CN111275432A - Security authentication method, device and system - Google Patents

Abstract

The invention provides a security authentication method for a payable electronic card, comprising the following steps: s1, starting the display of the electronic card; s2, inputting authentication information of the user and activating the electronic card; s3, binding the authentication information to the electronic card to form binding information; and S4, uploading the binding information to a legal platform, so that the platform can start or close the set function of the electronic card according to the binding information in subsequent services. The invention also discloses a device and a system for safety certification. The safety authentication, the device and the system implementing the technical scheme of the invention can ensure the unique correspondence between the electronic card and the user, and are favorable for preventing the electronic card from being stolen or illegally accessed.

Description

A security authentication method, device and system

technical field

The invention relates to the field of Internet of Things, and in particular, to a method, device and system for security authentication.

Background technique

The electronic card that can scan the code to pay can realize the scan code payment through the card, so that the elderly and children can use Alipay. The card has a dynamic payment code, which can realize offline one-click payment. The electronic card is equivalent to the change card for the elderly and children. By binding the ID of the electronic card, you can also query consumption records through the Alipay APP to realize recharge, etc.

With the increasing use of electronic payment, the card has more and more functions, and it is necessary to verify the legality and uniqueness of the card to ensure that the value-added services of the card are provided to legally designated users. Unlike mobile phones, electronic cards can enter a virtual account name and password to ensure uniqueness. The unique ID of traditional electronic cards is set at the factory. Each manufacturer ensures the uniqueness of the ID during the production process, so there is no guarantee between different manufacturers. The ID of the card will not be repeated. With the increasing number of functions of the card (including payment and value-added services), the identification of the card is also very important. People need to exclude cloned or illegal cards to ensure the unique correspondence of the card ID used by the user. the user himself.

SUMMARY OF THE INVENTION

In order to solve the above problems, the present invention provides a method, device and system for security authentication.

The technical scheme of the present invention is realized as follows:

The invention discloses a method for security authentication, which is used for a payable electronic card, including:

S1. Start the display of the electronic card;

S2, input the authentication information of the user, and activate the electronic card;

S3, binding the authentication information to the electronic card to form binding information;

S4. Upload the binding information to a legitimate platform, so that the platform will enable or disable the function of setting the electronic card according to the binding information in subsequent services.

Further, there are the following steps before the step S4:

A1. Set the ID and key of the electronic card and make a certificate;

A2. Burn the certificate into the electronic card;

A3. Decode the certificate, and extract the ID and key together with the authentication information to form binding information.

Further, there are the following steps before the step S4:

B1. Set the ID and key of the electronic card;

B2. Burn the ID and the key to the security chip of the electronic card;

B3. Decode the security chip, and extract the ID and key together with the authentication information to form binding information.

Further, there are the following steps after the described step S1:

S11, if an illegal program reads the electronic card, the illegal reading is prohibited.

The invention discloses a safety authentication device for a payable electronic card, comprising:

a starting unit for starting the display of the electronic card;

an activation unit for inputting the user's authentication information to activate the electronic card;

a binding unit for binding the authentication information to the electronic card to form binding information;

The uploading unit is used for uploading the binding information to a legal platform, so that the platform can enable or disable the function of setting the electronic card according to the binding information in subsequent services.

Further, there are the following units in front of the uploading unit:

a certificate making unit, used to set the ID and key of the electronic card and make a certificate;

a certificate burning unit, used for burning the certificate to the electronic card;

The certificate decoding unit is used for decoding the certificate, and extracting the ID and key together with the authentication information to form binding information.

Further, there are the following units in front of the uploading unit:

a setting unit for setting the ID and key of the electronic card;

a burning unit, for burning the ID and the key to the security chip of the electronic card;

The decoding unit is used for decoding the security chip, and extracting the ID and key together with the authentication information to form binding information.

Further, the startup unit also has the following units:

The prohibiting unit is used for prohibiting illegal reading if an illegal program reads the electronic card.

The invention discloses a security authentication system, comprising a payable electronic card and a back-end server, wherein the back-end server is connected to the electronic card, and the electronic card includes the above-mentioned device.

Implementing a security authentication, device and system of the present invention has the following beneficial technical effects:

Different from the prior art, the electronic card that can scan the code payment cannot guarantee the uniqueness corresponding to the user, the security authentication, device and system of the present invention can ensure the unique correspondence between the electronic card and the user, which is beneficial to prevent theft or being stolen. Unauthorized access.

Description of drawings

In order to illustrate the embodiments of the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that are used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can also be obtained based on these drawings without any creative effort.

1 is a flowchart of a method for security authentication according to a first embodiment of the present invention;

2 is a flowchart of a method for security authentication according to a second embodiment of the present invention;

3 is a flowchart of a method for security authentication according to a third embodiment of the present invention;

4 is a block diagram of a device for security authentication according to the first embodiment of the present invention;

5 is a block diagram of a device for security authentication according to a second embodiment of the present invention;

6 is a block diagram of a device for security authentication according to a third embodiment of the present invention;

FIG. 7 is a system block diagram of security authentication according to an embodiment of the present invention.

