Secret key service system and key service method of smart card

Abstract

A secret key service system of an intelligent card comprises card issuing equipment 100, a front-end processor 200 and an encryption end 300. The card issuing equipment 100 is composed of a plurality of card slots, each card slot is used as an independent client to generate card issuing information, an instruction interface is called to encapsulate the card issuing information into an encryption request instruction in a unified format, and the encryption request instruction at least comprises an instruction type, to-be-encrypted data, an encryption mode and a reference key index. The front-end processor 200 is used as a key service to analyze the encryption request instruction to obtain the instruction type, the to-be-encrypted data, the encryption mode and the reference key index, a corresponding dynamic library, an IP address and a port number are called by the configuration file according to the instruction type, and the parameters are transmitted into the called dynamic library to generate an instruction for the encryption machine, and are sent to a corresponding encryption machine. The interface of the encryption machine analyzes the encryption instruction to obtain data to be encrypted and an encryption mode, encryption processing is carried out according to the encryption data, the encryption mode and the reference key index in the encryption instruction to obtain an encryption result, and the encryption result is repackaged into an encryption result in a unified format by the front-end processor 200. The card issuing equipment analyzes the encryption result and writes the secret key and the encrypted user data into the card.

Description

technical field [0001] The invention relates to a key service system and a key service method of a smart card, in particular to a key service that can use multiple encryption machines with the same function and different instructions at the same time. Background technique [0002] Encryption machines are generally used in card factories that produce transportation, social security, bank and other cards, and are suitable for places that issue a large number of cards and multiple types of cards. [0003] During the process of making the card, the initial structure will be established in the card, and the initial key and data will be written. The process of writing keys and data involves an encryption machine. There are two main reasons for using an encryption machine: [0004] 1. High security of the encryption machine, use the encryption machine to store the key, and load the key with ciphertext; [0005] 2. The operation speed of the encryption machine is fast. Using the ...

AI Technical Summary

Problems solved by technology

[0013] 3. The card issuing device is required to support different access methods at the same time, and the network environment and hardware requirements of the card issuing device are too high

[0014] 4. For the encryption machine accessed through the PKCS#11 interface, the card issuing equipment is limited, and the card issuing equipment cannot be used to issue cards most effectively.

Images