Data exchange management methods, electronic devices, and storage media

By encrypting the unique identifier of the contactless card, generating an identifier private key, and sending it to the mobile terminal, the problem of poor security of traditional name tags is solved, and the security and efficiency of data exchange are improved.

CN114595488BActive Publication Date: 2026-04-03BOE TECHNOLOGY GROUP CO LTD
View PDF 2 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-03-18
Publication Date
2026-04-03

AI Technical Summary

Technical Problem

Traditional name badges have limited functionality, poor security, and are easily copied, failing to meet the needs of rapid identity verification in major international events and activities.

Method used

By obtaining the unique identifier of the contactless card, encrypting it to obtain the identifier's private key, and storing it in a USB encryption device, the key is sent to the corresponding terminal according to the mobile terminal's control permissions to achieve data exchange.

Benefits of technology

It improves the security and usability of contactless cards, ensures the security and efficiency of data transmission, and is suitable for data exchange in special scenarios.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN114595488B_ABST
    Figure CN114595488B_ABST
Patent Text Reader

Abstract

This application discloses a data exchange management method, electronic device, and storage medium. The management method includes: obtaining a unique identifier of a contactless card; encrypting the unique identifier to obtain an identifier private key; storing the identifier private key in a USB encryption device; determining the control authority of a mobile terminal over the contactless card; and sending the identifier private key to the corresponding mobile terminal according to the control authority, enabling the mobile terminal to exchange data with the corresponding contactless card based on the identifier private key. The management method of this application enables data exchange between the contactless card and the mobile terminal, and ensures the security of the data exchange process, thereby enhancing the usability of contactless cards.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of data encryption, and in particular to a data exchange management method, electronic device, and storage medium. Background Technology

[0002] As China's international standing rises, large-scale international events and domestic activities are frequently held in China. Due to factors such as the pandemic and security, problems such as slow entry speeds are becoming increasingly serious. Traditional name badges only serve to verify identity, have a single function, and are extremely difficult to replicate and secure. Summary of the Invention

[0003] This application aims to address at least one of the technical problems existing in the prior art. To this end, this application provides a data exchange management method, an electronic device, and a storage medium.

[0004] The data exchange management method of this application, used in a host control terminal, includes:

[0005] Obtain a unique identifier for the contactless card;

[0006] The unique identifier is encrypted to obtain an identifier private key, and the identifier private key is stored in a USB encryption device;

[0007] Determine the mobile terminal's control permissions over the contactless card;

[0008] According to the control permissions, the identification private key is sent to the corresponding mobile terminal, so that the mobile terminal exchanges data with the corresponding contactless card based on the identification private key.

[0009] In some implementations, obtaining the unique identifier of the contactless card includes:

[0010] The unique identifier is obtained by reading the information of the contactless card using near-field communication technology.

[0011] In some embodiments, the management method further includes:

[0012] Receive the physical address of the mobile terminal;

[0013] Configure the control permissions for the contactless card on the mobile terminal based on the physical address.

[0014] In some implementations, configuring the control permissions for the contactless card on the mobile terminal based on the physical address includes:

[0015] The mobile terminal is numbered according to its physical address;

[0016] The contactless card is numbered according to the unique identifier;

[0017] Configure write and / or read permissions for the mobile terminal and the corresponding contactless card based on their respective serial numbers.

[0018] In some implementations, encrypting the unique identifier to obtain an identifier private key and storing the identifier private key in a USB encryption device includes:

[0019] The unique identifier is encrypted using AES encryption to obtain the identifier's private key.

[0020] This application describes a data exchange management method for a mobile terminal, comprising:

[0021] Send the physical address of the mobile terminal to the host control terminal;

[0022] After the host control terminal determines the mobile terminal's control authority over the contactless card based on the physical address, it sends an identification private key, which is encrypted based on the unique identifier of the contactless card and stored in a USB encryption device.

[0023] Data is exchanged with the corresponding contactless card based on the identified private key.

[0024] In some implementations, the step of exchanging data with the corresponding contactless card based on the identifier private key includes:

[0025] The APDU instruction data is encrypted using the identified private key;

[0026] The encrypted APDU instruction data is sent to the contactless card.

