WO2010045823A1

WO2010045823A1 - Cryptographic-key updating method and system

Info

Publication number: WO2010045823A1
Application number: PCT/CN2009/073419
Authority: WO
Inventors: 贾倩; 马景旺; 余万涛
Original assignee: 中兴通讯股份有限公司
Priority date: 2008-10-22
Filing date: 2009-08-21
Publication date: 2010-04-29
Also published as: CN101729247A; CN101729247B

Abstract

A cryptographic-key updating method and system, the method includes that: a card issuer management platform informs a smart card to update an issuer security domain cryptographic-key in the case of that the issuer security domain cryptographic-key of the smart card is unexpired (S202); the smart card establishes a connection with the card issuer management platform, and establishes a secure channel through the connection (S204); the smart card and the card issuer management platform implement the updating operation of the issuer security domain cryptographic-key through the secure channel (S206). The updating of the smart card issuer security domain can be high-speed, real-time and safely implemented through the above technical solution.

Description

Key update method and system

TECHNICAL FIELD The present invention relates to the field of communications, and in particular, to a key update method and system. BACKGROUND OF THE INVENTION In the related art, Near Field Communication (NFC) is a short-range wireless communication technology operating at 13.56 MHz, which is defined by radio frequency identification (Radio Frequency Identification). The convergence of technology and interconnection technologies has evolved. After integrating NFC technology, mobile communication terminals such as mobile phones can simulate contactless IC cards for related applications of electronic payment, and mobile phones are used in the field of electronic payment, which will further expand the use of mobile phones and bring people's lives. Convenient, there is a broad application prospect. In the related art, in order to implement mobile electronic payment based on NFC technology, it is necessary to establish an electronic payment system for a mobile terminal, and implement management of electronic payment for the mobile terminal through the system, wherein the electronic payment system of the mobile terminal includes: distribution of the smart card, and electronic Download, install, and personalize payment applications, and use related technologies and management strategies to secure electronic payments. The main security i or ( Issuer Security Domain, called ISD), also known as the issuer security i or, is the primary security domain enforced by the card issuer, which can be used to represent the current card, the primary security domain is included for support Secure channel protocol operation and security domain key for card content management. Specifically, the security domain key includes a primary security domain key for ensuring integrity and confidentiality of application data during initialization and use of the secure channel, and for implementing mutual authentication of the card and the external entity. Each security domain (including the primary security domain) has at least one set of keys, which are Secure Channel-Encryption (S-ENC), Secure Channel Information-Symbol Encryption Key (Secure Channel) -Message Authentication Code, called "S-MAC" and Data Encryption Key (DEK), which are used to generate the corresponding session key during the initialization and use of the secure channel. And use the session key. The card issuer management platform must update the primary security domain key when the primary security domain key is about to expire, leak, or is assessed to be at risk of leakage. The primary security domain key update includes scheduled updates and forced updates, where the scheduled update is based on the set primary security domain update cycle, and the primary security domain key is updated before the primary security domain key is about to expire; Update is in the primary security domain The primary security domain key is forced to update if the key is compromised or if it is assessed that the key is at risk of leakage. As can be seen from the above description, updating the key security domain key of the smart card is an important means to ensure the security of the electronic payment application on the smart card. However, at present, the key security domain key update of the smart card has not been specifically proposed. Therefore, there is an urgent need for a technical solution that can quickly and easily update the smart card primary security domain key. SUMMARY OF THE INVENTION The present invention has been made in view of the problem in the related art that there is no specific scheme for updating a smart card master security domain key through a mobile communication network. To this end, the main object of the present invention is to provide a key update method and system. To solve the above problems in the related art. According to an aspect of the present invention, a key update method is provided for updating a smart card primary security domain key of a mobile terminal. The key update method according to the present invention includes: in the case that the smart card primary security domain key has not expired, the card issuer management platform notifies the smart card to update the primary security domain key; the smart card establishes a connection with the card issuer management platform Establish a secure channel through the connection; the smart card and card issuer management platform performs the update of the primary security domain key through the secure channel. In addition, before the card issuer management platform notifies the smart card to update the primary security domain key, the method further includes: establishing a secure channel between the card issuer management platform and the over-the-air server. The specific processing of the card issuer management platform notifying the smart card to update the primary security domain key is: after the secure connection between the card issuer management platform and the over-the-air server is established, the notification of the key update is sent to the smart card through the over-the-air server. Message; In response to the notification message, the smart card initiates a primary security i or key update procedure. After the secure connection between the card issuer management platform and the over-the-air server is established, the specific processing of sending the notification message for the key update to the smart card through the over-the-air server is: The card issuer management platform sends the key update to the over-the-air server. The service request; in response to the key update service request, the over-the-air server encapsulates the key update service request and transmits the encapsulated data to the mobile terminal; the mobile terminal transparently transmits the data to the smart card through the predetermined data format. Preferably, the specific process of establishing a connection between the smart card and the card issuer management platform is: the smart card and the mobile terminal establish a Bearer Independent Protocol (BIP) connection; the mobile terminal is connected to the air download server through the packet data service channel; The over-the-air server and card issuer management platform are connected by a dedicated line connection or via the Internet, and the over-the-air server implements secure communication with the card issuer management platform through a predetermined protocol. Preferably, the specific process of establishing a connection between the smart card and the card issuer management platform is: the short message is communicated between the smart card and the over-the-air server; the over-the-air server and the card issuer management platform are connected by a dedicated line or through the Internet, and The over-the-air server implements secure communication with the card issuer management platform through a predetermined protocol. In addition, after the smart card establishes a connection with the card issuer management platform, the method further includes: the card issuer management platform selects a primary security domain of the smart card. The specific processing of the smart card and the card issuer management platform to establish a secure channel through the connection