CN111711634A - ID card reading system and method based on card body information - Google Patents

Abstract

The invention discloses an ID card reading system and method based on card body information. Among them, the ID card reading system based on card body information includes: NFC ID card reading terminal, ID card verification gateway, central business server and verification database; NFC ID card reading terminal adopts the universally integrated NFC near field communication technology to recognize Read the card body information of the ID card, and then transmit the card body information to the central business server through the ID card verification gateway. Online reading of information. In the above ID card reading process, only one interaction between the NFC ID card reading terminal and the ID card can be used to read the entire data of the ID card. Moreover, in the above identification process, the card body information of the resident ID card is used as the query basis, and the ID card information is checked online through the back end, and the reading pressure is changed from the front end to the back end, which improves the processing speed.

Description

ID card reading system and method based on card body information

technical field

The invention relates to an ID card reading system based on card body information, and also relates to an ID card reading method based on card body information.

Background technique

In recent years, a large number of mobile Internet applications (Application, referred to as App) have emerged, and the cyberspace urgently needs to re-plan the security service mechanism that can be bound to "people". Identity authentication and verification have become an effective way to ensure controllable network security. The second-generation resident ID card is the most reliable and popular legal document for Chinese residents. In cyberspace, by reading the ID card, the first step in building trust and handling tasks can be achieved.

The current mainstream ID card reading technology is to use the built-in or external Bluetooth, radio frequency and other communication methods on the reading terminal to read the ID card, and the ID card decoding module (ie the SAM module) interacts with the ID card multiple times to obtain an encrypted identity. Then decrypt the encrypted fragment to obtain the full data of the ID card. Among them, the SAM module is integrated in the ID card reading terminal.

In order to realize functions such as identity authentication and ID card decoding, the realization process of the existing ID card reading technology is shown in Figure 1, including the following steps: (1) the main controller unit receives the relevant identification instructions for the ID card; ( 2) The main controller unit and the radio frequency control unit perform signaling interaction, and the antenna control unit transmits radio frequency signals of a certain frequency; (3) When there is a second-generation ID card close to the radio frequency signal area, the chip in the ID card is blocked. activate and transmit the resident identity information in the chip; (4) the transmitted signal is received by the radio frequency antenna and transmitted to the radio frequency control unit; (5) the radio frequency control unit sends the resident identity card information to the main controller; (6) the main The controller sends the received resident identity card information to the SAM control unit to request authentication; (7) the SAM control unit analyzes and compares the resident identity card information; (8) if the comparison is successful, the identity card verification is passed, if the comparison is successful If it fails, the ID verification fails. Among them, the interaction between the ID card reading terminal and the resident ID card is shown in Figure 2. During the process of ID card reading, the ID card reading terminal and the resident ID card need to interact multiple times. It needs to be read again, which affects the reading efficiency.

In addition, the current main ID verification devices are mostly limited in three aspects: (1) How to read ID cards: ID card reading methods mainly include ID card reading machines based on radio frequency devices, and external ID cards based on Bluetooth. Readers, etc., the former is bulky and cannot be carried around, and information needs to be displayed through a computer; the latter is an external second-generation ID card reader separated from the mobile communication device, which cannot be operated with one hand and does not meet the needs of mobile portability. (2) Online verification: The traditional ID card reading device generally only has the function of reading ID cards offline, and cannot verify the identity information and the validity of the verification information online. It cannot verify the information of blacklisted personnel and key personnel online, which is not conducive to the public security. Business linkage. (3) Limited hardware: Most of the ID card reading devices and networking devices are dedicated hardware devices. Users need to purchase dedicated devices to complete the verification function, and the hardware conditions are limited.

SUMMARY OF THE INVENTION

The primary technical problem to be solved by the present invention is to provide an ID card reading system based on card body information.

Another technical problem to be solved by the present invention is to provide an ID card reading method based on card body information.

In order to realize above-mentioned technical purpose, the present invention adopts following technical scheme:

According to a first aspect of the embodiments of the present invention, an ID card reading system based on card body information is provided, including:

NFC ID card reading terminal, the NFC ID card reading terminal is used to read the card body information of the ID card through NFC near field communication technology, and is used to encrypt and sign the card body information and the terminal information, and send it to the ID card verification gateway;

ID card verification gateway, the ID card verification gateway is used to receive the request information of the NFC ID card reading terminal, parse the information passed through the signature verification, obtain the ID card body information and terminal information, and then verify the ID card The card body information, terminal information and gateway information are encrypted and signed, and the information processed by the ID card verification gateway is sent to the central business server;

The central business server and the verification database, the central business server is used to receive the request information from the ID card verification gateway, parse the information passed through the signature verification, obtain the ID card body information, and obtain the ID card body information according to the ID card body information. Check the ID card full item data in the verification database, then encrypt and sign the ID card full item data, and return it to the NFC ID card reading terminal through the ID card verification gateway.