[0027] In some implementations, the APDU instruction data includes regular commands, specific commands, instruction parameters, transmitted byte data, and data length; encrypting the APDU instruction data according to the identifier private key includes:

[0028] The specific command and / or the transmitted byte data are encrypted using AES encryption.

[0029] In some implementations, the step of exchanging data with the corresponding contactless card based on the identifier private key includes:

[0030] Read the encrypted data stored in the contactless card;

[0031] The target data is obtained by decrypting the encrypted data using the private key.

[0032] In some implementations, the step of exchanging data with the corresponding contactless card based on the identifier private key includes:

[0033] Based on the identified private key, data is exchanged with the corresponding contactless card via near-field communication technology.

[0034] The electronic device of this application includes a processor and a memory, wherein the memory stores a computer program that, when executed by the processor, causes the processor to perform the management method.

[0035] The present application provides a non-volatile computer-readable storage medium containing a computer program that, when executed by one or more processors, causes the processors to perform the management method.

[0036] In the data exchange management method, electronic device, and computer storage medium of this application, the identifier of the contactless card is encrypted to obtain the identifier private key. Then, according to the control permissions of the mobile terminal over the contactless card, the identifier private key is sent to the corresponding mobile terminal. In this way, the mobile terminal can exchange data with the contactless card according to the identifier private key, thereby realizing communication and improving the security and usability of the contactless card.

[0037] Additional aspects and advantages of this application will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of this application. Attached Figure Description

[0038] The above and / or additional aspects and advantages of this application will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein:

[0039] Figure 1 This is a flowchart illustrating a data exchange management method according to certain embodiments of this application;

[0040] Figure 2 This is a schematic diagram of the host control terminal module in some embodiments of this application;

[0041] Figure 3-6 This is a flowchart illustrating the management method of some embodiments of this application;

[0042] Figure 7 This is a schematic diagram of a mobile terminal according to certain embodiments of this application;

[0043] Figure 8 This is a flowchart illustrating the management method of some embodiments of this application;

[0044] Figure 9 This is a schematic diagram of APDU instructions in some embodiments of this application;

[0045] Figure 10-11 This is a flowchart illustrating the management method of some embodiments of this application. Detailed Implementation

[0046] The embodiments of this application are described in detail below. Examples of these embodiments are shown in the accompanying drawings, wherein the same or similar reference numerals denote the same or similar elements or elements having the same or similar functions throughout. The embodiments described below with reference to the accompanying drawings are exemplary and intended to explain this application, and should not be construed as limiting this application.

[0047] Please see Figure 1 This application provides a data exchange management method, which can be applied to the host control end. The management method includes the following steps:

[0048] 01. Obtain the unique identifier of the contactless card;

[0049] 02. Encrypt the unique identifier to obtain the identifier private key, and store the identifier private key on the USB encrypted device;

[0050] 03. Determine the mobile terminal's control permissions over the contactless card;

[0051] 04. Based on the control permissions, the identifier private key is sent to the corresponding mobile terminal, enabling the mobile terminal to exchange data with the corresponding contactless card based on the identifier private key.

[0052] Please see Figure 2 This application provides a host control terminal 100 for data exchange. The host control terminal 100 includes an acquisition module 110, an encryption module 120, a determination module 130, and a first sending module 140. Step 01 can be implemented by the acquisition module 110, step 02 can be implemented by the encryption module 120, step 03 can be implemented by the determination module 130, and step 04 can be implemented by the first sending module 140.

[0053] Alternatively, the acquisition module 110 can be used to acquire the unique identifier of the contactless card; the encryption module 120 can be used to encrypt the unique identifier to obtain the identifier private key, and store the identifier private key in a USB encryption device. The determination module 130 can be used to determine the control authority of the mobile terminal over the contactless card. The first sending module 140 can be used to send the identifier private key to the corresponding mobile terminal according to the control authority, so that the mobile terminal can exchange data with the corresponding contactless card based on the identifier private key.

[0054] This application also provides an electronic device, which includes a processor and a memory. The memory stores a computer program, which is executed by the processor, enabling the processor to obtain a unique identifier of a contactless card; encrypt the unique identifier to obtain an identifier private key, and store the identifier private key in a USB encryption device; determine the mobile terminal's control permissions over the contactless card; and send the identifier private key to the corresponding mobile terminal according to the control permissions, enabling the mobile terminal to exchange data with the corresponding contactless card based on the identifier private key.