Detailed ways

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only a part of the embodiments of the present invention, rather than all the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

Referring to FIG. 1, an embodiment of the present invention, a method for security authentication, used for a payable electronic card, includes:

S1. Start the display of the electronic card;

You can press the power button of the electronic card to start the display of the display unit.

S2, input the authentication information of the user, and activate the electronic card;

The user's authentication information includes the user's name, ID number or a password set by the individual, and may also be the feature information of face recognition.

To use the new card, first let the user input the user's authentication information and save it in the electronic card, and then transmit the electronic card to the platform (backend server). The only electronic card.

The identification function is added to the electronic card, that is, the unique ID, to ensure that each card ID of the same manufacturer is unique, and it can also ensure that each card ID of different manufacturers is unique.

S3, binding the authentication information to the electronic card to form binding information;

Electronic cards need to be authenticated when using some specific services to prevent card cloning, and services that users care about are stolen and used by other users; each card using a specific service has a unique ID and is legal, so that once a certain service appears Some exceptions, such as card loss, etc., the card can be locked quickly;

The verification algorithm and ID can be placed in a separate security chip or in the designated data area of the chip, but this data area must be protected. Once an illegal program reads the content of this data area, the illegal program reading is directly prohibited. fetch, or the contents of the data area are self-destructed.

S4. Upload the binding information to a legitimate platform, so that the platform will enable or disable the function of setting the electronic card according to the binding information in subsequent services.

When a user binds an electronic card to use some value-added services (such as payment, membership privileges), the platform verifies the validity and uniqueness of the ID and key of the electronic card, and the electronic card can also verify the legitimacy of the platform, confirming that it is a legal card and After the legal platform is established, the platform synchronizes the electronic card information for subsequent service use.

In another embodiment, referring to FIG. 2 , before step S4, there are the following steps:

A1. Set the ID and key of the electronic card and make a certificate;

A2. Burn the certificate into the electronic card;

A3. Decode the certificate, and extract the ID and key together with the authentication information to form binding information.

That is: first assign ID and key to generate certificate,

Then burn and write to the electronic card during production,

When the electronic card program runs, the ID and key information are extracted.

When a user binds an electronic card to use some value-added services, the platform verifies the uniqueness and legitimacy of the electronic card according to the key and ID, and the electronic card can also verify the legitimacy of the platform. After confirming that it is a legitimate card, the platform synchronizes the card information.

Or, in yet another embodiment, referring to FIG. 3, the following steps are also performed before the step S4:

B1. Set the ID and key of the electronic card;

B2. Burn the ID and the key to the security chip of the electronic card;

B3. Decode the security chip, and extract the ID and key together with the authentication information to form binding information.

That is: first program the assigned ID and key to the security chip,

The security chip is integrated during card production.

When the electronic card program runs, the ID and key information are extracted.

When the user binds the card to use some value-added services (such as payment, membership privileges), the platform verifies the validity and uniqueness of the card's ID and key, and the card can also verify the legitimacy of the platform. After confirming that it is a legitimate card and a legitimate platform , the platform synchronizes card information for subsequent service use.

In addition, there are the following steps after step S1:

S11, if an illegal program reads the electronic card, the illegal reading is prohibited.

The device for implementing the above method is further described below. For the part not described in the device, reference may be made to the description of the above method.

Please refer to FIG. 4, the first embodiment, a security authentication device 1, used for a payable electronic card, including:

a start-up unit 10 for starting the display of the electronic card;

The activation unit 20 is used for inputting the authentication information of the user to activate the electronic card;

a binding unit 30, configured to bind the authentication information to the electronic card to form binding information;

The uploading unit 40 is used for uploading the binding information to a legitimate platform, so that the platform can enable or disable the function of setting the electronic card according to the binding information in subsequent services.

In the second embodiment, referring to FIG. 5 , the uploading unit 40 also has the following units in front of it:

a certificate making unit, used to set the ID and key of the electronic card and make a certificate;

a certificate burning unit, used for burning the certificate to the electronic card;

The certificate decoding unit is used for decoding the certificate, and extracting the ID and key together with the authentication information to form binding information.

In the third embodiment, referring to FIG. 6 , the upload unit 40 also has the following units:

a setting unit for setting the ID and key of the electronic card;

a burning unit, for burning the ID and the key to the security chip of the electronic card;

The decoding unit is used for decoding the security chip, and extracting the ID and key together with the authentication information to form binding information.

In addition, after starting the unit 10, it also has the following units:

The prohibiting unit 15 is used for prohibiting illegal reading if there is an illegal program reading the electronic card.

The uniqueness and legitimacy of identity can be verified by means of software;

Hardware-assisted methods can also be used to verify the uniqueness and legitimacy of the identity;

Please refer to FIG. 7 . In the first embodiment, a security authentication system 100 includes a payable electronic card 200 and a background server 300. The background server 300 is connected to the electronic card 200, and the electronic card 200 includes the above-mentioned device 1,

The backend server 300 can be wired or wirelessly connected to the electronic card 200 through 3G, 4G, WIFI, or the like.

