Method and system for information interaction of privacy hierarchical protection RFID smart card

Abstract

The present application relates to the field of radio frequency identification technology, and particularly relates to a method and system for information interaction of a privacy-graded protection RFID smart card. The method comprises: sending a data reading signal corresponding to an operating frequency of at least one electronic tag in the RFID smart card; obtaining data stored in the electronic tag of the corresponding operating frequency transmitted by the RFID smart card according to the data reading signal; judging whether there is password data in the received data; if there is no password data, directly obtaining the received data as non-private information data of the smart card user; if there is password data, obtaining a key corresponding to the password data according to the password data; and obtaining decrypted private information data of the smart card user after decryption processing of encrypted private information data of the smart card user corresponding to the password data according to the obtained key. The present application can quickly read information in the RFID smart card while reasonably protecting the private information of the smart card user.

Description

[0001] The present application is a divisional application of the invention patent application with the invention name of "RFID smart card information interaction method, device and system with privacy protection", application number 2024105675774, which was filed on May 09, 2024. TECHNICAL FIELD

[0002] The present application relates to the field of radio frequency identification technology, and particularly relates to a privacy hierarchical protection RFID smart card information interaction method and system. BACKGROUND

[0003] Radio frequency identification (RFID) is a kind of non-contact automatic identification technology. Because it has the characteristics of small size, large capacity, reusability, no visible light source, good penetration, wireless instant long-distance reading mode, fast identification speed, simultaneous reading of multiple targets, and long service life, it has been widely used in campus cards.

[0004] When RFID technology is applied, information related to the user of the smart card can be stored in the campus card using RFID technology. Currently, campus smart cards using RFID technology can be used in scenarios such as attendance, access control, campus consumption, library management, book borrowing, dormitory management, and smart card user management. However, different application scenarios require different information about the user of the smart card. For example, in the attendance scenario, only the identity ID of the user of the smart card is needed, in the access control scenario, in addition to the identity ID of the user of the smart card, the access permission information of the user of the smart card is also needed, in the library book borrowing scenario, in addition to the identity ID of the user of the smart card, the book borrowing information of the user of the smart card is also needed, in the campus consumption scenario, in addition to the identity ID of the user of the smart card, the balance information in the card of the user of the smart card is also needed, and in the dormitory management scenario, in addition to the identity ID of the user of the smart card, the floor information, room information and class information of the user of the smart card are also needed, and in the smart card user management scenario, in addition to the identity ID of the user of the smart card, the class information, major information and score information of the user of the smart card are also needed. However, the card reader in different application scenarios can often read all the information stored in the campus card. Since different information about the user of the smart card stored in the campus card has different privacy sensitivity, the current RFID smart card information interaction method often reads the private information of the user of the smart card that is not needed in the application scenario but has high sensitivity, lacking reasonable protection of the privacy of the user of the smart card. SUMMARY

[0005] Therefore, the embodiment of the present application provides a privacy hierarchical protection RFID smart card information interaction method and system, which is used to solve the technical problem that the existing RFID campus smart card information interaction method cannot reasonably protect the privacy information of the smart card user.

[0006] The technical scheme adopted by the present application is:

[0007] In the first aspect, the present application provides a privacy hierarchical protection RFID smart card information interaction method, the RFID smart card has at least one non-private data electronic tag and at least one private data electronic tag, the non-private data electronic tag has a first data storage area, the first data storage area is used to store the unique identifier of the smart card user, the private data electronic tag has a password data storage area and a second data storage area, the second data storage area is used to store the encrypted partial private information data of the smart card user, and the password data storage area is used to store the password data corresponding to the partial private information data, the RFID smart card has at least two private data electronic tags, the non-private data electronic tag and the private data electronic tag have different operating frequencies, and the method comprises the following steps:

[0008] The smart card receives a data reading signal with an operating frequency, determines the electronic tag with the corresponding operating frequency according to the data reading signal, and activates;

[0009] After the smart card is activated, the smart card transmits the data containing user information stored in the electronic tag with the corresponding operating frequency according to the data reading signal;

[0010] It is judged whether the password data exists in the data containing user information;

[0011] If the password data does not exist, a first operation is performed according to the data containing user information, and the first operation is an operation for non-private information data;

[0012] If the password data exists, a key corresponding to the password data is obtained according to the password data;

[0013] The encrypted private information data of the smart card user corresponding to the password data is decrypted according to the obtained key, and the partial private information data of the smart card user obtained after the decryption is obtained, and a second operation is performed, and the second operation is an operation related to the private information data of the smart card user;

[0014] When the first operation and the second operation are completed, the smart card is fed back the confirmation information of the completion.