Preferably, the NFC ID card reading terminal includes an ID card verification middleware;

The ID card verification middleware includes an ID card information security reading component, an encryption module and a signature module; wherein, the ID card information security reading component is used to read and identify the ID card body information, and is used to read and identify the ID card information. The obtained ID card body information is encrypted once; the encryption module is used to encrypt the ID card body information and terminal information once encrypted; the signature module is used to sign the information processed by the encryption module ; The encryption module is also used to decrypt the information returned from the ID card verification gateway.

Preferably, the ID card verification middleware is used to provide a unified ID card verification basic library interface for multiple client APPs.

Preferably, the NFC ID card reading terminal reads the card body information of the ID card through an NFC communication module; the NFC communication module is a terminal NFC module integrated in the NFC ID card reading terminal, or, The NFC communication module is an externally expanded NFC card reader connected to the NFC ID card reading terminal.

Preferably, the ID card verification gateway and/or the central service server adopts the dual-machine hot backup technology.

Preferably, the verification database stores the full-item information of the ID card, and can be associated with other information related to the full-item information of the ID card.

Preferably, the ID card reading system based on the card body information further includes a monitoring center connected to the central business server, and the monitoring center is used for interacting with the ID card verification gateway and recording business log information.

Preferably, an APN dedicated line is used between the NFC ID card reading terminal and the ID card verification gateway, which is physically isolated from the Internet, and at the same time, a security boundary is used between the ID card verification gateway and the central service server. Physical isolation.

According to a second aspect of the embodiments of the present invention, a method for reading an ID card based on card body information is provided, including the following steps:

(1) The NFC ID card reading terminal reads the card body information of the resident ID card through NFC near field communication technology, and collects the terminal information, then encrypts and signs the ID card body information and the terminal information, and then encapsulates it into a request, Sent to the ID verification gateway;

(2) The ID verification gateway receives the request information from the NFC ID card reading terminal, and verifies the integrity and reliability of the message. If the verification is passed, it parses the request data, obtains the ID card body information and terminal information, and then verifies the identity The card body information, terminal information and gateway information are encrypted and signed, then encapsulated into a request and sent to the central business server;

(3) The central business server receives the request information from the ID card verification gateway, and verifies the integrity and reliability of the message. If the verification is passed, it parses the request data, obtains the ID card body information, and queries the verification database according to the ID card body information. , if the card body information is valid, the entire ID card data can be obtained, encrypted and signed, and returned to the ID card verification gateway;

(4) After the ID card verification gateway receives the data returned by the central business server, it verifies the integrity and reliability of the data. If the verification is passed, it decrypts, and then encrypts and signs the decrypted ID card data, and returns to the NFC ID card reading terminal;

(5) After the NFC ID card reading terminal receives the data returned by the ID card verification gateway, it verifies the integrity and reliability of the data, and if the verification is passed, it decrypts to obtain the full data of the ID card.

Preferably, the ID card reading method based on the card body information further includes step (6): the monitoring center records the business log information in the whole process, and the administrator can check the operation status of the ID card verification gateways distributed in various places through the monitoring center .

The ID card reading system based on the card body information provided by the present invention, wherein, the NFC ID card reading terminal adopts the generally integrated NFC near field communication technology to read the card body information of the ID card, and then passes the ID card verification gateway. The card body information is sent to the central business server, and the central business server queries and checks the database through the ID card body information network, obtains the full information of the ID card, and realizes the online reading of the ID card information. In the above ID card reading process, the NFC ID card reading terminal and the ID card only need one interaction to read the card body information of the ID card, and then obtain the full ID card information through the background verification database. The above-mentioned ID card reading system uses the card body information of the resident ID card as the query basis, and checks the full information of the ID card online through the back-end, instead of the traditional method of analyzing the full-item information of the ID card offline based on the SAM module at the front end. The reading pressure is changed from the front end to the back end, which improves the processing speed.

Description of drawings

Fig. 1 is the realization flow chart of the ID card reading technology in the prior art;

Figure 2 is a schematic diagram of the interaction between the ID card reading terminal and the ID card in the existing ID card reading technology;

Fig. 3 is the structure diagram of the ID card identification system based on card body information provided by the present invention;

4 is a schematic diagram of the interaction between the first ID card reading terminal and the ID card in the system provided by the present invention;

5 is a schematic diagram of the interaction between the second ID card reading terminal and the ID card in the system provided by the present invention;

Fig. 6 is the schematic flow chart that utilizes the ID card identification method provided by the present invention to realize ID card verification;

Fig. 7 is the schematic flow chart of utilizing the ID card identification method provided by the present invention to realize the verification of personnel and vehicle information;

FIG. 8 is a schematic flowchart of implementing a mobile certificate application using the ID card identification method provided by the present invention.

