TW201508541A - Protection system and method with smartcard device - Google Patents

Abstract

Provided is a protection system and method with a smartcard device, in which a smartcard device is combined, and by utilizing security and uniqueness of the smartcard device to verify a device so as to protect device authority. The device is provided with a CPU and an embedded smartcard chip. When a user operates, a processor brings specific parameters to access the smartcard to obtain corresponding pass back results, thereby verifying whether the device is a correct authorization device, and determining functional rights of the device so as to avoid an imitating devices and embezzling software in a processor. The invention comprises three large units: a smartcard, a processor and a user interactive interface.

Description

Protection system and method with smart card device

The invention is a protection system and method for anti-counterfeiting and anti-piracy of a device. The development of the device requires labor, time and money in hardware development, software development in the processor, etc. If the circuit design diagram and the software binary file in the processor are scattered by the improper pipeline, the development design will be put into use. running water. Anti-counterfeiting designs are often made on the software and hardware design of the processor to avoid a lot of misappropriation.

Generally, in a large number of manufacturing, the processor preloading software mode is adopted, and after the factory manufactures the circuit board and the assembled hardware device, the specific computer and the control software are required to authorize the device to the specific area of the device, such as the device. In storable memory; authorization can be a specific serial number or password. Since this particular computer and control software cannot be placed arbitrarily, it needs to be carried out in a specific control area, so it is easy to cause management on the factory. The device needs to be moved to the control area after the assembly is completed to burn the serial number. The final packaging at the factory will cause the production time to be lengthened and the production capacity reduced.

However, the prior art has proposed to place part of the code in the smart card, and then retrieve the part of the code from the smart card by a specific instruction to achieve the effect of protecting the software. Because accessing smart cards is much faster than accessing processor memory Slow, if it is an efficiency point of view, it will slow down the system execution efficiency; and malicious users can also execute malicious code by placing malicious programs on the smart card, and the security is highly controversial.

In view of the above problems, the present invention combines a smart card chip in the device, checks the authorization by verifying the other party's message through the processor and the smart card chip, and the amount of information is small, so the efficiency is high, and the processor does not execute the chip from the smart card. The instruction has no security problem; it only needs to control the number of smart card chips in manufacturing, and can complete the authorization action, no need to move the semi-finished products to the control area authorization, thus speeding up the production speed and achieving the intellectual property rights of the device. effect.

The present invention discloses a system and method for implementing a protection device using a smart card chip, which verifies the authorization of the product by the security and uniqueness provided by the smart card chip and the unpredictability of the operation time.

To achieve this, the system of the invention must include a smart card chip, a processor, and an interface for interacting with the user.

In the development stage, a verification program needs to be designed, and the verification program can generate a verification result by using a specific key combination, a specific string and a random string, and place the verification program on the smart card chip and process respectively. In the software inside the device.

An application having the verification program is installed in the smart card chip, and the application is personalized to generate unique data, wherein the personalized information includes a fixed encryption key combination and a publicly unique data to distinguish Each smart card chip, while the smart card chip is considered a unit amount of authorization, and the smart card chip is placed in the device.

The smart card device processor software has the same key combination as the smart card chip, and when the user operates the device, the verification program is triggered to start, and the smart card chip is required to disclose the unique data, and then generate A random string and the random string verification result are transmitted to the smart card chip, and after waiting for the smart card chip to verify the result, the smart card chip generates another string and uses the publicly unique data and the string to generate another The verification result is sent back to the processor. After the processor verifies the verification result, if it is correct, it confirms that the device has the correct authorization, and can continue to correctly handle the user-triggered behavior; if the smart card chip is a fake smart card chip, If the software in the processor verifies that the data will fail, the function that the user wants to use is terminated to ensure that the intellectual property rights are not stolen.

A protection system with a smart card device, comprising: a smart card chip for encrypting and decrypting and storing data, and generating unique data, a key combination, and a verification program; and a processor having a stylized capability. And communicating with the smart card chip; and an operation interface, the smart card device is operated through the operation interface, and the processor is communicatively connected to the smart card chip during operation.