The working process of the system 100 is as follows:

Activate the display unit of the newly sold electronic card 200;

The electronic card 200 starts to run the authentication system to activate the electronic card 200, and waits for the user to input the name, ID card or password or face recognition feature;

The authentication information is bound to the electronic card 200 to form binding information;

After the user binds the electronic card 200, when using some value-added services (eg payment, membership privileges), the background server 300 (platform) verifies the validity and uniqueness of the ID and key of the electronic card 200.

The electronic card 200 can also verify the legitimacy of the platform, and after confirming that it is a legitimate card and a legitimate platform, the platform synchronizes the card information for subsequent service use.

Implementing a security authentication, device and system of the present invention has the following beneficial technical effects:

Different from the prior art, the electronic card that can scan the code payment cannot guarantee the uniqueness corresponding to the user, the security authentication, device and system of the present invention can ensure the unique correspondence between the electronic card and the user, which is beneficial to prevent theft or being stolen. Unauthorized access.

As will be appreciated by one skilled in the art, embodiments of the present invention may be provided as a method, system, or computer program product. Accordingly, the present invention may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It will be understood that each process and/or block in the flowchart illustrations and/or block diagrams, and combinations of processes and/or blocks in the flowchart illustrations and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to the processor of a general purpose computer, special purpose computer, embedded processor or other programmable data processing device to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing device produce Means for implementing the functions specified in a flow or flow of a flowchart and/or a block or blocks of a block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory result in an article of manufacture comprising instruction means, the instructions The apparatus implements the functions specified in the flow or flows of the flowcharts and/or the block or blocks of the block diagrams.

These computer program instructions can also be loaded on a computer or other programmable data processing device to cause a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process such that The instructions provide steps for implementing the functions specified in the flow or blocks of the flowcharts and/or the block or blocks of the block diagrams.

Although the preferred embodiments of the present invention have been described, additional changes and modifications to these embodiments may occur to those skilled in the art once the basic inventive concepts are known. Therefore, the appended claims are intended to be construed to include the preferred embodiment and all changes and modifications that fall within the scope of the present invention.

Obviously, those skilled in the art can make various changes and modifications to the embodiments of the present invention without departing from the spirit and scope of the embodiments of the present invention. Thus, provided that these modifications and variations of the embodiments of the present invention fall within the scope of the claims of the present invention and their equivalents, the present invention is also intended to include such modifications and variations.

Claims (9)

1. A method of safety authentication, for a payable electronic card, is characterized in that, comprising: S1. Start the display of the electronic card; S2, input the authentication information of the user, and activate the electronic card; S3, binding the authentication information to the electronic card to form binding information; S4. Upload the binding information to a legitimate platform, so that the platform will enable or disable the function of setting the electronic card according to the binding information in subsequent services. 2. method according to claim 1 is characterized in that, also has following steps before described step S4: A1. Set the ID and key of the electronic card and make a certificate; A2. Burn the certificate into the electronic card; A3. Decode the certificate, and extract the ID and key together with the authentication information to form binding information. 3. method according to claim 1, is characterized in that, also has following steps before described step S4: B1. Set the ID and key of the electronic card; B2. Burn the ID and the key to the security chip of the electronic card; B3. Decode the security chip, and extract the ID and key together with the authentication information to form binding information. 4. the method according to claim 1 or 2 or 3, is characterized in that, also has following steps after described step S1: S11, if an illegal program reads the electronic card, the illegal reading is prohibited. 5. A device for security authentication, used for a payable electronic card, characterized in that, comprising: a starting unit for starting the display of the electronic card; an activation unit for inputting the user's authentication information to activate the electronic card; a binding unit for binding the authentication information to the electronic card to form binding information; The uploading unit is used for uploading the binding information to a legal platform, so that the platform can enable or disable the function of setting the electronic card according to the binding information in subsequent services. 6. The device according to claim 5, characterized in that, before the uploading unit, it also has the following units: a certificate making unit, used to set the ID and key of the electronic card and make a certificate; a certificate burning unit, used for burning the certificate to the electronic card; The certificate decoding unit is used for decoding the certificate, and extracting the ID and key together with the authentication information to form binding information. 7. The device according to claim 5, characterized in that, it also has the following units before the uploading unit: a setting unit for setting the ID and key of the electronic card; a burning unit, for burning the ID and the key to the security chip of the electronic card; The decoding unit is used for decoding the security chip, and extracting the ID and key together with the authentication information to form binding information. 8. The device according to claim 5, 6 or 7, characterized in that, the startup unit further has the following units: The prohibiting unit is used for prohibiting illegal reading if an illegal program reads the electronic card. 9. A system for security authentication, comprising a payable electronic card and a back-end server, wherein the back-end server is connected to the electronic card, wherein the electronic card comprises any one of claims 5 to 8 The device described is required.

Images