[0015] In a second aspect, the present application provides an RFID smart card information interaction system with privacy protection, comprising an RFID smart card, a card reader and a terminal device, the card reader and the terminal device being connected, the RFID smart card having at least one non-private data electronic tag and at least one private data electronic tag, the non-private data electronic tag having a first data storage area for storing a unique identifier of a smart card user, the private data electronic tag having a password data storage area and a second data storage area, the second data storage area being used for storing encrypted partial private information data of the smart card user, and the password data storage area being used for storing password data corresponding to the partial private information data, the non-private data electronic tag and the private data electronic tag having different operating frequencies, and the terminal device comprising at least one processor, at least one memory and computer program instructions stored in the memory, the computer program instructions being executed by the processor to implement the method of the first aspect.

[0016] Beneficial effects: The RFID smart card information interaction method and system with hierarchical privacy protection function of the present application store non-private information data of a smart card user by using a non-private data electronic tag of an RFID smart card, and store encrypted private information data of the smart card user and corresponding keys by using a private data electronic tag of the RFID smart card. Since the operating frequencies of the electronic tags are different, only a card reader with a corresponding frequency band can read the private data in the corresponding electronic tag, which can effectively prevent the more sensitive private data stored in the electronic tags from being read by a terminal device without authorization. Since the non-private data electronic tag stores non-private information data of the smart card user without encryption, it can be quickly read by the terminal device. The private data electronic tag stores private information data of the smart card user, which needs to be decrypted before being obtained, so only a terminal device with the right to obtain the corresponding private information data can decrypt the obtained private information data by using the keys stored in advance, so that the private data in the RFID smart card can be selectively read according to the reading rights of the application scenario, thereby ensuring the data reading speed while reasonably protecting the private information of the smart card user. BRIEF DESCRIPTION OF DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings needed in the embodiments of the present application will be briefly introduced as follows. Those skilled in the art can obtain other drawings according to these drawings without creative labor, and these are within the protection scope of the present application.

[0018] Figure 1 is a flowchart of the RFID smart card information interaction method with privacy protection function of the present application.

[0019] Figure 2 Flowchart of the method for writing smart card user privacy data into an RFID smart card according to a privacy information data security level of the present application;

[0020] Figure 3 Flowchart of the method for obtaining a key according to the present application;

[0021] Figure 4 Flowchart of the method for obtaining smart card user privacy data according to a key of the present application;

[0022] Figure 5 Flowchart of the method for reading data in an RFID card in different application scenarios of the present application;

[0023] Figure 6 Flowchart of the method for controlling a consumption account according to abnormal consumption behavior of an RFID smart card of the present application;

[0024] Figure 7 Flowchart of the method for judging whether the consumption behavior of an RFID smart card is abnormal of the present application;

[0025] Figure 8 Structural block diagram of an RFID smart card information interaction device with a privacy protection function of the present application;

[0026] Figure 9 Structural block diagram of an RFID smart card information interaction system with a privacy protection function of the present application. DETAILED DESCRIPTION

[0027] To make the objectives, technical solutions, and advantages of the embodiments of the present invention clearer, the technical solutions of the embodiments of the present invention will be clearly and completely described below with reference to the accompanying drawings. It should be noted that, in this document, relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. In the description of the present invention, it should be understood that the terms "center," "upper," "lower," "front," "rear," "left," "right," "vertical," "horizontal," "top," "bottom," "inner," and "outer," etc., indicate orientations or positional relationships based on the orientations or positional relationships shown in the accompanying drawings, and are only for the convenience of describing this application and simplifying the description, and do not indicate or imply that the referred device or element must have a specific orientation, or be constructed and operated in a specific orientation, and therefore should not be construed as a limitation of the present invention. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, the element defined by the phrase "comprising..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element. Where there is no conflict, embodiments of the present invention and the various features thereof can be combined with each other, all of which are within the scope of protection of the present invention.

