CN102201070A - Integrated Cards, Card Readers and Combinations - Google Patents

Abstract

The invention discloses an integrated card, a card reader and a combination thereof, and provides an integrated card with wide popularity and large storage capacity. The integrated card comprises a sheet body card and a storage card, wherein the sheet body card is provided with an accommodating groove; the storage card is embedded and fixed in the containing groove of the chip card, and the card reader comprises a card seat, a CPU, a card reading module, a crystal oscillator and a wireless transceiving module or a rotating interface; a layered authorization module is arranged in the CPU; the card reading module, the crystal oscillator and the wireless transceiving module or the switching interface are respectively connected with the CPU; the card reading module comprises a card reading device and a card reading driving circuit. According to the invention, the storage card is embedded and fixed on the chip card, the card reading device is arranged in the card slot of the card reader at the position corresponding to the storage card, and the information of different layers such as strong secret, weak secret, public and the like is respectively configured in the device, so that a user can conveniently and safely master the information of the user.

Description

Integrated Cards, Card Readers and Combinations

technical field

The invention relates to a mobile storage device, in particular to an integrated card with wide popularity and large storage capacity, a card reader and a combination thereof.

Background technique

With the rapid development of science and technology, especially the use of electronic computers, chip cards have been increasingly widely used in various industries due to their portability advantages. The chip card is mainly used to identify the cardholder when relevant business needs to occur. However, when the amount of personal information increases to a certain extent, the storage capacity of the chip card is difficult to meet the requirements of practical applications.

Following U disk and SD card technology, TF card has gradually become the main mobile storage media due to its small size, large storage capacity, low price and convenient use. It can be used for mobile phones, digital cameras, PCs, notebook computers, etc. The built-in TF read-write adapter of digital products can read, write and exchange data. However, the portability and universality of the TF card are not as good as the current chip card.

Due to the popularity of chip cards and the high cost performance of TF cards, there is a trend to combine the two organically for services that require high-volume data storage. At present, the general implementation method is to use activities. Pull or open the operation to highlight the shape of the TF card. This kind of movable built-in TF card method is easy to damage the chip card or break the connection line of the TF small card.

When users share services, they usually consider personal privacy protection instead of random sharing, or encrypt the entire data by entering a password. Symmetric encryption is generally used, which is easy to be cracked. It can be seen from the above prior art that because the key needs to be read into the computer memory, the key may be stolen by others in the computer by illegal means such as a Trojan horse, and there is a security risk in the prior art.

Contents of the invention

Aiming at the problems existing in the prior art, one of the purposes of the present invention is to overcome the aforementioned deficiencies in the prior art and provide an integrated card with wide popularity and large storage capacity.

The second object of the present invention is to provide a card reader capable of reading and managing the information in the integrated card.

The third object of the present invention is to provide a combination of card readers that can read, control and manage the information in the integrated card. Obtain data by connecting to the server in a wired or wireless manner, and configure it with different levels of information such as strong secret, weak secret, and public, and then provide the processed data for PC terminals to selectively read, which is convenient for users Control the security of your own information.

In order to achieve one of the above objects, the present invention provides an integrated card, which includes a body card and a memory card. The body card is provided with a receiving groove, and the memory card is embedded and fixed in the receiving groove. The thickness of the memory card is not more than The thickness of the chip card; the memory card is a TF card, and a connection circuit unit is provided in the body card, and the connection circuit unit connects the magnetic strip of the chip card or the SIM card and the memory card, and the two can be connected when the connection circuit unit is connected. Cards are physically connected.

In order to achieve the above-mentioned purpose two, the card reader provided by the present invention includes a card holder, a CPU, a card reading module, a crystal oscillator and a wireless transceiver module or a transfer interface; a card reader module, a crystal oscillator and a wireless transceiver module or a transfer interface The interfaces are respectively connected to the CPU; a card slot is provided on the card holder, and the card reading device is arranged in the card slot; a layered authorization module is built in the CPU, which is a configuration data encryption and decryption intensive security algorithm chip; the card slot It is rectangular, and at least two sides are open sides; the transfer interface is a USB interface, which can be rotated or telescopically moved inside and outside the deck.

