 2, authentication data recovery steps: read the backup of the PIM ID and authentication data backup in the normal authority file, return valid authentication data, use this data to restore the original file, otherwise return an error message. As shown in Figure 3, the read data backup described in the authentication data recovery step, taking the SIM card as an example, in the SIM card using the GSM11.11 protocol GSM system, read the CCP, PLMNsel and SMSS files sequentially as required The authentication data backup in the CRC check is carried out, and the valid authentication data required by the authentication data recovery step is directly returned through the check, otherwise continue to read, and if all data backup CRC checks fail, an error message is returned.

CCP file, which has only one default record in the PHASE 1 and PHASE 2 cards, with the highest priority;

PLMNsel file, this file generally only uses 8 records, the default is only 1, and users generally do not operate. In this file, the location where the authentication data is stored is uncertain, and additional information needs to be added to identify it, and the priority is second;

SMSS file, the reserved field of this file has ten bytes, but this field will be rewritten when the short message is full, and the priority is the lowest.

According to the protection method of the PHS mobile communication PIM card authentication data that the present invention proposes, each step is explained one by one as follows: (ME is in CS coverage area)

1) ME start-up registration:

1.1) Insert the PIM card into the ME of the PHS mobile system, and after turning on the ME, send a request to the PIM card to read and store the original file of the PIM ID data;

1.2) PIM card sends the original file of PIM ID data to ME;

1.3) Analyze the PIM ID and perform CRC check;

1.4) if by CRC check, then perform step (1.6), otherwise perform PIM ID data recovery operation;

1.5) If the PIM ID data recovery is successful, then perform step (1.6), otherwise end the authentication process and return the PIM card error message;

1.6) ME sends a location registration request to CS, the request includes PIM ID;

1.7) CS sends an authentication request to ME, and transmits the random number to ME;

1.8) The ME sends a request to the PIM card to read the original file storing the authentication data;

1.9) The PIM card sends the original authentication data file to ME;

1.10) Parse the authentication data and perform CRC check;

1.11) If the CRC check is passed, then execute (1.13), otherwise perform authentication data recovery;

1.12) If the authentication data recovery is successful, then execute (1.13), otherwise end the authentication process, return PIM card error information, and ME registration fails;

1.13) ME executes the FEAL algorithm or the STEPHI algorithm to generate the authentication result according to the random number and the parsed authentication data AK;

1.14) ME sends an authentication response to CS, carrying the authentication result generated by it;

1.15) If the authentication result is correct, the CS sends the location registration confirmation message to the ME; otherwise, the ME registration fails.

2) ME authentication: (ME power-on registration also has ME authentication, included in steps (1.8)-(1.15))

2.1) When authentication such as outgoing calls and incoming calls occurs, the PHS mobile system ME sends a request to the PIM card to read the original file storing the authentication data;

2.2) Parse the authentication data and perform CRC check;

2.3) If the verification is passed, the authentication operation is performed in the PHS mobile system ME by using the authentication data, and the operation result is sent to the CS.

2.4) If the verification fails, the authentication data recovery operation is performed;

2.5) If the data restoration fails, the authentication process ends and the PIM card error message is returned; otherwise, the authentication operation is performed in the ME using the restored authentication data, and the operation result is sent to the CS.

2.6) The CS compares the operation result sent by the ME with the result calculated by itself, and if they are the same, the authentication passes; otherwise, the authentication fails.

3) ME timing data check and recovery, as shown in Figure 5, after the ME is powered on and registered and authenticated, a 45-minute timer is started. Every 45 minutes, when the ME is in the standby state, the ME reads the authentication data and all backups in turn according to the needs, finds out the correct and valid authentication data through CRC check, rewrites the authentication data and all backups, if found If not, return PIM card error information.

4) The ME shutdown data inspection and recovery process is shown in Figure 6. When the ME is shut down, the ME reads the authentication data and all backups in turn according to the needs, finds out the correct and valid authentication data through the CRC check, and rewrites the authentication data and All backups, if not found, return PIM card error message.

Claims (11)

1. the guard method of a PHS mobile communication PIM card authorization data comprises the PHS mobile communication is carried out authentication, it is characterized in that, and is further comprising the steps of:

Initial treatment: during the initial setting up user, write specific user data and authorization data;

Authentication process: when authentication takes place, carry out authentication;

Timing Processing: regularly carry out timing data inspection and recovery;

Shutdown is handled: shutdown process comprises shutdown data checks and recovering step;

User data that said write is specific and authorization data comprise specific user data write step and specific authorization data write step, be meant when user data or authorization data are write the PIM card, in PIM ID or authorization data, insert check digit, write corresponding document again, do a plurality of backups simultaneously, separately deposit.