[0028] Example 1

[0029] like Figure 1 As shown, this embodiment provides an RFID smart card information interaction method with privacy protection function. The RFID smart card used in this method has at least one non-privacy data electronic tag and at least one privacy data electronic tag. Each electronic tag has a different operating frequency. The non-privacy data electronic tag has a first data storage area for storing non-privacy information data of the smart card user. The privacy data electronic tag has a password data storage area and a second data storage area for storing encrypted privacy information data of the smart card user. The password data storage area is used to store password data corresponding to the encrypted privacy information data of the smart card user. The non-privacy data electronic tag and the privacy data electronic tag have different operating frequencies. The method includes the following steps:

[0030] S1: The smart card receives a data reading signal with an operating frequency, determines the electronic tag corresponding to the operating frequency based on the data reading signal, and activates it;

[0031] S2: the smart card activates to obtain the data containing user information stored in the electronic tag with the operation frequency corresponding to the communication frequency band emitted by the RFID smart card according to the data reading signal;

[0032] When the data stored in the RFID smart card needs to be read, the card reader needs to send a data reading signal to the RFID smart card, and the reading signal has a certain frequency band. When the frequency band of the reading signal is the same as the operation frequency of the electronic tag in the RFID smart card, the electronic tag will send the data stored in the electronic tag. The data containing user information refers to the data stored in the first data storage area or the second data storage area and the password data storage area.

[0033] Since the RFID smart card has multiple electronic tags, each with a different operation frequency, if the card reader is a single-frequency card reader, only the electronic tag with the same frequency as the reading signal of the card reader will respond to the card reading request of the card reader and send the data stored in the electronic tag to the outside.

[0034] If the card reader is a composite card reader with multiple frequency bands (at least two frequency bands), multiple frequency bands of reading signals can be sent to the RFID smart card. If these reading signals are respectively the same as the operation frequencies of the multiple electronic tags in the RFID smart card, the data stored in the electronic tags with different operation frequencies can be read. In a specific embodiment, a low-frequency module with a low-frequency coil and a high-frequency module with a high-frequency coil are combined and packaged into a smart card chip, or a low-frequency module and a super-high-frequency module are combined and packaged into a smart card chip. In actual use, the high-frequency frequency band of the high-frequency module is 13.56 MHz, the low-frequency frequency band of the low-frequency module is between 125-135 kHz, and the preferred frequency is 125 kHz; the super-high-frequency frequency band of the super-high-frequency module is between 870-960 MHz, and the preferred frequency is 915 MHz. The campus smart card of the present application can be a combination of low-frequency modules, high-frequency modules, and super-high-frequency modules. The existing preparation process can be used to achieve it.

[0035] The terminal device can be connected with the card reader in this embodiment, and the terminal device obtains the data in the RFID smart card read by the card reader.

[0036] For example, for a campus attendance system, a terminal device can be provided in the campus attendance system, which is connected with a single-frequency card reader. The single-frequency card reader sends a reading signal with a frequency band corresponding to the operation frequency of the non-private data electronic tag, so as to read the smart card user ID and other non-private information stored in the non-private data electronic tag. The terminal device of the campus attendance system obtains the smart card user ID as the information of the smart card user attendance through the card reader.

[0037] For example, for a library book borrowing management system, a terminal device can be set in the system, which is connected with a dual-band composite card reader. The dual-band card reader sends a reading signal corresponding to the operating frequency of the non-private data electronic tag, so as to read the non-private information such as the smart card user ID stored in the non-private data electronic tag. The dual-band card reader also sends a reading signal corresponding to the operating frequency of one of the private electronic tags, so as to read the smart card user book borrowing data stored in the private electronic tag. The terminal device set in the library book borrowing management system obtains the smart card user ID and the smart card user book borrowing data read by the dual-band card reader from the RFID smart card.