In order to achieve the third purpose above, the integrated card combination provided by the present invention includes an integrated card and a card reader, the integrated card includes a body card and a memory card, the body card is provided with a receiving slot; In the storage slot of the chip card, the card reader has a card holder, a CPU, a card reading module, a crystal oscillator and a wireless transceiver module or a transfer interface; the CPU has a built-in hierarchical authorization module; the card reading module, crystal oscillator and The wireless transceiver module or the transfer interface are connected to the CPU respectively; the card reading module includes a card reading device and a card reading drive circuit, and the card reading drive circuit is connected to the card reading device, and is characterized in that: a card slot is provided on the card holder, and the card reading device It is arranged at the position corresponding to the memory card in the card slot, and several buttons are arranged on the surface of the card holder.

Further, the hierarchical authorization module includes: a microprocessor control unit for identifying and processing different levels of information, a sieve unit for configuring 1-n levels of encryption and decryption, a sieve management interface, and a sieve for encrypted data transmission Encrypted channel unit, non-encrypted channel unit for non-encrypted data transmission, key management unit for key management, data exchange interface for PC terminal communication; sieve plate management interface, key management unit, data exchange The interfaces are respectively connected to the microprocessor control unit, the sieve plate management interface is connected to the 1-n level encryption and decryption sieve plate unit, and the key management unit is connected to the encrypted channel unit and the non-encrypted channel unit;

Further, the hierarchical authorization module adopts commonly recognized symmetric, asymmetric, DES, RSA, GPG, IDES information encryption and decryption, digital signature technology and authentication mechanism, and can configure different layers such as strong encryption, weak encryption, and publicity in combination with the server Other information, for PC terminals to selectively read or forward;

Further, the physical layer of the data transmission interface for communication between the integrated card combination and the server or between the integrated card combination and the PC terminal can be either limited or unlimited to realize mutual data transmission.

As mentioned above, the integrated card, card reader and their combination of the present invention fix a memory card embedded in the chip card, and a card reader device is set at the corresponding position of the memory card in the rectangular card slot of the card reader, so as to realize reading Access the information in the integrated card with wide management popularity and large storage capacity; through the integrated card combination, the cardholder connects to the server in a wired or wireless way to obtain data, and uses strong encryption, weak encryption, and public encryption respectively in this device. Wait for the information configuration of different layers, and then provide the PC terminal to selectively read the configured data, which is convenient for users to control the security of their own information.

Description of drawings

Fig. 1 is a schematic diagram of the integrated card of the present invention.

Fig. 2 is a perspective view of the card reader of the present invention.

FIG. 3 is a schematic diagram of the card reader shown in FIG. 2 .

Fig. 4 is a working schematic diagram of the integrated card combination of the present invention.

The reference signs of each component in the figure are explained as follows:

Integrated card 1, chip card 11, memory card 12, magnetic stripe 13, card reader 2, card holder 21, card slot 211, card reader device 22, card reader drive circuit 23, 1-n management button 24, transfer interface 25. CPU26, hierarchical authorization module 261, crystal oscillator 27, wireless transceiver module 28, microprocessing control unit 2611, sieve plate management interface 2612, 1-n encryption and decryption control sieve plate 2613, password management unit 2614, encrypted channel 2615, Encrypted channel 2616, data exchange interface 2617, server 5, PC computer 6, workstation 7.

Detailed ways

In order to further understand the features, technical means, specific objectives and functions achieved by the present invention, and to analyze the advantages and spirit of the present invention, a further understanding of the present invention can be obtained through the following detailed description of the present invention in conjunction with the accompanying drawings and specific embodiments.

Please refer to FIG. 1 and FIG. 2 , the integrated card combination of the present invention includes an integrated card 1 and a card reader 2 .