Detailed ways

The technical solutions of the present invention will be described in further detail below with reference to the accompanying drawings and specific embodiments.

A large number of mobile Internet applications (Application, referred to as App) have emerged, and the cyberspace urgently needs to re-plan the security service mechanism that can bind with "people". Identity authentication and verification have become an effective way to ensure network security and controllability. The verification of ID cards is the first step in building trust and handling tasks. On the one hand, users who have high security requirements, such as public security and other government and enterprise customers, need to bind with people when using various APP applications, especially those related to key libraries and key businesses. It can not only verify the validity of the user's identity information, but also obtain all the data of the user's ID card, which can be used to query and call other services. On the other hand, in order to facilitate people's travel and ensure the safety of public places and important occasions, many scenarios such as airports, railway stations, hospitals, and self-service machines require various ID verification devices. Therefore, it is necessary to provide an ID card reading system with simple structure, low cost, and easy promotion, which is used for ID card verification.

At present, the second-generation resident ID card is the most reliable and popular legal document for Chinese residents. Compared with the traditional ID card, the second-generation resident ID card has a built-in memory chip, which stores the card body information of the resident ID card, which is cipher text information and cannot be directly read. The ID card reading system and method based on the card body information provided by this application, that is, by obtaining the ID card body information and querying the verification database online, obtaining the full item information of the ID card, and realizing the online reading of the ID card information.

Specifically, as shown in FIG. 3 , the ID card reading system based on the card body information provided by the present invention includes: an NFC ID card reading terminal 10 , an ID card verification gateway 20 , a central business server 30 , and a verification database 40 and monitoring center 50.

The NFC ID card reading terminal 10 refers to an intelligent mobile terminal with NFC function, which is used to read the card body information of the ID card 1 through the NFC near field communication technology, and is used to encrypt and sign the card body information and the terminal information. (Preferably, it includes the process of encrypting the card body information once, and including the process of re-encrypting and signing the once-encrypted card body information and terminal information), and sending it to the ID card verification gateway 20 . The ID card verification gateway 20 is used to receive the request information from the NFC ID card reading terminal 10, and analyze the information passed through the signature verification to obtain the ID card body information (preferably, the ID card body that has been encrypted once information) and terminal information, then encrypt and sign the ID card body information (preferably, the once-encrypted ID card body information), terminal information and gateway information. The information is sent to the central service server 30 . The central service server 30 is used to receive the request information from the ID card verification gateway 20, analyze the information passed through the signature verification, obtain the ID card body information, and query the ID card full items from the verification database 40 according to the ID card body information The data is then encrypted and signed to protect the entire data of the ID card, and returned to the NFC ID card reading terminal 10 through the ID card verification gateway 20 .

In the above-mentioned ID card reading system based on card body information, the NFC ID card reading terminal 10, the ID card verification gateway 20 and the central service server 30 use an independent network isolated from the Internet for data exchange, and the NFC ID card reader During the data exchange process between the terminal 10, the ID verification gateway 20 and the central service server 30, a data encryption and signature verification protection mechanism based on the national secret algorithm is adopted. A security protection mechanism is adopted between the NFC ID card reading terminal 10 and the ID card verification gateway 20, between the ID card verification gateway 20 and the central business server 30, and between the central business server 30 and the verification database 40, and has non-repudiation, Integrity and confidentiality, etc.

As shown in FIG. 4 and FIG. 5 , the NFC ID card reading terminal 10 can be implemented based on the improvement of smart mobile terminals (such as smart handheld devices with NFC function) widely used in the market, instead of a special device for ID verification, and the cost is low , low power consumption, and user experience is better and more convenient. By installing a security protection system with high confidentiality on the basis of ordinary NFC smart mobile terminals, making it a security reinforced terminal with dual operating systems of the original general system and the security system, the security level of the identity reading terminal can be improved. Most typically, a mobile police terminal can be used as an NFC security hardening terminal. The security system is internally integrated with security reinforcement components, and the complete ID card information obtained from the verification database 40 is guaranteed in the terminal security, and the terminal can be managed uniformly in the background.

The NFC ID card reading terminal 10 uses the NFC near field communication technology to read the card body information of the ID card 1, instead of the traditional communication methods such as Bluetooth or radio frequency, and the card reading efficiency is higher. The NFC ID card reading terminal 10 has an NFC communication module, which is used to access the ID card 1 by using NFC to obtain the card body information of the resident ID card 1 . The NFC communication module may be the terminal NFC module 16 (see FIG. 4 ) integrated inside the NFC ID card reading terminal 10 , or the NFC communication module may also be an externally expanded NFC reader connected to the NFC ID card reading terminal 10 . The card reader 17 (see FIG. 5 ); the terminal NFC module 16 and the external expansion NFC card reader 17 are used to read the card body information of the ID card 1 . For a smart terminal without NFC function, it can be read by an external NFC card reader 17; for a terminal with limited NFC antenna recognition performance, the antenna performance can also be enhanced by an external NFC card reader 17.