is as follows: The card issuer management platform establishes a secure channel with the smart card according to a predetermined secure channel protocol, and at the same time as establishing a secure channel, the card issuer management platform and the smart card Perform identity authentication and session key negotiation. In addition, after the smart card establishes a connection with the card issuer management platform, the foregoing method further includes: attaching the command and response in the key update process as a data body to the channel data of the active command supported by the bearer-independent protocol, or attaching to the upper and lower The data information of the short message is passed between the smart card and the card issuer management platform. Preferably, the specific processing of the smart card and card issuer management platform performing the smart card primary security domain key update operation is: The card issuer management platform encrypts the new primary security key with the current primary security domain key, and encrypts The latter primary security key is encapsulated in a predetermined command; the card issuer management platform encapsulates the predetermined command as data and sends it to the smart card through the over-the-air server; the smart card receives the encapsulated predetermined command using the bearer-independent protocol command, The data is parsed to obtain a new primary security domain key, and the primary security domain key update operation is performed on the obtained command; the smart card encapsulates the response command of the predetermined command according to the channel data of the bearer-independent protocol command, and sends the response command to the mobile terminal. The mobile terminal sends a response command to the card issuer management platform through the over-the-air server; the card issuer management platform sends a key update completion command to the smart card. Preferably, the specific processing of the smart card and card issuer management platform performing the smart card primary security domain key update operation is: The card issuer management platform encrypts the new primary security key with the current primary security domain key, and encrypts The new primary security key is encapsulated in a predetermined command; The platform encapsulates the predetermined command as data, and sends the downlink short message to the smart card through the over-the-air server. The smart card receives the encapsulated predetermined command from the downlink short message, and parses the data to obtain a new primary security domain secret. Key, and performing a primary security domain key update operation according to the new primary security domain key; the smart card encapsulates the response command of the predetermined command in the form of a short message and sends it to the mobile terminal; the mobile terminal responds by downloading the server over the air The command is sent to the card issuer management platform; the card issuer management platform sends a key update completion command to the smart card. According to another aspect of the present invention, a key update system is provided. The key update system according to the present invention comprises: a card issuer management platform for managing and maintaining a smart card primary security domain key, and notifying the smart card to perform a primary security domain key if the smart card primary security domain key has not expired The update, the smart card is used to update the primary security domain key; the smart card, located at the mobile terminal, is used to establish a connection with the card issuer management platform, establish a secure channel through the connection, and communicate with the card issuer management platform through the secure channel. An update operation of the security domain key; an over-the-air server for establishing a secure channel with the card issuer management platform, connecting with the mobile terminal, and providing a download service for the mobile terminal. By means of the technical solution of the present invention, the smart card is updated by using the mobile network, and the specific solution in the related art that does not update the smart card primary security domain key is solved, and the mobile communication network can be high-speed, real-time, convenient, and secure. The implementation of the smart card master security domain key update fills the gap in the related technology. Other features and advantages of the invention will be set forth in the description which follows, and The objectives and other advantages of the invention will be realized and attained by the <RTI The drawings are intended to provide a further understanding of the invention, and are intended to be a part of the description of the invention. In the drawings: FIG. 1 is a block diagram of a key update system according to an embodiment of the present invention; FIG. 2 is a flowchart of a key update method according to an embodiment of the present invention; FIG. 3 is an embodiment of the present invention. Signaling flowchart for detailed processing of the smart card master security or key update based on the BIP technology of the key update method; FIG. 4 is a signaling flowchart of detailed processing of updating a smart card primary security domain based on an OTA short message technology according to a key update method according to an embodiment of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Currently, in the related art, a specific scheme for key update of a smart card primary security domain has not been proposed. Therefore, the present invention provides a key update method and system for moving high-speed data through a mobile network. The channel and the Bearer Independent Protocol (BIP) implement the update of the primary security domain key, and the OTA technology is used to update the smart card master security i or key by means of short messages. The embodiments in the present application and the features in the embodiments may be combined with each other without conflict. The preferred embodiments of the present invention are described with reference to the accompanying drawings, and the preferred embodiments of the present invention are intended to illustrate and explain the invention. System Embodiment According to an embodiment of the present invention, a key update system is provided. Currently, a talent requirement of a mobile terminal electronic payment system based on near field communication is satisfied by a global platform (Global Platform) Global Platform Card Specification 2.1.1 or 2.2 (Global Platform Card Specification V2.1.1 or V2.2), if the system supports the GP2.1.1 specification, the secure channel protocol needs to support symmetric key based (Security Channel Protocol 02) , the cartridge is called SCP02); if the system supports the GP2.2 specification, the secure channel protocol needs to support SCP02 and the asymmetric key (Security Channel Protocol 10, called SCP10), and the card issuer and application provider can Choose according to the needs of the security policy. The mobile terminal electronic payment system is mainly composed of a card issuer management platform, an application provider management platform and a mobile terminal, and multiple application provider management platforms may exist in the system. The smart terminal has a smart card supporting electronic payment. In order to realize the security management of the smart card and the downloading and installation of the payment application, the smart card needs to establish communication with the card issuer management platform and the application provider management platform, and the smart card can use the mobile terminal to move. Communication is established between the communication network and the management platform. Specifically, the over-the-air (Over The Air) technology is generally used to implement communication between the smart card and the management platform. The mobile terminal electronic payment system based on the near field communication technology supports a multi-electronic payment application, that is, a plurality of electronic payment applications can be installed on the smart card. In order to realize the security of the payment application, the smart card adopts