The unique data is personalized data, and the verification program generates a specific verification result by using the unique data, and the parameter brought by the processor, the processor obtains the unique information of the smart card chip. And generating a specific verification result by using the publicly available unique data and a parameter, and transmitting the verification result to the smart card chip, where the processor is a verification result of the verification verification algorithm and the verification result generated by the smart card chip, To determine the right to use the smart card device, the processor will execute the verification process triggered by the operation interface.

A method for protecting a smart card device, which is The processor requests the publicly unique information of the smart card chip, and generates a verification result by using a key encryption verification program and the publicly unique data to determine the device authorization, and the steps include: the processor requests the disclosure of the smart card chip The unique data; after the processor obtains the publicly unique information of the smart card chip, the verification data is generated by using the key and the verification program in the software in the processor, and transmitted to the smart card chip; the smart card chip is verified by the key After the verification result, another verification result is generated and returned to the processor; the processor verifies the verification result of the smart card chip, and the correctness thereof determines the usage right of the smart card device.

The processor has an algorithm and generates a specific result by using the smart card chip to disclose data and specific parameters, and the algorithm of the processor and the smart card chip are different, but mutually verify each other. The processor and the smart card chip have the same key combination, and the disclosed unique data is personalized data, and is also the chip serial number of the smart card chip itself, or a personalized serial number added by the developer.

The invention is a protection system and method with a smart card device, and compares with the current use technology, and has the following advantages:

1. It is not easy to forge. The smart card chip can guarantee its uniqueness and security. It cannot obtain the content stored in the smart card chip, and must verify its verification method.

2. Dynamic verification by user randomness or timing to prevent pre-recorded verification messages on the fake smart card chip.

3. Simplify the production process, and prepare a sufficient number of smart card chips in advance, without the need to additionally serialize the product devices through specific software.

4. The authorization method is entity authorization. If the authorization amount is excessive, it can be immediately recovered. The authorized quantity can simplify the inventory and is easy to manage.

1‧‧‧Smart Card Wafer

11‧‧‧Verification procedure

12‧‧‧ Personalized information

2‧‧‧Smart card device circuit architecture awareness map

21‧‧‧ Processor

22‧‧‧Smart Card Wafer

23‧‧‧Communication interface

24‧‧‧ peripheral circuits

25‧‧‧ entity control interface

31‧‧‧Operation trigger

32‧‧‧Requires device function

33‧‧‧Check hardware authorization

34‧‧‧Use the surrounding

35‧‧‧End of use

36‧‧‧Timed procedures

41~51‧‧‧Verification procedure

The technical content of the present invention and the purpose of the present invention will be further understood by referring to the detailed description of the present invention and the accompanying drawings. FIG. 1 is a schematic diagram of the internal software architecture of the smart card chip of the present invention; The invention relates to a smart card device circuit architecture awareness diagram; FIG. 3 is a flow chart of the operation of the smart card device of the present invention; and FIG. 4 is a flow chart of the verification program of the present invention.

Referring to FIG. 1, the smart card chip 1 is regarded as a carrier, and includes a verification program 11, and a unique identification data, a publicly-identified data identifying the personalized data 12, and a parameter for verifying the input. The key and verification program 11 produces unique verification results.

2 is a smart card device circuit architecture awareness diagram 2, the processor 21 and the authorized smart card chip 22 use the physical communication interface 23 for communication verification, and the processor 21 internal software also has a verification mechanism to verify the encryption calculation result, the result is correct Whether or not the peripheral circuit 24 can be used is determined; if the verification result is incorrect, the processor uses the physical control interface 25 to disable access 24.