The NFC ID card reading terminal 10 includes an ID card verification middleware 12 . The ID card verification middleware 12 includes an ID card information security reading component 13, an encryption module 14, a signature module 15, and the like. The core module of the ID card verification middleware 12 is the ID card information security reading component 13 . The ID card information security reading component 13 is used to read and identify the ID card body information, and is used to encrypt the read ID card body information once. The encryption module 14 is used for re-encrypting the ID card body information and terminal information that have been encrypted once. The signature module 15 is used to sign the information processed by the encryption module 14 . The encryption module 14 is also used for decrypting the information returned from the ID verification gateway.

The ID card verification middleware 12, which integrates the ID card information security reading component 13, runs on the NFC ID card reading terminal 10, and is implemented as multiple client APPs (for example, ID card verification APP client or a The third-party APP)11 provides a unified ID card verification basic library interface, which can be provided externally for extended applications, such as the verification business associated with databases such as key monitoring groups and car/driving files. The APP calls the ID verification middleware through integration. It can realize functions such as ID verification and authentication, which is convenient for subsequent users to use and integrate functions.

On the NFC ID card reading terminal 10, an ID card verification APP client or other APP (eg, verification assistant APP, mobile certificate assistant APP) client that needs to verify identity information is installed, and various APP clients 11 pass the ID card The verification middleware 12 obtains the full item information of the ID card. The ID card verification middleware 12 uses the NFC communication module to access the ID card 1, obtains the card body information of the resident ID card, and then interacts with the ID card verification gateway 20 to obtain the full item information of the ID card.

The above-mentioned NFC ID card reading terminal 10 uses the card body information of the second-generation resident ID card as the basis for reading whether the ID card is valid and obtaining the ID card information; once the card body information is read, the ID card information can be checked online, and the ID card information can be checked online. The non-traditional method based on the SAM module requires multiple interactions and offline analysis to obtain the detailed information of the ID card, which significantly improves the reading efficiency and shortens the response delay.

The ID card verification gateway 20 provides ID card information query service to the ID card verification middleware 12 installed on the NFC ID card reading terminal 10 by accessing the central service server 30, and the ID card verification middleware 12 returns it to each APP client end 11. The ID card verification gateway 20 is deployed in each province and city, and the ID card verification gateway 20 deployed in each province and city may be deployed with only one set or dual backup. The ID verification gateway 20 adopts the keepalive dual-machine hot backup technology, which can ensure stable operation.

The central business server 30 is connected with the ID card verification gateways 20 in various places, and provides the export of ID card verification services to the outside world. The complete ID card information returned by the central service server 30 includes basic information such as name, ID number, gender, and address, as well as extended information such as face photos, so as to facilitate business expansion. The central business server 30 for data interaction with the ID card verification gateways 20 deployed in various provinces and cities is only centrally deployed with one set or two backups. The central service server 30 adopts the keepalive dual-machine hot backup technology, which can ensure stable operation.

The verification database 40 stores the complete information of the ID card, and can be associated with other information related to the complete information of the ID card, such as a blacklist, a list of dishonest persons, a list of fugitives, and the like. Using the method of real-time query and verification database 40, ID card information can be verified online to ensure the freshness and validity of ID card information. At the same time, it can be combined with blacklist and key personnel database to realize Internet expansion related to "people". application.

The monitoring center 50 performs data interaction with the ID card verification gateways 20 arranged in various provinces and cities for recording business log information; by displaying the access information of the ID card verification gateways 20 in various places on the web page, it is convenient for administrators to count and maintain business information, Including ID verification success and failure times, business details, log information, etc. The monitoring center 50 is used to centrally monitor the real-time operation of the ID card verification gateways 20 in various places, which can be tracked and audited to ensure the stable and reliable operation of the system.

In the above-mentioned ID card reading system based on card body information, secure link transmission is adopted. On the one hand, an APN dedicated line is used between the NFC ID card reading terminal 10 and the ID card verification gateway 20, which is physically isolated from the Internet to reduce attack risks and ensure link security. On the other hand, a security boundary is used for physical isolation between the ID card verification gateway 20 and the central service server 30, and sensitive data is stored in the security area, and data leakage is prevented through the security boundary. The security boundary can effectively block a variety of attack methods and means, and control and audit the requested data to prevent data leakage. After the verification is passed, the ID card information will be sent to the gateway.