2. according to the guard method of the described PHS mobile communication of claim 1 PIM card authorization data, it is characterized in that described authentication process may further comprise the steps:

2.1) when authentication took place, PHS mobile phone or fixed station read the file of depositing authorization data in its PIM card, parse authorization data and carry out verification;

2.2) if verification is passed through, continue to carry out the common authentication step of PHS mobile communication;

2.3) if verification not by then utilizing the authorization data backup of leaving the PIM card in to carry out data restore operation, if data are recovered failure, finishes authentication process, return PIM card error message; Otherwise use the authorization data that recovers, continue to carry out the common authentication step of PHS mobile communication.

3. according to the guard method of the described PHS mobile communication of claim 1 PIM card authorization data, it is characterized in that the authentication process of ME in the process of start registration may further comprise the steps:

3.1) the PIM card is inserted ME, ME start back sends the request of reading PIM ID file to the PIM card;

3.2) the PIM card sends PIM ID file to ME;

3.3) parse PIM ID and carry out CRC check;

3.4) if CRC check is passed through execution in step (3.6) then, otherwise carry out data restore operation;

3.5) if data are recovered successfully execution in step (3.6) then, otherwise the damage of explanation PIM card, end authentication process;

3.6) ME sends position register request to CS, this request comprises PIM ID;

3.7) CS sends authentication request to ME, passes to ME simultaneously and with authentication random number;

3.8) the execution authentication;

3.9) authentication passes through, CS passes to ME with the location registers acknowledge message; Failed authentication, CS passes to ME with the location registers failed message.

4. according to the guard method of the described PHS mobile communication of claim 2 PIM card authorization data, it is characterized in that, comprise in data restore operation described in the step (2.3):

4.1) read the authorization data backup of separately leaving PIM card diverse location in, parse authorization data and carry out verification;

4.2) if verification is not passed through, the authorization data backup does not run through, and returns step (4.1); Otherwise return data recovers mistake;

4.3) if verification is passed through, the CRC check sign indicating number of this authorization data correspondence is written on the ruined position.

5. according to the guard method of the described PHS mobile communication of claim 3 PIM card authorization data, it is characterized in that, comprise in data restore operation described in the step (3.4):

5.1) leave in the PIM ID backup of PIM card diverse location in, parse PIM ID and carry out verification;

5.2) verification do not pass through, the authorization data backup does not run through, and returns step (5.1); Otherwise return data recovers mistake;

5.3) if verification is passed through, the CRC check sign indicating number of this PIM ID correspondence is written on the ruined position.

6. according to the guard method of the described PHS mobile communication of claim 1 PIM card authorization data, it is characterized in that, is common authority at file described in described specific user data and the authorization data write step.

7. according to the guard method of the described PHS mobile communication of claim 1 PIM card authorization data; it is characterized in that; in described specific user data and authorization data write step, adopt 32 CRC check; with authorization data or PIM ID according to 4 byte packet; if 4 bytes of less than are then filled with " 0xff "; the check digit that calculates according to formula; check digit is placed on byte in back of each group, and described formula is f (x)=X^32+X^26+X^23+X^22+X^16+X^12+X^11+X^10+X^8+X^7+X^5+X^4+ X^2+X^1+X^0.

8. according to the guard method of the described PHS mobile communication of claim 2 PIM card authorization data; it is characterized in that; reading described in the step (2.1) is one that reads in the authorization data backup of separately leaving PIM card diverse location in; and read one by one successively according to the priority orders of diverse location, described diverse location comprises from high to low the file that does not often use of priority, record that some file seldom uses and the reserved field of some file.

9. according to the guard method of claim 2 or 3 described PHS mobile communication PIM card authorization datas, it is characterized in that, described verification is meant that the authorization data that will parse is according to 4 byte packet, if 4 bytes of less than are then filled with " 0xff ", check digit that draws according to formula and described specific user data and the check digit described in the authorization data write step compare, and identical verification is passed through; The different check failure; Described formula is f (x)=X^32+X^26+X^23+X^22+X^16+X^12+X^11+X^10+X^8+X^7+X^5+X^4+ X^2+X^1+X^0.

10. according to the guard method of the described PHS mobile communication of claim 1 PIM card authorization data, it is characterized in that described Timing Processing step comprises that regularly carrying out the CRC check finds out the step of correct authorization data and specific authorization data write step.

11. the guard method according to the described PHS mobile communication of claim 1 PIM card authorization data is characterized in that, described shutdown treatment step carries out the CRC check and finds out the step of correct authorization data and specific authorization data write step when comprising the ME shutdown.

Images