According to the Global Platform Card Specification V2. 2.2 specification, smart cards are separated into several independent security domains to ensure the isolation and independence of multiple applications. Each application provider manages its own security domain and applications, application data, and so on. In the following, based on the system architecture described above, a detailed description of a system for key update via a mobile communication network GPRS gateway or a 3G gateway (ie, through a packet data service channel) and based on the BIP protocol is described. The inventive key update system is part of the above-described near field communication based mobile payment electronic payment system. According to an embodiment of the present invention, a key update system is provided, and Fig. 1 is a block diagram of a key update system in accordance with an embodiment of the present invention. As shown in Fig. 1, the above key update system includes a card issuer management platform 10, an over-the-air download server 12, a mobile communication network 14, a mobile terminal 16, and a smart card (the smart card is located in the terminal 16, not shown in the figure). The above key update system will be described in detail below. The card issuer management platform 10, controlled by the card issuer, is responsible for the issuance and management of the card, and manages the resources and life cycle, keys, certificates and applications of the card, and can also be said that the card issuer management platform 10 The smart card master security domain key can be managed and maintained. In addition, the card issuer management platform 10 also informs that the smart card primary security domain key has not expired, that is, a time point before the smart card's primary security domain key expires. The smart card performs the update of the primary security domain key (i.e., when the card issuer management platform detects that the primary security domain key is about to expire, the primary security domain key is triggered to be updated by the mobile communication network). After the smart card initiates the primary security domain key update process, the smart card performs an update operation of the primary security domain key. The over-the-air server 12 is configured to establish a secure channel with the card issuer management platform 10, connect with the mobile terminal 16, and provide download services for the mobile terminal 16. Mobile communication network 14, for providing data channels, ensuring mobile terminal 16 and OTA server