The ID card reading method based on the card body information provided by the present invention utilizes the NFC ID card reading terminal 10 (for example, a mobile police terminal) with NFC function and NFC supports TYPE-B cards to query and check the database online in real time 40, and return ID card information to realize online, efficient and convenient ID card reading technology. Specifically, it includes the following steps:

(1) The NFC ID card reading terminal 10 reads the card body information of the resident ID card 1 through the NFC near field communication technology, and collects the terminal information, then encrypts and signs the ID card body information and the terminal information, and then encapsulates it into a The request is sent to the ID verification gateway 20;

(2) The ID card verification gateway 20 receives the request information from the NFC ID card reading terminal 10, and verifies the integrity and reliability of the message. Encrypt and sign the ID card body information, terminal information and gateway information, then encapsulate it into a request and send it to the central service server 30;

(3) The central service server 30 receives the request information from the ID card verification gateway 20, verifies the integrity and reliability of the message, and if the verification is passed, parses the request data, obtains the ID card body information, and inquires according to the ID card body information Checking the database 40, if the card body information is valid, the full data of the ID card can be obtained, encrypted and signed, and returned to the ID card verification gateway 20;

(4) After the ID card verification gateway 20 receives the data returned by the central service server 30, it verifies the integrity and reliability of the data, and if the signature verification is passed, decrypts it, and then encrypts and returns the decrypted ID card full-item data with a signature. to the NFC ID card reading terminal 10;

(5) After the NFC ID card reading terminal 10 receives the data returned by the ID card verification gateway 20, it verifies the integrity and reliability of the data, and if the signature verification is passed, decrypts and obtains the entire ID card data.

Preferably, in step (1), after the NFC ID card reading terminal 10 reads the card body information of the resident ID card 1 through the NFC near field communication technology, the ID card information security reading component in the ID card verification middleware 12 13 Read and identify the ID card body information, and encrypt the read ID card body information once; then, the encryption module 14 encrypts the once encrypted ID card body information and terminal information again; sign The module 15 signs the information processed by the encryption module 14 ; then encapsulates the encrypted and signed information into a request and sends it to the ID verification gateway 20 .

Correspondingly, in step (2), the ID card verification gateway 20 receives the request information from the NFC ID card reading terminal 10, verifies the integrity and reliability of the message, and if the signature is passed, then parses the request data, and obtains an encrypted The ID card body information and terminal information are encrypted and signed, and the once encrypted ID card body information, terminal information and gateway information are encrypted and signed, and then encapsulated into a request and sent to the central service server 30 .

In step (3), the central service server 30 receives the request information from the ID card verification gateway 20, verifies the integrity and reliability of the message, and if the signature is passed, parses the request data to obtain the original unencrypted ID card body information , and then query the verification database 40 according to the ID card body information. If the card body information is valid, the entire ID card data can be obtained, encrypted and signed, and returned to the ID card verification gateway 20 .

The data transmission process in steps (4) and (5) is the same as the above-mentioned process.

In addition, preferably, the above-mentioned ID card reading method based on card body information can also include step (6): the monitoring center records business log information throughout the process, and the administrator can check the operation of the ID card verification gateways distributed in various places through the monitoring center. Happening.

Preferably, the above-mentioned ID card reading method based on card body information may further include step (7): the NFC ID card reading terminal 10 collects the portrait of a living body, performs portrait authentication in combination with the entire information of the ID card, and verifies whether the ID card is consistent with the portrait. .

The second-generation ID card reading device and method based on card body information provided by this application has significant advantages compared with traditional ID card verification under the situation of such urgent need for ID card reading. Different from other reading methods, on the one hand, the hardware of this patent adopts intelligent mobile terminals widely used in the market instead of special verification equipment, which has low cost and low power consumption; on the other hand, this patent adopts NFC near field communication technology instead of traditional Bluetooth, radio frequency and other communication technologies, using NFC near field communication technology, combined with the card body information of the resident ID card, can obtain the card body information of the ID card with only one interaction, and then obtain the full information of the ID card through the verification database, with remarkable efficiency To improve, for terminals without integrated NFC module, an external NFC card reader can also be installed, which is widely applicable; on the other hand, this patent uses the information of the resident ID card body as the query basis, and the ID card information is checked online through the back end, while the The non-traditional method based on the SAM module to parse ID card information offline at the front end changes the reading pressure from the front end to the back end, which improves the processing speed. At the same time, this application can also check the validity of ID card information online in real time, especially for sensitive persons such as blacklisted persons and fugitives, which is convenient for public security business linkage. Further, the ID verification middleware in the NFC ID card reading terminal can be encapsulated into SDK and APP, which can run independently, read and display the verification result of the ID card, and can also be called by a third-party APP, which is convenient for the first time. The third-party APP application developers expand the application and develop more abundant Internet application resources related to "people", so as to make the iterative development more efficient and flexible. There are very broad application prospects.