[0038] For example, for a student management system, a terminal device can be set in the system, which is connected with a multi-band (at least three bands) composite card reader. The composite card reader sends a plurality of reading signals of different frequency bands to the RFID smart card, each frequency band being the same as the operating frequency of one of the electronic tags, so as to read the data in the plurality of electronic tags. The terminal device set in the student management system can obtain the data in the plurality of electronic tags read by the multi-band card reader.

[0039] S3: determining whether the password data exists in the data containing user information parsed from the received data;

[0040] If the card reader only sends a reading signal corresponding to the operating frequency of the non-private data electronic tag, the data received by the card reader is only the non-private information data of the smart card user stored in the non-private data electronic tag. In this case, the password data does not exist in the data received by the card reader.

[0041] If the card reader sends a reading signal corresponding to the operating frequency of the private data electronic tag, the card reader will receive the private information data and the password data of the smart card user stored in the private data electronic tag.

[0042] S4: if not, performing a first operation according to the data containing user information;

[0043] In the case where the card reader only sends a reading signal corresponding to the operating frequency of the non-private data electronic tag, the card reader only reads the non-private information data of the smart card user in the RFID smart card, which is not encrypted and can be directly read to obtain the non-private information of the smart card user. Since the read data is the non-private information data of the user, the first operation is an operation for non-private information data, such as punching the card according to the unique identification of the user, signing in for class, etc.

[0044] S5: If the password data exists, a key corresponding to the password data is obtained according to the password data, and the data containing the user information is decrypted according to the key if the password data exists;

[0045] If the card reader reads the data in the privacy data electronic tag, the password data exists in the read data. The terminal device connected with the card reader searches the database storing the key for the key corresponding to the password data.

[0046] S6: After the encrypted privacy information data of the smart card user corresponding to the password data is decrypted according to the obtained key, the obtained privacy information data of the smart card user after the decryption is obtained, and a second operation is performed. The second operation is an operation related to the privacy information data of the smart card user, such as modifying the user's book borrowing information, modifying the user's account fund, modifying the user's score, etc.

[0047] S7: When the first operation and the second operation are completed, the smart card is fed back the confirmation information of the completion.

[0048] In the embodiment, the RFID smart card has at least two privacy data electronic tags, each of which is used to store a set of privacy information data, and the privacy information data of the smart card user stored in each privacy data electronic tag has different security levels, such as Figure 2 The method further includes the following steps:

[0049] S01: Obtain the non-privacy information data of the smart card user;

[0050] S02: Obtain the operation frequency corresponding to the non-privacy data electronic tag;

[0051] S03: According to the frequency band corresponding to the non-privacy data electronic tag, a write signal of the corresponding frequency band is sent to write the non-privacy information data of the smart card user into the non-privacy data electronic tag;

[0052] For the non-privacy information data of the smart card user, the embodiment can send a write signal of the same frequency band as the operation frequency of the non-privacy data electronic tag to the RFID smart card through the card writing device, and directly write the non-privacy information data of the smart card user into the non-privacy data electronic tag.

[0053] S04: Obtain the security level of the privacy information data of the smart card user;

[0054] The embodiment can grade the privacy information data of the smart card user in advance according to privacy, and the higher the privacy of the privacy information data, the higher the security level of the corresponding privacy information data, thereby dividing the privacy information data of the smart card user into different security levels. The terminal device connected with the card writing device acquires the security level of the privacy information data of the smart card user when acquiring the privacy information data of the smart card user.

[0055] S05: acquiring the privacy data electronic tag of the corresponding frequency band according to the security level of the privacy information data of the smart card user;

[0056] The embodiment allocates a privacy data electronic tag to the privacy information data of the smart card user of each security level. The higher the security level of the privacy information data of the smart card user, the lower the frequency band of the allocated privacy data electronic tag. In this way, when reading the privacy information data of the smart card user, the higher the security level of the data, the closer the distance between the card reader and the RFID smart card, thereby effectively protecting the privacy information data of the smart card user of a higher level.

[0057] S06: sending a writing signal of the corresponding frequency band according to the operating frequency of the privacy data electronic tag of the corresponding frequency band to write the privacy information data of the smart card user into the privacy data electronic tag of the corresponding frequency band.