Communication between 12. The mobile terminal 16 is a client that performs wireless download. The smart card is located at the mobile terminal 16 for establishing a connection with the card issuer management platform 10, establishing a secure channel through the connection, and performing an update operation of the primary security domain key with the card issuer management platform 10 through the secure channel; , smart card refers to the Global Platform Card Specification V2.1.1 The IC chip or smart card of the V2.2 specification can be physically (U) SIM card, pluggable smart memory card or IC chip integrated on the mobile terminal. In practical applications, in order to implement the update of the key of the smart card, it is first necessary to establish a connection between the smart card and the card issuer management platform 10, and then establish a secure channel through the connection to perform a key update operation, where a symmetric key management method is adopted. An explicit security authentication mechanism is adopted between the smart card and the card issuer management platform 10, the secure channel protocol uses a Secure Channel Protocol (SCP02), and the SCP02 is in the Global Platform Card Specification V2.1.1/V2. 2 The secure channel protocol specified in Appendix E Secure Channel Protocol 02 of the specification. The advantages of this explicit security authentication are: through two-way authentication, which guarantees the legitimacy of the card issuer management platform, and ensures the legitimacy of the smart card. The use of the session key effectively ensures the security of the local key, in addition to the MAC The calculation uses the associated integrity check value (Integrity Check Value, called ICV) to ensure the continuity of the communication command. In addition, communication between the smart card and the card issuer management platform 10 is accomplished by means of a mobile network OTA. The interaction between the mobile terminal 16 and the smart card increases the support for the BIP command, and adopts a higher-speed and more secure general-purpose unlimited packet service (General Pocket Radio Service, called GPRS) or a universal mobile communication system (for data transmission). Universal Mobile Telecommunication System, called UMTS) Mobile high-speed packet service channel. Also, in practical applications, different protocols may be used between the mobile terminal 16 and the OTA server 12 to enable transparent data transmission to the OTA server 12 when using bearer-independent protocols. In addition, the BIP conference can be called 7|c, which is irrelevant, or the carrier is not related to the conference. It is a kind proposed in the 3rd Generation Partnership Project (3rd Generation Partnership Project). For connection-oriented transport protocols, the supported high-speed channels include: GPRS, Enhanced Datarates for Global Evolution (RFID) and UMTS, etc., also supports five active commands (specifically For: OPEN CHANNEL, CLOSE CHANNEL, RECEIVE DATA, SEND DATA, GET CHANNEL STATUS ) and two events (specifically: Data available and Channel status ), enabling the smart card to utilize the carrying capacity of the mobile terminal 16 to establish a relationship with the remote server Connection-oriented data channel. Specifically, the smart card can instruct the mobile terminal 16 to connect to the OTA server 12 through the packet data service channel through the OPEN CHANNEL command of the BIP, thereby establishing a connection between the smart card and the OTA server 12. The OTA server 12 and the card issuer management platform 10 are connected by a dedicated line or through the Internet, and the OTA server 12 can implement secure communication with the card issuer management platform 10 through the relevant protocols. After establishing the connection between the smart card and the card issuer management platform 10, the GP-compliant commands and responses involved in the primary security domain key update process are attached as data bodies to the channel data of the active commands supported by the BIP, in the smart card. The card issuer management platform 10 can remotely manage the smart card by transferring between the card issuer management platform 10 and the card issuer management platform 10. The card issuer management platform 10 encapsulates the command as data and sends it to the mobile terminal 16 through the OTA server 12. After receiving the data available event (data available) sent by the mobile terminal 16, the smart card uses the BIP command-RECEIVE. DATA receives the data, parses the data, obtains a new primary security domain key, performs an update operation, and after the operation is completed, encapsulates the command response in the form of channel data of the BIP command—SEND DATA, and sends it to the mobile. The terminal 16 is then sent to the card issuer management platform 10 via the OTA server 12. It should be noted that the APDU commands involved in the primary security domain key update process include: primary security domain selection (SELECT command), security authentication between the smart card and the card issuer management platform (ie, establishment of the SCP02 secure channel) command. And the key update ( PUT KEY ) command. Through the above technical solution, the problem of key update of the smart card primary security domain is solved. The data transmission between the OTA server and the mobile terminal and the smart card can be based on two ways, one is through the mobile communication network GPRS gateway or the 3G gateway (ie, through the packet data service channel), based on the BIP protocol, the above manner is oriented connection The data interaction between the two parties is started only after the connection is successfully established. The manner of updating the smart card primary security domain has been described in detail in the above system embodiment. Another way is to update the smart card's primary security domain key by means of a short message through the short message gateway of the mobile communication network, using the data communication between the OTA server and the smart card, in the case that the mobile terminal does not support the packet data service, The 0TA can be implemented using a short message channel to update the primary security domain key. In the following, based on the framework of the mobile terminal near field communication electronic payment system, the short message gateway through the mobile communication network uses a short message to implement a key update system for the primary security domain update by using a short message method for data communication between the OTA server and the smart card. DETAILED DESCRIPTION It should be noted that the key update system of the present invention is part of the above-described near field communication based mobile payment electronic payment system. This embodiment can be carried out with reference to FIG. 1. The key update system according to the present invention includes a card issuer management platform 10, a server 12, and a smart card located at the mobile terminal 16. The above system will be described in detail below. The card issuer management platform 10 is configured to establish a secure channel with the 0TA server 12, and send a key update service request to the smart card through the 0TA server 12 in a predetermined format, and after selecting the smart card primary security domain, through the 0TA server 12 Between short form and smart card The security authentication and the session key are negotiated. After the new primary security domain key is encrypted using the current primary security domain key, the new primary security key is sent to the smart card by the 0TA server 12 in the form of a short message.