[0055] In the data exchange management method, host control terminal 100, and electronic device of this application, the identifier private key is obtained by encrypting the identifier of the contactless card. Then, according to the control permissions of the mobile terminal over the contactless card, the identifier private key is sent to the corresponding mobile terminal. In this way, the mobile terminal can exchange data with the contactless card according to the identifier private key, thereby realizing communication and improving the security and use of the contactless card.

[0056] As will be understood by those skilled in the art, a contactless card is a new type of smart card that functions the same as a contact ID card or IC card, except that it does not require a power source. Instead, it draws power from the magnetic field of the card reader through a receiving antenna, processes the data, and feeds it back to the card reader.

[0057] In this application, the contactless card can be an electronic badge, which may contain the wearer's identity information. The host control terminal 100 can be a card reader; that is, this application mainly uses a card reader to realize data exchange between the electronic badge and the mobile terminal, ensuring strict data encryption in special scenarios and improving the security and usability of the electronic badge.

[0058] Furthermore, the contactless card mainly transmits data through Near Field Communication (NFC) technology. The host control terminal 100 can be an NFC device. The contactless card can communicate with the host control terminal 100 and the mobile terminal through NFC, thereby realizing data transmission between the host control terminal 100 and the mobile terminal.

[0059] The host control terminal 100 has read and write permissions for contactless cards. It can read the ID (unique identifier) ​​of the contactless card through near-field communication technology and encrypt this unique identifier to obtain the private key. This prevents the unique identifier from being leaked during transmission and ensures transmission security.

[0060] The USB encryption device can be plugged into and connected to the host control terminal 100. The USB encryption device can be a software dongle, which is a hardware and software encryption product that is plugged into the parallel port of a computer. It usually has tens or hundreds of bytes of non-volatile storage space available for reading and writing.

[0061] The host control terminal 100 also communicates with the mobile terminal. After the host control terminal 100 configures the control permissions of the mobile terminal for a certain contactless card, it can send the private key encrypted by the USB encryption device to the mobile terminal, enabling communication between the mobile terminal and the contactless card, thereby realizing the data exchange between the mobile terminal and the contactless card based on the identifier private key.

[0062] Please see Figure 3 In some implementations, before step 01, the management method further includes:

[0063] 05. Receive the physical address of the mobile terminal;

[0064] 06. Configure control permissions for contactless cards on mobile terminals based on physical addresses.

[0065] Please combine further Figure 2 In some embodiments, the host control terminal 100 further includes a first receiving module 150 and a configuration module 160. Step 05 can be implemented by the first receiving module 150, and step 06 can be implemented by the configuration module 160. Alternatively, the first receiving module 150 can be used to receive the physical address of the mobile terminal; the configuration module 160 can be used to configure control permissions for the contactless card on the mobile terminal according to the physical address.

[0066] In some implementations, the processor is used to receive the physical address of the mobile terminal and configure control permissions for the contactless card for the mobile terminal based on the physical address.

[0067] Specifically, the physical address can be a MAC address. The host control terminal 100 can identify the mobile terminal's identity information through its physical address and configure control permissions for the contactless card based on the physical address. Thus, the mobile terminal's control permissions for the contactless card can be determined subsequently based on the physical address.

[0068] Please see Figure 4 In some implementations, step 06 includes the following sub-steps:

[0069] 061, assign a number to the mobile terminal based on its physical address;

[0070] 062. Number the contactless card according to its unique identifier;

[0071] 063. Configure write and / or read permissions for the mobile terminal and the corresponding contactless card based on the mobile terminal and the contactless card number.

[0072] In some implementations, sub-steps 061-063 can be implemented by configuration module 160. In other words, configuration module 160 is also used to number the mobile terminal according to the physical address, number the contactless card according to the unique identifier, and configure the write permissions and / or read permissions of the mobile terminal and the corresponding contactless card according to the numbers of the mobile terminal and the contactless card.

[0073] In some implementations, the processor can be used to number the mobile terminal based on its physical address, number the contactless card based on its unique identifier, and configure write and / or read permissions for the mobile terminal and the corresponding contactless card based on the numbers of the mobile terminal and the contactless card.