The integrated card 1 includes an integrated card 11 and a memory card 12 . The chip card 11 has the same specifications as a credit card, and can be an ordinary bank card, health card, business point card, etc. The main purpose is to identify the cardholder when relevant business needs to occur. The chip card 11 has a function for storing identification Magnetic strip 13 or SIM card (not shown) for information. A receiving slot (not shown in the figure) is provided on the chip card 11 , and the distance between the receiving slot and the nearest two edges of the chip card 11 is less than 5 mm. The memory card 12 can be a TF card, and the memory card 12 is embedded and fixed in the receiving slot of the chip card 11. The thickness of the memory card 12 is not greater than that of the chip card 11, and its thickness ranges from 0.8 to 1.2 mm. A connection circuit unit (not shown in the figure) can be added to the body card for connecting the magnetic strip of the chip card 11 or the SIM card and the memory card 12. The connection state of this connection circuit unit is not limited to disconnection or connection , when connected, the two cards can be physically connected.

Please refer to Fig. 2 and Fig. 3, card reader 2 comprises a deck 21, a CPU26, a card reader module, crystal oscillator 27, a wireless transceiver module 28 or a transfer interface 25; Card reader module, crystal oscillator 27, wireless transceiver module 28 or transfer interface 25 are connected with CPU26 respectively; Described CPU26 is equipped with a hierarchical authorization module 261, is a configuration data encryption and decryption security algorithm chip;

The card holder 21 is in the shape of a cuboid, about 45mm~60mm long, about 20mm~30mm wide, and about 5mm~8mm high. Two adjacent sides of the card holder 21 are provided with a rectangular card slot 211 inwardly. At least two sides of the card slot 211 are open face. The card reading module includes a card reading device 22 and a card reading drive circuit 23. The card reading device 22 is arranged on the slot wall of the card slot 211 at the position corresponding to the memory card. The card reading contacts (not marked in the figure). The card reading drive circuit 23 is connected to the card reading device 22 and the CPU 26 . There are a number of management buttons 1-N on the surface of the deck, which can process sensitive confidential information based on the XML standard format in the storage data of the memory card 12. The N buttons respectively decrypt the confidential information of the corresponding encryption level according to the arrangement and combination, so as to realize the layering Capabilities to authorize sharing. The transfer interface 25 is arranged at one end of the card holder 21, and can be moved inside and outside of the card holder 21 in a rotatable or telescopic manner, and the transfer interface 25 is a common USB interface.

Referring to Fig. 4, the hierarchical authorization module 261 includes: a microprocessor control unit 2611 for identifying and processing different levels of information, a sieve unit 2613 for configuring 1-n levels of encryption and decryption, a sieve management interface 2612, and an encryption-available Encrypted channel unit 2615 for data transmission, unencrypted channel unit 2616 for unencrypted data transmission, key management unit 2614 for key management, data exchange interface 2617 for PC terminal communication; sieve board management interface 2612 , the key management unit 2615, and the data exchange interface 2617 are respectively connected to the microprocessor control unit 2611, the sieve plate management interface 2612 is connected to the 1-n level encryption and decryption sieve plate unit 2613, the key management unit 2615 is connected to the encryption channel 2615 unit, The non-encrypted channel unit 2616 is connected.

In this technical solution, the hierarchical authorization module 261 adopts commonly recognized symmetric, asymmetric, DES, RSA, GPG, IDES information encryption and decryption, digital signature technology and authentication mechanism. The integrated card combination is connected to the server through wired or wireless methods to obtain data, and different levels of information such as strong, weak, and public are configured in the device, and then the processed data is selectively read by the PC terminal. The integrated card It is not directly read into the computer memory, so as to ensure the security of personal privacy,

In this embodiment, the physical layer of the data transmission interface between the integrated card combination and the server 5 or the integrated card combination and the terminal communication (PC computer 6 or workstation 7) can be limited or unlimited, so as to realize mutual communication Data transmission; it should be noted that the wireless transceiver module 28 is specifically a wireless transceiver using infrared technology, Bluetooth technology, WiFi technology, WiMAX technology or radio frequency identification (RFID, Radio Frequency Identification) technology. In order to avoid external signal interference, it is recommended to use short-distance directional wireless transmission technology, such as RFID technology, infrared technology, etc., which have good directional characteristics. In addition to the several wireless technologies listed here, this technical solution can also use other wireless technologies.