The OTA server 12 is configured to send the command sent by the card issuer management platform 10 as a data body to the smart card in the data information of the downlink short message, and send the command response of the smart card to return the short message to the card issuer management platform. 10. The smart card is located at the mobile terminal 16, and the mobile terminal is configured to transparently transmit the short message to the smart card, and the smart card is used to receive and execute the command of the card issuer management platform 10, and attach the return command as the data body to the data information of the uplink short message. It is sent to the 0TA server 12 and forwarded by the 0TA server 12 to the card issuer management platform 10. Method Embodiment According to an embodiment of the present invention, a key update method is provided for updating a smart card primary security domain key of a mobile terminal. ² is a flowchart of a key update method according to an embodiment of the present invention. As shown in FIG. 2, the following processing is included (step S202 to step S206): Step S202, when the smart card primary security domain key has not expired Next, the card issuer management platform notifies the smart card to update the primary security domain key; further, in step S202, before the card issuer management platform notifies the smart card to update the primary security domain key, it first needs to be managed by the card issuer. A secure channel is established between the platform and the over-the-air server. Moreover, in step S202, the specific processing of the card issuer management platform notifying the smart card to update the primary security domain key is:

1. The card issuer management platform sends a notification message of the key update to the smart card; wherein the card issuer management platform sends the notification message of the key update to the smart card through the mobile network as follows: The card issuer management platform downloads to the air The server sends a key update service request; in response to the key update service request, the over-the-air server encapsulates the key update service request and transmits the encapsulated data to the mobile terminal; the mobile terminal transparently passes the data through the predetermined data format Transfer to the smart card.

