Security carrier management and control method, device and equipment and storage medium

Abstract

The embodiment of the invention provides a security carrier management and control method and device, electronic equipment and a storage medium, and relates to the field of security of embedded equipment. The method comprises the following steps: in response to an authentication request message sent by first equipment, determining a first ciphertext; sending an authentication response message to the first device, the authentication response message carrying the first ciphertext, so that the first device performs first identity authentication; receiving a third ciphertext sent by the first device after the first identity authentication is passed, wherein the third ciphertext is determined by the first device based on the authentication response message; performing second identity authentication according to the third ciphertext and the determined fourth ciphertext to obtain a first result; and determining whether to acquire the encrypted data according to the first result. According to the method, the interaction between the security carrier and the first equipment is effectively managed and controlled by adopting a bidirectional authentication operation between the security carrier and the first equipment, and whether encrypted data is acquired or not is determined according to a bidirectional authentication result so as to guarantee the security of important data.

Description

technical field [0001] The present application relates to the security field of embedded devices, and in particular, the present application relates to a management and control method, device, electronic equipment and computer storage medium of a security carrier. Background technique [0002] In the production process of the smart card, writing the COS script data into the chip of the smart card is generally called a card writing operation in the art, and is a key step in the production process. In the mass production stage, the card writing tools and operators involved in the card writing process are all internal. Even if the card writing process is handled by presenting the COS script in plain text, the security of the COS script is still within the scope of control. [0003] However, in the non-mass production stage including joint debugging test and closed-loop demonstration scenarios, it also involves card writing operations on some smart cards. Since the card writing...

AI Technical Summary

Problems solved by technology

Since the card writing tools and operators involved in the card writing process at this stage are all uncontrollable third parties, if there is no control over the card writing process and the COS script is presented in plain text, then the security of the COS script will be greatly jeopardized. Issues, eg: COS scripts are leaked

Images