In this embodiment, the integrated card combination is connected to the server in a wired or wireless way to obtain data, and different levels of information such as strong secret, weak secret, and public are configured in the device. One method is: the personal information that needs to be protected Sensitive information is designated as a sensitive information segment (Ss). When performing protection, use the 1-n level encryption and decryption command buttons of the card reader to virtual name Ss as a privacy protection band (Pb), and use a certain password (K) to After the plaintext (P) of Ss is encrypted by a symmetric encryption algorithm (such as DES), the information of Ss becomes ciphertext (S). It is called Pb, so that the P data of the original Ss becomes the combined data of the S ciphertext of Pb, and the P storage form of the original Ss becomes the S of Pb. When it is necessary to read, use the same password K to decrypt the S of Pb and restore the plaintext P, which can be read by yourself or shared with the party who intends to read. The ciphertext generated by this method can be read by any party who obtains S and knows K and the symmetric algorithm used for encryption. This method has no unique directional restrictions for reading, and is suitable for two-way or multi-party sharing by individuals and various service organizations. And while exchanging the information containing the ciphertext S, the password K used for encryption must be exchanged to decrypt the plaintext P before encryption, and the encrypted information can be written into the personal information at the location specified by the implementation standard.

Another method is: designate the sensitive information to be protected in the personal information file as a sensitive information segment (Ss), and use the 1-n level encryption and decryption command buttons of the card reader to virtual name Ss as a privacy protection segment when performing protection. (Pb), using the resident's own public key (Kb) that is synchronized or pre-obtained from the electronic signature certification center (CA) or preset in the card box, an asymmetric algorithm (such as the RSA algorithm) can be combined with a symmetric encryption algorithm (such as DES) to encrypt the plaintext (P) of Ss: first use Kb to encrypt the initial data value (Di) required by the symmetric encryption algorithm with an asymmetric algorithm to encrypt the ciphertext (S1), and then use the symmetric encryption algorithm to encrypt After P is encrypted, the ciphertext (S2) is generated. At the same time, the original position of Ss in the personal information remains unchanged, and it is transformed from the role of Ss to Pb, so that the P data of the original Ss becomes Pb's S1&S2 ciphertext after the combination data, so that the original P storage form of Ss is changed to S1&S2 of Pb. When it is necessary to read, first separate S1 and S2 from S1 & S2 of Pb, then use the resident himself to use his private key (Kv) to decrypt S1 through an asymmetric algorithm to restore Di, and then use Di and the symmetric encryption algorithm that generates S2 to encrypt S2 After performing the same algorithm, the original plaintext P is restored, which can be read by oneself or shared with the intended party. This method can be used by any party who obtains S1&S2 and knows Kv and the asymmetric algorithm used for encryption. Usually, only the residents who know Kv can decrypt the ciphertext S1&S2 with privacy protection band Pb to restore the plaintext in the sensitive information segment Ss At this time, the plain text may be available for self-reading or for others to read, so as to limit the abuse or ultra-authority reading of non-designated readers. This method has a strong unique orientation for reading, and is applicable to: (1) Residents can keep confidential information with privacy rights and write it into personal information files according to the location specified by the implementation standards, which can be opened and read by themselves when needed, and then can be read by other service agencies. (2) Each service agency provides residents with targeted confidential release or agreed confidentiality shared information, and the sending and receiving parties do not need to exchange the password Kb used for encryption, because Kb has already been released to the outside world, and these The encrypted information is written into the personal information files of residents according to the location specified by the implementation standard. (3) Residents can choose to write from a specific other party or service organization according to the location specified by the implementation standard, and it belongs to the only direction for their own reading. Shared confidential information, after being deciphered by the person himself, is first made available to himself, and then made available to other service organizations.