[0074] Specifically, the host control terminal 100 can also manage the unique identifiers of contactless cards and the physical addresses of mobile terminals, and configure each mobile terminal to control access to its corresponding contactless card, including whether it has read and write permissions. In this way, the host control terminal 100 can subsequently identify mobile terminals and contactless cards by their identifiers, and send the identifier's private key to the corresponding mobile terminal according to the control permissions, enabling the mobile terminal to exchange data with the corresponding contactless card based on the identifier's private key.

[0075] Please see Figure 5 In some implementations, step 02 includes the following sub-steps:

[0076] 021. The unique identifier is encrypted using AES encryption to obtain the identifier's private key.

[0077] Please combine further Figure 2 In some implementations, sub-step 021 can be implemented by encryption module 120. Alternatively, encryption module 120 can be used to encrypt the unique identifier using AES encryption to obtain the identifier's private key.

[0078] In some implementations, the processor can be used to encrypt the unique identifier using AES encryption to obtain the identifier's private key.

[0079] It should be noted that AES encryption stands for Advanced Encryption Standard. AES is a symmetric encryption algorithm, meaning that encryption and decryption use the same key. Therefore, after encrypting the unique identifier using AES to obtain the identifier's private key, the mobile terminal can subsequently use the same key to decrypt the identifier's private key to obtain the identifier, thus recognizing the contactless card.

[0080] Please see Figure 6This application also provides a data exchange management method for a mobile terminal 200, the management method comprising:

[0081] 11. Send the physical address of the mobile terminal to the host control terminal;

[0082] 12. After the receiving host control terminal determines the mobile terminal's control authority over the contactless card based on the physical address, it sends the identification private key. The identification private key is encrypted based on the unique identifier of the contactless card and stored in the USB encryption device.

[0083] 13. Exchange data with the corresponding contactless card based on the identifier private key.

[0084] Please combine further Figure 7 This application also provides a mobile terminal 200, which may include a second transmitting module 210, a second receiving module 220, and a switching module 230. Step 11 can be implemented by the second transmitting module 210, step 12 can be implemented by the second receiving module 220, and step 13 can be implemented by the switching module 230.

[0085] Alternatively, the second sending module 210 is used to send the physical address of the mobile terminal 200 to the host control terminal 100; the second receiving module 220 is used to receive the identification private key sent by the host control terminal 100 after determining the control authority of the mobile terminal 200 to the contactless card based on the physical address. The identification private key is encrypted based on the unique identifier of the contactless card and stored in the USB encryption device. The exchange module 230 can be used to exchange data with the corresponding contactless card based on the identification private key.

[0086] This application also provides an electronic device, which includes a processor and a memory. The memory stores a computer program and is executed by the processor, enabling the processor to send the physical address of the mobile terminal 200 to a host control terminal, receive an identification private key sent by the host control terminal after determining the control permissions of the mobile terminal 200 for the contactless card based on the physical address, the identification private key being encrypted using the unique identifier of the contactless card and stored in a USB encryption device, and exchange data with the corresponding contactless card based on the identification private key.

[0087] In the data exchange management method, mobile terminal 200, and electronic device of this application, the mobile terminal 200 can send its physical address to the host control terminal 100, so that the host control terminal 100 can identify the mobile terminal 200 based on the physical address and determine the control authority of the mobile terminal 200, and send an identification key to the mobile terminal 200. After receiving the identification key, the mobile terminal 200 can exchange data with the corresponding contactless card based on the identification private key, thereby realizing communication with the contactless card. In this way, the mobile terminal can obtain the stored information from the contactless card.

[0088] It should be noted that the mobile terminal 200 can be a mobile phone, tablet, or smart wearable device (e.g., smartwatch, smart bracelet, etc.). In this embodiment, the mobile terminal 200 can be described using a mobile phone as an example. That is, the data exchange management method of this application embodiment is applied to a mobile phone, but is not limited to a mobile phone.

[0089] The mobile terminal 200 can communicate with the host control terminal 100 via an APP client and register / login via the APP client. After logging in, the mobile terminal 200 obtains its physical address and sends it to the host client 100 via the second sending module 210. After receiving the identification key sent by the host control terminal, the identification key can be decrypted to determine the contactless card corresponding to the identification key, and then communication and data exchange can be performed with the contactless card.