3 is a flow chart of the operation of the smart card device. After the smart card device is started, if the operation trigger 31 is received, the processor will request the smart card device function 32, and the internal software of the processor will command the processor and the smart card chip. Communication, verification verification hardware authorization 33, if it is an authorized device, the peripheral 34 is used according to the user's operation; otherwise, the device is terminated. The software inside the processor can also access the periphery through the time program 36, and the periphery will be controlled at the set time. At this time, the hardware authorization 33 is also checked. Since it is triggered by the user operation 31, there will be a difference in time, and it can be generated. State verification to avoid phishing authorization.

4 is a flow chart of the verification program. The software in the processor 41 has a key combination for verification and a verification program 42 for generating verification results. The smart card chip 43 is pre-installed with a software in the processor. The same key combination, verification procedure, and unique identification of personalization data 44. When the verification program starts, the processor 41 requests the smart card chip to disclose the unique data 45. After the smart card chip 43 returns the public unique data 46, the verification result 47 is generated by the internal key of the processor 41 and the verification program. The verification result 48 is transmitted to the smart card chip 43; after the smart card chip 43 generates the return data 49 by verifying the processor result, another verification result 50 is generated and transmitted back to the processor 41; the processor 41 verifies the smart card chip 43. After the data, if it is correct, it confirms that the user command is authorized 51; in other cases, the processing command is interrupted to achieve the effect of the protection device.

The detailed description of the present invention is intended to be illustrative of a preferred embodiment of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also has many of the above-mentioned functions that are not in the traditional methods of the past. It has fully complied with the statutory invention patent requirements of novelty and progressiveness, and applied for it according to law. Approved this invention patent application, in order to invent invention, to the sense of virtue.

2‧‧‧Smart card device circuit architecture awareness map

21‧‧‧ Processor

22‧‧‧Smart Card Wafer

23‧‧‧Communication interface

24‧‧‧ peripheral circuits

25‧‧‧ entity control interface

Claims (11)

A protection system with a smart card device, comprising: a smart card chip for encrypting and decrypting and storing data, and generating unique data, a key combination, and a verification program; and a processor having a stylized capability. And communicating with the smart card chip; and an operation interface, the smart card device is operated through the operation interface, and the processor is communicatively connected to the smart card chip during operation. A protection system with a smart card device as described in claim 1, wherein the unique data is personalized information. A protection system with a smart card device as described in claim 1, wherein the verification program generates a specific verification result by using the unique data and the parameters brought in by the processor. The protection system with a smart card device as described in claim 1, wherein the processor obtains the unique information of the smart card chip, and generates a specific verification result by using the publicly disclosed unique data and a parameter, and The verification result is transmitted to the smart card chip. The protection system with a smart card device as described in claim 1, wherein the processor determines the verification result of the verification algorithm and the verification result generated by the smart card chip to determine the smart card device to use. right. A protection system with a smart card device as described in claim 1, wherein the processor performs a verification procedure triggered by the operation interface. A method for protecting a smart card device, wherein the processor requests the publicly unique data of the smart card chip, and generates a verification result by using a key encryption verification program and the disclosed unique data to determine device authorization, The steps include: a. the processor requests the publicly unique data of the smart card chip; b. after the processor obtains the publicly unique information of the smart card chip, the processor generates the key and the verification program in the software in the processor. The verification data is transmitted to the smart card chip; c. the smart card chip verifies the verification result with the key, and generates another verification result, which is sent back to the processor; d. the processor verifies the smart card chip The verification result, the correctness of which will determine the right to use the smart card device. The method for protecting a smart card device as described in claim 7, wherein the processor has an algorithm and generates a specific result by using the smart card chip to disclose data and specific parameters. The method for protecting a smart card device as described in claim 7, wherein the algorithm of the processor and the smart card chip are different, but mutually verify each other. A method of protecting a smart card device as described in claim 7 wherein the processor and the smart card chip have the same key combination. The method for protecting a smart card device as described in claim 7 wherein the only information disclosed is personalized data, and is also the serial number of the smart card chip itself, or personalized for the developer to join. serial number.