2. In response to the notification message, the smart card initiates a primary security domain key update procedure. In step S204, the smart card establishes a connection with the card issuer management platform, and establishes a secure channel through the connection. Preferably, in step S204, the specific process of establishing a connection between the smart card and the card issuer management platform is as follows: 1. The smart card and the mobile terminal establish 7| C-independent protocol connection; 2. The mobile terminal is connected to the over-the-air download server through the packet data service channel; 3. The over-the-air server and the card issuer management platform are connected through a dedicated line or through the Internet, and the over-the-air download server is implemented by a predetermined protocol. Secure communication with the card issuer management platform. Preferably, in step S204, the specific processing of establishing a connection between the smart card and the card issuer management platform is as follows: 1. The short message is communicated between the smart card and the over-the-air download server; 2. The air download server and the card issuer management The platform is connected by a dedicated line connection or via the Internet, and the over-the-air server implements secure communication with the card issuer management platform through a predetermined protocol. In addition, after step S204, the card issuer management platform also needs to select the primary security domain of the smart card. In step S204, the specific process of establishing a secure channel by the smart card and the card issuer management platform is as follows: The card issuer management platform establishes a secure channel with the smart card according to a predetermined secure channel protocol, and manages the card issuer while establishing a secure channel. The platform and the smart card perform identity authentication and session key negotiation. Preferably, the two-way authentication may be performed by using explicit authentication or implicit authentication. Moreover, after the smart card establishes a connection with the card issuer management platform, the command and response in the key update process are also required to be attached as data bodies to the channel data of the active command supported by the bearer-independent protocol, or to the uplink and downlink short messages. The data information is passed between the smart card and the card issuer management platform. Step S206, the smart card and the card issuer management platform perform the update operation of the primary security domain key through the secure channel. Preferably, the specific processing of step S206 is: 1. The card issuer management platform encrypts the new primary security key by using the current primary security domain key, and encapsulates the encrypted primary security key in a predetermined command; 2. The card issuer management platform encapsulates the predetermined command as data and sends it to the smart card through the over-the-air server; 3. The smart card uses the bearer-independent protocol command to receive the encapsulated predetermined command, parses the data therein, and decrypts the new data. The primary security domain key performs the primary security domain key update operation on the obtained command; 4. The smart card encapsulates the response command of the predetermined command according to the channel data of the bearer-independent protocol command, and sends the response command to the mobile terminal; Terminal pass The over-the-air download server sends a response command to the card issuer management platform; 6. The card issuer management platform sends a key update completion command to the smart card. Preferably, the specific processing of step S206 may further be: 1. The card issuer management platform encrypts the new primary security key by using the current primary security domain key, and encapsulates the encrypted new primary security key in the card. In the predetermined command; 2. The card issuer management platform encapsulates the predetermined command as data, and sends the downlink short message to the smart card through the over-the-air server; 3. The smart card receives the encapsulated predetermined command from the downlink short message, The data is parsed to obtain a new primary security domain key, and the primary security domain key update operation is performed according to the new primary security domain key. 4. The smart card encapsulates the response command of the predetermined command in the form of a short message. And sending to the mobile terminal; 5. The mobile terminal sends a response command to the card issuer management platform through the over-the-air download server; 6. The card issuer management platform sends the key update completion command to the smart card. The foregoing technical solution of the present invention is described in detail with reference to an example, as shown in FIG. 3, which is a signaling flowchart of a detailed processing procedure of a key update method according to an embodiment of the present invention. Although the mobile terminal electronic payment system architecture shown in FIG. 1 will be described below as an example, the application scenario of the present invention is not limited to the mobile terminal electronic payment system architecture shown in FIG. 1. In the framework of Figure 1, the card issuer management platform is responsible for the management of the key, which completes the update of the primary security domain key on the smart card via the OTA server via the mobile communication network. As shown in Figure 3, the following processing is included:

1. Establish a secure channel between the card issuer management platform and the OTA server;

2. The card issuer management platform sends a key update service request to the OTA server; the OTA server encapsulates the key update service request according to the format of the data short message, and sends the data short message to the mobile terminal; the mobile terminal transparently the data short message Transfer to the smart card (can pass the ENVELOPE (SMS-PP DOWNLOAD) command) (corresponding to step S202 in Figure 2);

3. The smart card parses the data short message and initiates a BIP connection with the mobile terminal. The smart card establishes a BIP connection to the mobile terminal by sending a BIP command -OPEN CHANNEL. In the OPEN CHANNEL command, the smart card specifies BIP connection parameters, including supported transport protocol types (for example, Transmission Control Protocol (TCP), etc.), data buffer size, OTA server network address, channel number, etc.

4. The mobile terminal establishes a BIP connection with the smart card, and establishes a TCP/IP (Transmission Control Protocol/Internet Protocol) connection with the OTA server according to the OTA server address and the transport protocol type in the OPEN CHANNEL command; 5. After the connection is established, the smart card primary security domain will be selected. The specific primary security domain selection process includes: The card issuer management platform encapsulates the SELECT command according to the command format specified in the Global Platform specification, and populates the primary security i or the SELECT command. AID (Application ID), and then send the encapsulated SELECT command as data to the OTA server; the mobile terminal receives data from the OTA server over a TCP/IP connection and notifies the smart card with the "data available event" (via the ENVELOPE Data available command) To retrieve data, when the smart card drags 4 data from the mobile terminal, send a BIP command-RECEIVE DATA; the smart card parses the data, and selects the primary security domain according to the SELECT command. After executing the command, the smart card sends the SELECT response data through the BIP command -SEND DATA, and the mobile terminal sends the data to the OTA server through the previously established TCP/IP connection;

6. After receiving the SELECT response, the card issuer management platform establishes a secure communication channel with the smart card according to the provisions of Appendix E Secure Channel Protocol 02 in Global Platform V2.2. When establishing a secure communication channel, the card issuer management platform The smart card needs to be authenticated in both directions, and the authentication mode uses explicit authentication. The command used to establish the secure channel is transmitted in the same manner as the SELECT command. The command for the transmission of the secure channel can be referred to the above-mentioned primary security domain selection process (corresponding to the figure). Step S204)