Another method is: designate the sensitive information that needs to be protected in personal information as a sensitive information segment (Ss), and when performing protection, give a virtual name to Ss (such as controlling the operation through the setting function of the device) as a privacy protection band (Pb), Using the public key (Kb) of the service organization that is synchronized or pre-obtained from the electronic signature certification center (CA) or preset in the cassette, an asymmetric algorithm (such as RSA algorithm) combined with a symmetric encryption algorithm (such as DES) can be used to encrypt Ss The plaintext (P) is encrypted: first use Kb to encrypt the initial data value (Di) required by the symmetric encryption algorithm with an asymmetric algorithm to encrypt the ciphertext (S1), and then use the symmetric encryption algorithm to encrypt P After that, the ciphertext (S2) is generated. At the same time, the original position of Ss in the personal information remains unchanged, and it is changed from the role Ss to Pb, so that the P data of the original Ss becomes the combined data of the S1&S2 ciphertext of Pb, so that The original P storage form of Ss is changed to S1&S2 of Pb. When it is necessary to read, first separate S1 and S2 from S1 & S2 of Pb, then use the resident himself to use his private key (Kv) to decrypt S1 through an asymmetric algorithm to restore Di, and then use Di and the symmetric encryption algorithm that generates S2 to encrypt S2 After performing the same algorithm, the original plaintext P is restored and provided to the designated service organization. This method can be used by anyone who obtains S1&S2 and knows Kv and the asymmetric algorithm used for encryption. Usually, only the service organization that has Kv can decrypt and restore the ciphertext S1&S2 with privacy protection band Pb to the sensitive information segment Ss Clear text, at this time, the plain text may be available for reading by the service organization, thereby restricting the abuse or ultra-authority reading of non-designated readers. This method has a strong unique orientation for reading, and is applicable to: (1) each service Institutions can keep the information of their own rights confidential and write it into the health file in the location specified by the implementation standards, which can be opened and read by themselves when needed, and then can be read by other service agencies. (2) Resident Orientation Provide the service agency with directional confidentiality release or agreement for directional confidentiality sharing, and the sending and receiving parties do not need to exchange the encrypted password Kb, because Kb has been released to the outside world, and the encrypted information can be executed according to the The location specified by the standard is written into the electronic health file of the residents, and the encrypted information can also be transmitted to a specific institution. (3) Each institution can choose to write in the location specified by the implementation standard from other parties through retrieval and is unique. The targeted shared confidential information for reading is first made available to the organization itself after being decrypted by the private key held by the service and other institutions.

Comprehensively adopt the above-mentioned first several methods, and according to the needs of sensitive information layered management, with corresponding operation settings and processing: multiple sensitive information listed in the same layer of the selected near-core first layer shall be appropriately processed according to the above-mentioned After the method is processed one by one, the obtained ciphertext is used as the management result required by the first layer, and then the multiple sensitive information required by the same layer of the second layer near the core are also processed according to the method of the first layer near the core, so By analogy, multiple layers of encryption can be formed.

Referring to Fig. 1 to Fig. 4, when the integrated card 1 is inserted into the card slot 211 of the card reader 2, the rectangular structure of the card slot 211 allows the integrated card 1 to be inserted into place at one time, and the memory card 12 abuts against the 22 of the card reader. Read card contact, card reader 2 starts drive circuit 23 to read the information in memory card 12 through CPU26, and handles encryption and decryption process according to individual needs, its method refers to above-mentioned embodiment, at last transfer interface 25 or wireless transceiver module receive 28 transfer memory card 12 and external data processing terminal such as computer, carry out the exchange of information data.