Example 1

When the ID card verification middleware is designed to be used by an independent client (“ID card verification APP” client), the structure of the implementation system used is exactly the same as the above content. The corresponding detailed implementation process is shown in Figure 6, including the following steps:

(10) The user opens the "ID verification APP" client, uses NFC to read the information of the resident ID card body, collects terminal information, signs all the data with the national secret algorithm, encapsulates it into a TCP request, and sends it to the ID card verification gateway ;

(11) The ID card verification gateway receives the request message from the "ID card verification APP" client, and verifies the reliability and integrity of the information. If the data is unreliable and incomplete, it will directly return an error code. ID card body information, and then sign data such as terminal information, gateway information, and resident ID card body information using the national secret algorithm, encapsulate it into an HTTP request, and send it to the central business server; if the verification fails, an error message will be returned to the client.

(12) The central business server receives the request message from the ID verification gateway to verify the reliability and integrity of the data. If the data is unreliable and incomplete, it will directly return an error code. If the data is complete and reliable, it will parse and obtain the resident ID card body information. Query the verification database according to the card body information. If the card body information is valid, you can obtain the full ID card data, protect it with a signature, and return to the ID card verification gateway;

(13) After the ID verification gateway receives the response from the central business server, it verifies the reliability and integrity of the data. If the data is unreliable and incomplete, it will directly return an error code. The decrypted ID card data is encrypted, signed, and returned to the client;

(14) The "ID card verification APP" client receives the encrypted data of the ID card, and verifies the reliability and integrity of the data. After the verification is passed, it decrypts and presents it to the application interface, and the query ends;

(15) The monitoring center records the business log information throughout the process, and the administrator can view the operation of the ID verification gateways distributed in various places through the monitoring center.

The following is to set the ID card verification middleware as a plug-in and install it on the NFC ID card reading terminal, and use the client of other programs to call the ID card verification middleware to realize ID card verification and complete other functions (for example, query vehicle information. , apply for a certificate) example.

Example 2

This embodiment provides an example of verifying an ID card and querying vehicle information through a "verification assistant" client installed on the NFC ID card reading terminal.

Specifically, the system for implementing the above process includes: one or more NFC ID card reading terminals, an ID card verification gateway, a central service server, a monitoring center, and a vehicle information management server.

Among them, the NFC ID card reading terminal has NFC communication function, supports reading TYPE-B cards, and has installed the "verification assistant" client and ID card verification middleware. The ID card verification middleware internally integrates "ID card information security reading". "Get Components", the application "Verification Assistant" can interact with the ID card verification gateway by calling the middleware interface to obtain ID card information.

The ID verification gateway can communicate with the "Verification Assistant" client and the central business server, and provide ID card information query services to the "Verification Assistant" client by accessing the central business server.

The central business server has the ability to provide ID verification services. It can query the verification database through the resident ID card body information, and return the encrypted data of the ID card.

The monitoring center can interact with the ID verification gateway to record business information.

The vehicle information management server is used to interact with the "check assistant" client to complete business functions such as vehicle information registration and query.

The following describes the process of verifying an ID card and querying vehicle information through the "verification assistant" client provided in this embodiment. Specifically, as shown in FIG. 7 , the detailed implementation steps of this embodiment are as follows:

(20) The user opens the "Verification Assistant APP" client, opens the "Personnel Vehicle Information Verification" function, and swipes the ID card in the NFC identification area according to the prompts;

(21) "Verification Assistant APP" obtains the information of the resident ID card by calling the ID card verification middleware, and reads the terminal's IMEI number, Keyid, package name, protocol type, APP version, device model, etc. The information is encrypted and signed by the national secret algorithm, encapsulated into a TCP request, and sent to the ID verification gateway to initiate a service request for ID verification;

(22) The ID verification gateway receives the request message from the client, performs signature verification, and verifies whether the data is complete and whether it has been tampered with. After the verification is passed, it parses the request data, obtains the information of the resident ID card body, and combines the terminal information, gateway information and Business information such as resident ID card body information is encrypted and signed by the national secret algorithm, encapsulated into an HTTP request, and sent to the central business server;

(23) The central business server receives the request message from the verification gateway, verifies the gateway data, and verifies whether the gateway data format is correct, whether the data is complete, and whether it has been tampered with. The card body information is inquired into the verification database, and after the result is obtained, it is protected by a signature, and returned to the ID verification gateway;

(24) After the ID verification gateway receives the response from the central business server, it verifies whether the data is complete and whether it has been tampered with. If the data is complete and reliable, it will be decrypted by the national secret algorithm, and then the decrypted ID card full data will be encrypted and returned with a signature. to the client;

(25) "Verification Assistant" client receives the full encrypted data of the user's ID card, and after the signature is passed, decrypts to obtain the full data;

(26) The "check assistant" client invokes the background vehicle query service to query the vehicle information corresponding to the user;

(27) The "Verification Assistant" client receives the user's vehicle information, displays the ID card information and vehicle information on the client interface, and the personnel and vehicle information verification business ends normally;

(28) The monitoring center records the business log information throughout the process, and the administrator can check the operation of the ID verification gateway through the monitoring center.