7. After the security channel is established, the card issuer management platform uses the current primary security domain key to force the new primary security i or key. Secret, according to the PUT KEY command format specification package PUT KEY command, and then send the PUT KEY command to the smart card; after receiving the PUT KEY command, the smart card decrypts to obtain a new primary security domain key, and performs the primary security domain key update operation; After the key update is completed, the smart card sends a PUT KEY response (including the key version number, key check value, etc.) to the card issuer management platform; the PUT KEY command is transmitted in the same manner as the aforementioned SELECT command, that is, the above-mentioned primary security domain. Selection processing (corresponding to step S206 in Fig. 2);

8. After receiving the PUT KEY response message, the card issuer management platform will send a key update completion command to the smart card, and the command is transmitted in the same manner as the foregoing SELECT command, that is, the above-mentioned main security domain selection process;

9. After receiving the key update completion command, the smart card can send a BIP command-CLOSE CHANNEL to close the BIP connection between the smart card and the mobile terminal; if there is a subsequent application download based on the mobile communication network, the BIP connection can be closed without further Application download

10. Disconnect the PCT/IP connection between the OTA server and the terminal. According to an embodiment of the present invention, an update of an application or data on a card through a mobile network may also be employed.

OTA's short message technology, through which the application and data on the card are updated with the short message as the channel. The above method adopts the store-and-forward technology, that is, the connectionless technology. Therefore, the two parties do not need to establish a connection, and directly transmit data by using a short message method. Hereinafter, the key security domain key of the smart card is adopted by using OTA short message technology with reference to the accompanying drawings. The technical solution for updating is described in detail. FIG. 4 is a flowchart of detailed processing for updating the smart card primary security domain key by using the OTA short message technology according to an embodiment of the present invention. As shown in FIG. 4, the following processing is included:

2. The card issuer management platform sends a key update service request to the OTA server; the OTA server encapsulates the key update service request according to the format of the data short message, and sends the data short message to the mobile terminal, and the mobile terminal transparently transmits the data short message. Transfer to the smart card (corresponding to step S202 in Fig. 2);

3. The smart card parses the data short message and returns a confirmation short message;

4. The card issuer management platform selects the smart card master security domain (corresponding to step S204 in FIG. 2), and specifically includes the following processing: The card issuer management platform encapsulates the SELECT command according to the command format specification in the Global Platform specification, in the SELECT command. Fill the main security i or AID (Application ID), and then send the encapsulated SELECT command as data to the OTA server;

The OTA server sends the encapsulated SELECT command as a data body to the smart card in the data information of the downlink short message; the smart card parses the data, and selects the primary security domain according to the SELECT command. After executing the command, the command response is appended to the data information of the uplink short message and sent to the OTA server;

5. After receiving the SELECT response, the card issuer management platform performs security authentication and session key negotiation with the smart card. The process of transmitting the command can be referred to the above-mentioned primary security domain selection process (corresponding to FIG. 2). Step S206);

6. The card issuer management platform encrypts the new primary security domain key using the primary security domain key, encapsulates the PUT KEY command according to the PUT KEY command format specification, and then sends the PUT KEY command to the smart card; the smart card receives the PUT KEY After the command, decrypt the new primary security domain key and perform the primary security domain key update operation. After the key update is completed, the smart card sends a PUT KEY response (including the key version number, key check value, etc.) to the card issue. Business management platform; the transfer process of the PUT KEY command can be referred to the above-mentioned main security domain selection process; 7. After receiving the PUT KEY response message, the card issuer management platform will send a key update completion command to the smart card, and the card issuer management platform sends the command to the OTA server in a predetermined format, and the OTA server uses the command as the data body. Attached to the data message of the downlink short message is sent to the smart card. In summary, by using the technical solution of the present invention, the smart card is updated by using the mobile network, and the specific solution in the related art that does not update the smart card primary security domain key is solved, and the mobile communication network can be fast, Real-time, convenient and secure implementation of the smart card master security domain key update fills the gap in the related technology. The above is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalents, and modifications made within the spirit and principles of the present invention. It should be included in the scope of protection of the present invention.

Claims

Claim

A key update method, configured to update a smart card primary security domain key of a mobile terminal, where the method includes:

The card issuer management platform notifies the smart card to update the primary security domain key if the smart card primary security domain key has not expired;

The smart card establishes a connection with the card issuer management platform, and establishes a secure channel through the connection;

The smart card and the card issuer management platform perform an update operation of the primary security domain key through the secure channel.