In summary, the present invention embeds and fixes the memory card 12 on the chip card 11, and installs the card reading device 22 at the position corresponding to the memory card 12 in the card slot 211 of the card reader 2, thereby realizing reading and managing the integrated card 1 of the information in the memory card 12. The cardholder connects with the server 5 through the integrated card combination to obtain data in a wired or wireless manner, and configures different levels of information such as strong secret, weak secret, and public in this device, and then provides the processed data to the PC The terminal selectively reads, which is convenient for users to control the security of their own information.

The above-described embodiments only express some implementations of the present invention. The embodiments and all viewpoints disclosed herein should be regarded as used to illustrate the present invention. The descriptions are more specific and detailed, but should not be interpreted as limitations on the scope of the invention. It should be pointed out that those skilled in the art can make several modifications and improvements without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Accordingly, the scope of protection of the present invention should be determined by the claims, including their legal equivalents.

Claims (10)

1. An integrated card, characterized in that the integrated card comprises: A body card with a receiving slot; A memory card is embedded and fixed in the receiving slot, and the thickness of the memory card is not greater than that of the chip card. 2. The integrated card according to claim 1, characterized in that: the memory card is a TF card, and a connection circuit unit is provided in the body card, and the connection circuit unit connects the magnetic strip of the chip card or the SIM card with the As for the memory card, when the connection circuit unit is connected, the two cards can be physically connected. 3. A card reader, the card reader includes a card holder, a CPU, a card reader module, crystal oscillator and a wireless transceiver module or a transfer interface, characterized in that: the card reader module, crystal oscillator, and wireless transceiver The modules or the transfer interfaces are respectively connected to the CPU, and the CPU has a built-in layered authorization module, and a card slot is opened on the card holder, and the card reading device is arranged in the card slot. 4. The card reader according to claim 3, wherein the hierarchical authorization module is a configuration data encryption and decryption security algorithm module. 5 . The card reader according to claim 3 , wherein the card slot is rectangular and at least two sides are open; the card reading device includes a card reading contact slightly protruding into the card slot. 6 . 6. The card reader according to claim 3, characterized in that: the wired transfer interface is a USB interface that can be rotated or telescopically moved inside and outside the card holder. 7. An integrated card combination, comprising an integrated card and a card reader, characterized in that: the integrated card includes a body card and a memory card, the body card is provided with a receiving slot; the memory card is embedded and fixed in the chip In the storage slot of the type card, the card reader has a card holder, a CPU, a card reading module, a crystal oscillator, and a wireless transceiver module or a transfer interface; a layered authorization module is provided in the card reader to read The card module, the crystal oscillator, and the wireless transceiver module or the transfer interface are connected to the CPU respectively; the card reading module includes a card reading device and a card reading drive circuit, the card reading drive circuit is connected to the card reading device, and a card slot is provided on the card holder for reading The card device is arranged at a position corresponding to the memory card in the card slot, and several buttons are arranged on the surface of the card holder. 8. A kind of integrated card combination according to claim 7, characterized in that, the layered authorization module includes: a microprocessor control unit for identifying and processing different levels of information, for configuring 1-n levels plus Decryption sieve plate unit, sieve plate management interface, encrypted channel unit for encrypted data transmission, non-encrypted channel unit for unencrypted data transmission, key management unit for key management, PC terminal communication Data exchange interface; the sieve plate management interface, key management unit, and data exchange interface are respectively connected to the microprocessor control unit, the sieve plate management interface is connected to the 1-n level encryption and decryption sieve plate unit, and the key management unit is connected to the encryption channel unit , The non-encrypted channel unit is connected. 9. A kind of integrated card combination according to claim 7, characterized in that: said hierarchical authorization module adopts symmetric, asymmetric, DES, RSA, GPG, IDES information encryption and decryption, digital signature technology and authentication mechanism, Combined with the server, it can be configured with strong secret, weak secret, and public information at different levels, which can be selectively read or forwarded by PC terminals. 10. An integrated card combination according to claim 8, characterized in that: the physical layer of the data transmission interface between the integrated card combination and the server or the integrated card combination and the PC terminal communication can be either limited or unlimited. A way to realize data transmission between each other.

Images