Example 3

This embodiment provides an example of verifying an ID card and applying for a mobile certificate by using a "mobile certificate assistant" client installed on the NFC ID card reading terminal.

Specifically, the system for implementing the above process includes: one or more NFC ID card reading terminals, an ID card verification gateway, a central service server, a monitoring center, and a certificate management server.

The NFC ID card reading terminal has NFC communication function and supports reading TYPE-B cards. The "mobile certificate assistant" client and ID card verification middleware have been installed. The ID card verification middleware integrates "ID card information security reading". Components", the application "Mobile Certificate Assistant" can interact with the ID card verification gateway by calling the middleware interface to obtain ID card information.

The ID verification gateway can communicate with the "Mobile Certificate Assistant" client and the central business server, and provide ID card information query services to the "Mobile Certificate Assistant" client by accessing the central business server.

The central business server has the ability to provide ID verification services. It can query the verification database through the resident ID card body information, and return the encrypted data of the ID card.

The monitoring center can interact with the ID verification gateway to record business information.

The certificate management server is used to interact with the "Mobile Certificate Assistant" client to complete business functions such as review, application, and issuance of certificate applications.

The following describes the process of verifying an ID card and applying for a mobile certificate through the "mobile certificate assistant" APP provided in this embodiment. Specifically, as shown in FIG. 8 , the detailed implementation steps of this embodiment are as follows:

(30) The user opens the "Mobile Certificate Assistant APP", clicks "Apply for Certificate", enters the mobile phone number on the "Apply for Certificate Page", and swipes the ID card in the NFC identification area according to the prompt;

(31) "Mobile Certificate Assistant APP" obtains the card body information of the resident ID card by calling the ID card verification middleware, and reads the terminal's IMEI number, Keyid, package name, protocol type, APP version, device model, etc. The collected information is encrypted and signed by the national secret algorithm, encapsulated into a TCP request, and sent to the ID verification gateway to initiate a service request for ID verification;

(32) The ID verification gateway receives the request message from the client, performs signature verification, and verifies whether the data is complete and whether it has been tampered with;

If the verification is passed, the ID card verification gateway parses the request data, obtains the resident ID card body information, signs the terminal information, resident ID card body information and gateway information and other business information with the national secret algorithm, encapsulates it into an HTTP request, and sends it To the central service server; if the verification fails, the ID card verification gateway rejects the request and returns an error message, which is displayed on the "Mobile Certificate Assistant APP" interface, and the certificate application service ends abnormally;

(33) The central service server receives the request message for verifying the gateway, verifies the gateway data, and verifies whether the gateway data format is correct, whether the data is complete, and whether it has been tampered with;

If the verification is passed, the central business server parses the request data of the verification gateway, obtains the card body information of the resident ID card, queries the verification database according to the card body information, and secures the signature after obtaining the result, and returns to the ID card verification gateway; If passed, the central service server rejects the request and returns an error message, which is displayed on the "Mobile Certificate Assistant APP" interface, and the certificate application service ends abnormally;

(34) After the ID verification gateway receives the response from the central business server, it verifies whether the data is complete and whether it has been tampered with. If the data is complete and reliable, it will be decrypted by the national secret algorithm, and then the decrypted ID card full data will be encrypted and returned with a signature. to the client;

(35) The "Mobile Certificate Assistant" APP receives the encrypted data of the user's ID card. After the verification is passed, it decrypts and obtains the entire data, and displays the ID number on the "Apply for Certificate" page;

(36) Click "Next" to enter the "Portrait Detection" page, click "Start Detection", and call the living body detection component;

The living body detection middleware collects the living body portrait through the front camera of the mobile phone, and combines the received ID verification information to verify whether the portrait is consistent with the ID card information;

If they are consistent, the portrait authentication is passed, click "Apply Now", and then click "Install Certificate" to complete the certificate application process, and the certificate application business ends normally; Abnormal end of business;

(37) The monitoring center records the business log information throughout the process, and the administrator can check the operation of the ID verification gateway through the monitoring center.

To sum up, the ID card reading system based on the card body information provided by the present invention adopts the generally integrated NFC near field communication technology, and only needs one interaction to read the entire data of the ID card. Among them, the entire ID card data can be integrated with AI technologies such as face recognition to expand richer and smarter businesses, and it can also be associated with databases such as key persons and car driver files to achieve in-depth business query and linkage. The whole system is safe and reliable. The terminal adopts intelligent security reinforcement terminal and integrates the "ID card information security reading component". The software adopts the national secret algorithm for encryption and decryption, and the signature verification protection mechanism. The hardware adopts technologies such as dedicated APN channel and security boundary. High security, high scalability, easy to use and other advantages.