[0090] Please combine Figure 8 In some implementations, step 13 includes the following sub-steps:

[0091] 131. Encrypt the APDU command data according to the identifier private key;

[0092] 132, send the encrypted APDU instruction data to the contactless card.

[0093] In some implementations, sub-steps 131 and 132 can be implemented by the exchange module 230. In other words, the exchange module 230 can be used to encrypt the APDU instruction data according to the identifier private key and send the encrypted APDU instruction data to the contactless card.

[0094] In some implementations, the processor can be used to encrypt APDU instruction data according to the identifier private key and send the encrypted APDU instruction data to the contactless card.

[0095] Please combine Figure 9It should be noted that the Application Protocol Data Unit (ADPU) refers to the data unit transmitted between peer layers. APDU instruction data includes regular commands (CLA), specific commands (INS), instruction parameters (P1, P2), transmitted byte data (Lc), and data length (Le). Furthermore, the regular commands (CLA), specific commands (INS), instruction parameters (P1, P2), transmitted byte data (Lc), and data length (Le) are arranged in the following order.

[0096] In sub-step 131, all commands and data in the APDU instruction data can be encrypted using AES encryption, or only a specific command or data within the APDU instruction data can be encrypted. For example, in some examples, the mobile terminal 200 encrypts the regular command CLA, specific command INS, instruction parameters (P1, P2), transmitted byte data Lc, and data length Le in the APDU instruction using the identifier private key, thus obtaining encrypted APDU instruction data. In other examples, the mobile terminal 200 encrypts either the specific command CLA or the transmitted byte data Lc in the APDU instruction using the identifier private key, thus obtaining encrypted APDU instruction data. In yet another example, the mobile terminal 200 encrypts both the specific command CLA and the transmitted byte data Lc in the APDU instruction using the identifier private key, thus obtaining encrypted APDU instruction data.

[0097] In sub-step 132, by sending the encrypted APDU command data to the contactless card, the security of the APDU command data during transmission can be ensured. Thus, the contactless card can exchange data with the mobile terminal 200 based on the APDU command data, allowing the mobile terminal 200 to obtain the desired information from the contactless card.

[0098] Please combine Figure 10 In some implementations, step 13 includes the following sub-steps:

[0099] 133, Read the encrypted data stored in the contactless card;

[0100] 134. Decrypt the encrypted data using the private key to obtain the target data.

[0101] In some implementations, sub-steps 133 and 134 can be implemented by the exchange module 230. In other words, the exchange module 230 can be used to read the encrypted data stored in the contactless card and decrypt the encrypted data according to the private key to obtain the target data.

[0102] In some implementations, the processor can be used to read encrypted data stored in a contactless card and decrypt the encrypted data using a private key to obtain the target data.

[0103] In this way, by reading the encrypted data stored in the contactless card, the security of data transmission between the contactless card and the mobile terminal 200 is improved.

[0104] Please combine Figure 11 In some implementations, step 13 includes the following sub-steps:

[0105] 135. Based on the identifier private key, data is exchanged with the corresponding contactless card via near-field communication technology.

[0106] In some implementations, sub-step 135 can be implemented by the exchange module 230, or the exchange module 230 can be used to exchange data with the corresponding contactless card via near-field communication technology based on the identifier private key.

[0107] In some implementations, the processor can be used to exchange data with the corresponding contactless card via near-field communication technology based on the identifier private key.

[0108] It should be noted that the mobile terminal 200 has Near Field Communication (NFC) functionality. The mobile terminal 200 can communicate with the contactless card via NFC, thereby reading the encrypted data stored in the contactless card and decrypting the encrypted data using a private key to obtain the target data. This improves the transmission efficiency and security of data transfer between the contactless card and the mobile terminal 200.

[0109] This application also provides a non-volatile computer-readable storage medium storing a computer program that, when executed by one or more processors, causes the processors to perform the aforementioned data exchange management method.

