Chip cards that utilize in-card display confirmation and biometric identification to achieve the "what you see is what you sign" verification process.

Abstract

This invention provides a chip card that utilizes in-card display confirmation and biometric identification to achieve "what you see is what you sign" verification. The chip card includes a coupling coil assembly, a communication module, a display module, a fingerprint recognition module, and a control module. The communication module, display module, fingerprint recognition module, and control module are each electrically connected to the coupling coil assembly and are actuated by driving power generated by the coupling coil assembly after passive sensing. The control module is also electrically connected to the communication module, display module, and fingerprint recognition module. When the control module connects to an external device through the communication module, it receives an operation request requiring user authorization and displays it on the electronic paper display module for confirmation. After the user completes biometric verification with their fingerprint, a digital signature containing an authorization serial number is generated to complete the signature confirmation of the operation request, thereby enhancing the security of transaction authorization.

Claims

1. A chip card that utilizes in-card display confirmation and biometric identification to achieve "what you see is what you sign" verification, comprising: a coupling coil group for generating driving power after passive sensing; a communication module electrically connected to the coupling coil group and actuated by the driving power; a display module, which is electronic paper and electrically connected to the coupling coil group and actuated by the driving power; a fingerprint recognition module electrically connected to the coupling coil group and actuated by the driving power; and a control module electrically connected to the coupling coil group, the communication module, the display module, and the fingerprint recognition module and actuated by the driving power, wherein when the control module is connected to an external device through the communication module, it receives an operation request requiring authorization from a user and displays it through the display module. After the user confirms the information seen, and performs biometric verification using the user's personal fingerprint on the fingerprint recognition module, it generates a digital signature containing an authorization serial number to complete the signature confirmation of the operation request.

2. The chip card as described in claim 1, wherein, The authorization sequence number is continuously incremented to prevent retransmission attacks, and the authorization process of the control module is triggered and controlled by APDU instructions.

3. The chip card as described in claim 2, wherein, When the control module receives a response reset signal or APDU command query from the external device, it discloses a security capability parameter for the external device to negotiate.

4. The chip card as described in claim 1, wherein, The control module supports authorized operation in both online and offline modes. In the offline mode, the control module uses a public key signed by an authorized authority and a credential authority's seal to complete the verification and generate the digital signature.

5. The chip card as described in claim 4, wherein, The control module includes a cross-institutional registration data area for storing identification information of multiple service providers, and writing to the cross-institutional registration data area requires authorization from the issuing authority.

6. The chip card as described in claim 1, wherein, The control module stores multiple signature credentials, multiple encryption / decryption credentials, and multiple keys in a record-based storage structure, with each signature credential, encryption / decryption credential, and key recorded in its respective single file.

7. The chip card as described in claim 6, wherein, These signature credentials and encryption / decryption credentials correspond to each other and are managed through different processes, and each supports multiple generations of management status.

8. The chip card as described in claim 7, wherein, The signature credentials in the single file include at least one signature credential recorded as a past management state and one signature credential recorded as a current management state. When the control module receives the operation request and performs the authorization operation, it directly uses the current signature credential to verify the operation request and generate the digital signature execution authorization.

9. The chip card as described in claim 1, wherein, This communication module supports both contact and contactless communication interfaces.

10. The chip card as described in claim 1, wherein, When the control module displays information through the display module, it only shows the key tags of the operation request to improve efficiency.

Images