[0058] This step sends a writing signal according to the operating frequency of the privacy data electronic tag of the corresponding security level after dividing the security level of the privacy information data of the smart card user. The frequency band of the writing signal is the same as the operating frequency of the corresponding privacy data electronic tag. For example, the residence address data in the privacy information data of the smart card user belongs to the second security level of the privacy information data, and the second privacy data electronic tag in the RFID smart card is allocated to store the privacy information data of the second security level. The writing device sends a writing signal of the same frequency band as the operating frequency of the second privacy data electronic tag to write the residence address data into the second privacy data electronic tag.

[0059] In the embodiment, each set of the privacy information data includes at least two sub-privacy information data, and the password data includes a plurality of sub-password data corresponding to the sub-privacy information data and the corresponding sub-password data,

[0060] The embodiment groups the sub-privacy information data belonging to the same security level into a set of privacy information data and stores them in the same privacy data electronic tag. For example, the four sub-privacy information data of the smart card user's grade point, account ID, account balance, and recent consumption amount can be grouped into a set of privacy information data, and a sub-password data is set for each of the four sub-privacy information data, i.e., the sub-password data and the sub-privacy information data correspond one-to-one.

[0061] As shown in Figure 3 S5: if there is the password data, acquiring the key corresponding to the password data according to the password data further comprises the following steps:

[0062] S51: judging whether the key corresponding to at least one of the sub-password data in the acquired password data is stored in the terminal device connected with the current card reader;

[0063] In this embodiment, the key corresponding to the sub-password data of the terminal device can be stored in the terminal device in advance. For example, the terminal device of the dormitory management system has the permission to acquire the private information of the user's address and the user's stay time of the smart card, but does not have the permission to acquire other private information of the user of the smart card. Therefore, the key corresponding to the sub-password data of the user's address and the user's stay time of the smart card can be stored in the terminal device in advance, and the key corresponding to other sub-password data will not be stored in the computer.

[0064] S52: if yes, acquiring the key corresponding to the sub-password data;

[0065] If the key corresponding to the acquired sub-password data is stored in the terminal device, it indicates that the terminal device has the permission to acquire the sub-private data corresponding to the sub-password data, and therefore the key corresponding to the sub-password data is acquired from the database of the terminal device.

[0066] S53: if no, generating a first prompt information, the first prompt information is used to prompt that the current terminal device does not have the permission to read the private information data stored in the private data electronic tag of the corresponding frequency band.

[0067] If the key corresponding to at least one of the read sub-password data is not found in the terminal device, it indicates that the terminal device does not have the permission to acquire the private information data stored in the private data electronic tag of the corresponding frequency band.

[0068] As shown in Figure 4 In this embodiment, S6: acquiring the decrypted private information data of the smart card user after the encrypted private information data of the smart card user corresponding to the password data is decrypted according to the acquired key further comprises the following steps:

[0069] S61: acquiring the position of the sub-private information data corresponding to the key in the private information data according to the sub-password data corresponding to the key;

[0070] Each sub-cipher data contains the position of the corresponding sub-privacy information data within the privacy information data. Therefore, the position of the sub-privacy information data corresponding to the key within the privacy information data can be obtained through the sub-cipher data corresponding to the key.

[0071] S62: Extract the sub-privacy information data corresponding to the key from the privacy information data based on the position of the sub-cipher data in the privacy information data;

[0072] The sub-cipher data can be one or more copies. If there is only one sub-cipher data, the extracted sub-privacy information data will also be one copy; if there are multiple sub-cipher data, the extracted sub-privacy information data will also be multiple copies. The aforementioned sub-cipher data, sub-privacy information data, and keys have a one-to-one correspondence.

[0073] S63: After decrypting the extracted sub-privacy information data using the key, obtain the privacy information data of the smart card user corresponding to the sub-privacy information data.

[0074] This step uses a key to decrypt the extracted sub-privacy information data. If there are multiple pieces of sub-privacy information data, the key corresponding to each piece of sub-privacy information data is used to decrypt each piece of sub-privacy information data.

[0075] In this embodiment, the privacy information data of smart card users of the aforementioned categories are divided into three groups of privacy information data with different confidentiality levels and written into three different privacy data electronic tags respectively.