[0110] In the above embodiments, implementation can be achieved, in whole or in part, through software, hardware, firmware, or any other combination. When implemented in software, it can be implemented, in whole or in part, as a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium accessible to a computer or a data storage device such as a server or data center that integrates one or more available media. The available media can be magnetic media (e.g., floppy disks, hard disks, magnetic tapes), optical media (e.g., digital video discs (DVDs)), or semiconductor media (e.g., solid-state disks (SSDs)).

[0111] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0112] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0113] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0114] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A data exchange management method for a host control terminal, characterized in that, The management method includes: Obtain a unique identifier for the contactless card; The unique identifier is encrypted to obtain an identifier private key, and the identifier private key is stored in a USB encryption device; Determine the mobile terminal's control permissions over the contactless card; According to the control permissions, the identification private key is sent to the corresponding mobile terminal, so that the mobile terminal exchanges data with the corresponding contactless card according to the identification private key; The management method also includes: Receive the physical address of the mobile terminal; The mobile terminal is numbered according to its physical address; The contactless card is numbered according to the unique identifier; Configure write permissions and / or read permissions for the mobile terminal and the corresponding contactless card based on their respective serial numbers. The contactless card is an electronic badge, which contains the wearer's identity information; The step of configuring write and / or read permissions for the mobile terminal and the corresponding contactless card based on their respective serial numbers includes: The host control terminal manages the unique identifier and the physical address by numbering, and configures each mobile terminal to control the access permissions of the corresponding contactless card, as well as configure whether it has read and write permissions.

2. The management method according to claim 1, characterized in that, The unique identifier is obtained by reading the information of the contactless card using near-field communication technology.

3. The management method according to claim 1, characterized in that, The step of encrypting the unique identifier to obtain an identifier private key and storing the identifier private key in a USB encryption device includes: The unique identifier is encrypted using AES encryption to obtain the identifier's private key.

4. A data exchange management method for a mobile terminal, characterized in that, include: Send the physical address of the mobile terminal to the host control terminal; After the host control terminal determines the mobile terminal's control authority over the contactless card based on the physical address, it sends an identification private key, which is encrypted based on the unique identifier of the contactless card and stored in a USB encryption device. Data is exchanged between the identified private key and the corresponding contactless card; The step of receiving the host control terminal's determination of the mobile terminal's control permissions for the contactless card based on the physical address includes: Receive the physical address of the mobile terminal; The mobile terminal is numbered according to its physical address; The contactless card is numbered according to the unique identifier; Configure write permissions and / or read permissions for the mobile terminal and the corresponding contactless card based on their respective serial numbers. The contactless card is an electronic badge, which contains the wearer's identity information; The step of configuring write and / or read permissions for the mobile terminal and the corresponding contactless card based on their respective serial numbers includes: The host control terminal manages the unique identifier and the physical address by numbering, and configures each mobile terminal to control the access permissions of the corresponding contactless card, as well as configure whether it has read and write permissions.

5. The management method according to claim 4, characterized in that, The step of exchanging data with the corresponding contactless card based on the identifier private key includes: The APDU instruction data is encrypted using the identified private key; The encrypted APDU instruction data is sent to the contactless card.

6. The management method according to claim 5, characterized in that, The APDU instruction data includes regular commands, specific commands, instruction parameters, transmitted byte data, and data length. The encryption of the APDU instruction data based on the identifier private key includes: The specific command and / or the transmitted byte data are encrypted using AES encryption.

7. The management method according to claim 4, characterized in that, The step of exchanging data with the corresponding contactless card based on the identifier private key includes: Read the encrypted data stored in the contactless card; The target data is obtained by decrypting the encrypted data using the private key.

8. The management method according to claim 4, characterized in that, The step of exchanging data with the corresponding contactless card based on the identifier private key includes: Based on the identified private key, data is exchanged with the corresponding contactless card via near-field communication technology.

9. An electronic device, characterized in that, It includes a processor and a memory, the memory storing a computer program and being executed by the processor, causing the processor to perform the management method according to any one of claims 1-3 or the management method according to any one of claims 4-8.

10. A non-volatile computer-readable storage medium containing a computer program, characterized in that, When the computer program is executed by a processor, the processor performs the management method according to any one of claims 1-3 or the management method according to any one of claims 4-8.

Citation Information

Patent Citations

  • Method and apparatus for reading and writing smart card

    CN108243402A

  • Contactless card with multiple rotating security keys

    US10915888B1