The card body information-based ID card reading system and method provided by the present invention have been described in detail above. For those of ordinary skill in the art, any obvious changes made to the invention without departing from the essential spirit of the invention will constitute an infringement of the patent right of the invention and will bear corresponding legal responsibilities.

Claims (10)

1. An identity card recognizing and reading system based on card body information is characterized by comprising:

the NFC identity card reading terminal is used for reading card body information of the identity card through NFC near field communication technology, encrypting and signing the card body information and the terminal information and sending the card body information and the terminal information to the identity card verification gateway;

the identity card verification gateway is used for receiving the request information of the NFC identity card reading terminal, analyzing the information passing the verification, acquiring identity card body information and terminal information, encrypting and signing the identity card body information, the terminal information and the gateway information, and sending the information processed by the identity card verification gateway to the central service server;

the system comprises a central service server and a checking database, wherein the central service server is used for receiving request information of the identity card checking gateway, analyzing information passing the checking and signing to obtain identity card body information, inquiring all data of the identity card from the checking database according to the identity card body information, carrying out encryption signature protection on all data of the identity card, and returning the data to the NFC identity card reading terminal through the identity card checking gateway.

2. The card body information-based identification card reading system of claim 1, wherein:

the NFC identity card reading terminal comprises identity card verification middleware;

the identity card verification middleware comprises an identity card information security reading component, an encryption module and a signature module; the identity card information security reading component is used for reading and identifying the identity card body information and encrypting the read identity card body information for one time; the encryption module is used for encrypting the identity card body information and the terminal information which are encrypted once again; the signature module is used for signing the information processed by the encryption module; the encryption module is also used for decrypting the information returned from the identity card verification gateway.

3. The card body information-based identification card reading system of claim 1, wherein:

the identity card verification middleware is used for providing a unified identity card verification base library interface for a plurality of client side APPs.

4. The card body information-based identification card reading system of claim 1, wherein:

the NFC identity card reading terminal reads card body information of the identity card through the NFC communication module; the NFC communication module is a terminal NFC module integrated in the NFC identity card reading terminal, or the NFC communication module is an external NFC card reader connected with the NFC identity card reading terminal.

5. The card body information-based identification card reading system of claim 1, wherein:

the identity card verification gateway and/or the central service server adopt a dual-computer hot standby technology.

6. The card body information-based identification card reading system of claim 1, wherein:

the checking database stores the whole information of the identity card and can be associated with other information related to the whole information of the identity card.

7. The card body information-based identification card reading system of claim 1, wherein:

the identity card reading system based on the card body information further comprises a monitoring center connected with the central service server, and the monitoring center is used for interacting with the identity card verification gateway and recording service log information.

8. The card body information-based identification card reading system of claim 1, wherein:

an APN special line is adopted between the NFC identity card reading terminal and the identity card verification gateway, and physical isolation is carried out between the NFC identity card reading terminal and the identity card verification gateway and the Internet;

and the identity card verification gateway and the central service server are physically isolated by adopting a safety boundary.

9. An identity card reading method based on card body information is characterized by comprising the following steps:

(1) the NFC identity card reading terminal reads card body information of the resident identity card through NFC near field communication technology, collects terminal information, encrypts and signs the card body information and the terminal information of the identity card, packages the card body information and the terminal information into a request and sends the request to the identity card verification gateway;

(2) the identity card verifying gateway receives request information of the NFC identity card reading terminal, verifies the integrity and reliability of the information, analyzes the request data if the verification passes, obtains identity card body information and terminal information, encrypts and signs the identity card body information, the terminal information and the gateway information, packages the encrypted and signed identity card body information, the terminal information and the gateway information into a request, and sends the request to the central service server;

(3) the central service server receives the request information of the identity card verification gateway, verifies the integrity and reliability of the information, analyzes the request data if the verification passes, obtains the identity card body information, queries the verification database according to the identity card body information, and can obtain the whole data of the identity card if the card body information is valid, encrypts and signs the data, and returns the encrypted and signed data to the identity card verification gateway;

(4) after receiving the data returned by the central service server, the identity card verification gateway verifies the integrity and reliability of the data, decrypts the data if the verification passes, encrypts and signs the decrypted full data of the identity card, and returns the encrypted data to the NFC identity card reading terminal;

(5) and after receiving the data returned by the identity card verification gateway, the NFC identity card reading terminal verifies the integrity and reliability of the data, and if the verification passes, the NFC identity card reading terminal decrypts to obtain the whole data of the identity card.

10. The card body information-based identification card reading method according to claim 9, further comprising the step (6): the monitoring center records service log information in the whole process, and an administrator can check the operation conditions of the identity card verification gateways distributed in various places through the monitoring center.

Images