2. The method according to claim 1, wherein before the card issuer management platform notifies the smart card to update the primary security domain key, the method further comprises: managing at the card issuer A secure channel is established between the platform and the over-the-air server.

The method according to claim 2, wherein the card issuer management platform notifies the smart card that the update of the primary security domain key is:

After establishing a security channel between the card issuer management platform and the over-the-air server, sending, by the over-the-air server, a notification message of a key update to the smart card; in response to the notification message, the smart card initiates a master Security domain key update process.

4. The method according to claim 3, wherein after the card issuer management platform establishes a secure channel with the over-the-air download server, the over-the-air download server The specific processing of the notification message sent by the smart card to perform key update is:

The card issuer management platform sends a key update service request to the air download server;

Responding to the key update service request, the over-the-air server encapsulates the key update service request, and sends the encapsulated data to the mobile terminal;

The mobile terminal transparently transmits the data to the smart card through a predetermined data format.

The method according to claim 2, wherein the establishing, by the smart card, the card issuer management platform comprises:

The smart card establishes a 7|c-independent protocol connection with the mobile terminal; the mobile terminal is connected to the air download server through a packet data service channel; and the air download server and the card issuer management platform pass a dedicated line Connecting or connecting via the Internet, and the over-the-air downloader implements secure communication with the card issuer management platform via a predetermined protocol.

The method according to claim 2, wherein the establishing a connection between the smart card and the card issuer management platform comprises:

Communicating between the smart card and the over-the-air server by means of a short message; the over-the-air server and the card issuer management platform are connected by a dedicated line or via the Internet, and the over-the-air download server is scheduled The protocol implements secure communication with the card issuer management platform.

The method according to claim 1, wherein after the smart card establishes the connection with the card issuer management platform, the method further includes:

The card issuer management platform selects a primary security domain of the smart card.

The method according to claim 1, wherein the specific processing of the smart card and the card issuer management platform to establish the secure channel through the connection is:

The card issuer management platform establishes the secure channel with the smart card according to a predetermined secure channel protocol, and the card issuer management platform performs identity authentication and session key with the smart card while establishing the secure channel Negotiation.

The method according to claim 1, wherein after the smart card establishes a connection with the card issuer management platform, the method further includes:

The command and the response in the key update process are added as data bodies in the channel data of the active command supported by the 7-independent protocol, or in the data information of the uplink/downlink short message, in the smart card and the card Passed between publisher management platforms.

The method according to claim 5, wherein the specific processing of the smart card and the card issuer management platform to perform the smart card primary security domain key update operation is:

The card issuer management platform encrypts the new primary security key with the current primary security domain key, and encapsulates the encrypted new primary security key in a predetermined command; the card issuer management The platform encapsulates the predetermined command as data and sends the smart card to the smart card through an over-the-air server;

The smart card receives the encapsulated predetermined command by using a bearer-independent protocol command, parses the data therein, obtains the new primary security domain key, and executes the master according to the new primary security domain key. Secure domain key update operation;

And the smart card encapsulates the response command of the predetermined command according to the channel data of the bearer-independent protocol command, and sends the response command to the mobile terminal;

Sending, by the mobile terminal, the response command to the card issuer management platform by using the airmail server;

The card issuer management platform sends a key update completion command to the smart card.

The method according to claim 6, wherein the smart card and the card issuer management platform perform the smart card master security domain key update operation, including:

The card issuer management platform encrypts the new primary security key with the current primary security domain key, and encapsulates the encrypted new primary security key in a predetermined command; the card issuer management The platform encapsulates the predetermined command as data, and sends the downlink short message to the smart card through an over-the-air download server;

Receiving, by the smart card, the encapsulated predetermined command from the downlink short message, parsing the data therein, obtaining the new primary security domain key, and querying the new primary security domain key Perform the primary security domain key update operation;

The smart card encapsulates the response command of the predetermined command in the form of a short message, and sends the response command to the mobile terminal;

12. A key update system, comprising:

a card issuer management platform, configured to manage and maintain a smart card primary security domain key, and notify the smart card to update the primary security domain key if the smart card primary security domain key has not expired The smart card performs an update operation of the primary security domain key;

The smart card is located at the mobile terminal, configured to establish a connection with the card issuer management platform, establish a secure channel through the connection, and perform a primary security domain key with the card issuer management platform through the secure channel. Update operation

An over-the-air server for establishing a secure channel with the card issuer management platform, connecting with the mobile terminal, and providing downloading services for the mobile terminal.