[0076] like Figure 5 As shown, step S2: After the smart card is activated, the data containing user information stored in the electronic tag corresponding to the operating frequency of the data reading signal also includes the following steps:

[0077] S21: When the campus card is used for attendance, data from the non-privacy data electronic tag in the RFID smart card is obtained;

[0078] S22: When the campus card is used for recording public welfare activities, obtain the data in the non-privacy data electronic tag of the RFID smart card and the data in the first privacy data electronic tag of the RFID smart card;

[0079] S23: When the campus card is used for library borrowing, obtain data from the non-privacy data electronic tag of the RFID smart card and data from the second privacy data electronic tag of the RFID smart card;

[0080] S24: When the campus card is used to swipe the dormitory access control, obtain the data in the non-privacy data electronic tag of the RFID smart card and the data in the second privacy data electronic tag of the RFID smart card;

[0081] S25: When the campus card is used for smart card user score management, data in the non-private data electronic tag in the RFID smart card and data in the third private data electronic tag in the RFID smart card are acquired.

[0082] The embodiment can read data in private data electronic tags of different operating frequencies in different application occasions, can effectively prevent private data of high security level from being read by terminals with data reading authority of low security level, and can more reasonably protect private information of smart card users.

[0083] The consumption information of the smart card user belongs to extremely sensitive private information of the smart card user, and therefore, in the private data electronic tag used for storing private information data of the smart card user of the highest security level, historical consumption amount data of the smart card user is stored. When the campus card is used for consumption on a campus consumption terminal, as shown in the figure, the method further includes the following steps: Figure 6

[0084] S71: Recent historical consumption amount data of the smart card user stored in the private data electronic tag is read;

[0085] The number of recent historical consumption amount data of the smart card user in the private data electronic tag can be set as needed, for example, the last 10 pieces of historical consumption amount data can be stored in the private data electronic tag, and of course, other number of historical consumption amount data can also be stored, as long as the storage space size of the private data electronic tag for storing these data is not exceeded.

[0086] S72: Current consumption amount data is acquired;

[0087] The current consumption amount data refers to the consumption amount data of the RFID smart card when the RFID smart card is consumed on the campus consumption terminal.

[0088] S73: The historical consumption amount data of the smart card user and the current consumption amount data are analyzed to determine whether the current consumption behavior is abnormal;

[0089] This step determines whether the current consumption behavior is a normal consumption behavior or an abnormal consumption behavior through analysis of the historical consumption amount data of the smart card user and the current consumption amount data. The abnormal consumption behavior includes the behavior of illegal cardholders stealing the RFID smart card to consume, which will cause economic loss to the legal cardholder.

[0090] S74: If there is no abnormality, the current consumption amount of money in the account corresponding to the RFID smart card is allowed to be transferred out;

[0091] ​If the analysis result shows that the current consumption behavior is not abnormal, the background server can deduct the current consumption amount from the account corresponding to the campus card.

[0092] S75: If there is an abnormality, the account corresponding to the campus card is locked, and an alarm message is sent to the mobile phone currently bound to the smart card, the alarm message including at least the location of the consumption terminal that reads the private information data of the smart card user in the campus card.

[0093] The user can bind the RFID smart card with a designated mobile phone in advance, and the bound mobile phone number can be stored in the same private data information electronic tag as the account ID in the RFID smart card, so that the bound mobile phone number can be read together with the account ID by the consumption terminal. If the analysis result shows that the current consumption behavior is abnormal, the consumption terminal notifies the background server to lock the account corresponding to the campus card, and prohibits transferring money from the account before unlocking. The consumption terminal immediately sends the bound mobile phone information to the background server, and the background server sends an alarm message to the bound mobile phone, and adds the location of the consumption terminal in the alarm message to help the legal user of the RFID smart card to know the location of the RFID theft.

[0094] As shown in Figure 7 In this embodiment, the S73: analyzing the historical consumption amount data of the smart card user and the current consumption amount data to determine whether the current consumption behavior is abnormal further includes the following steps:

[0095] S731: selecting a preset number of consumption amount data from the recent historical consumption amount data of the smart card user;

[0096] Let the number of historical consumption amount data of the smart card user stored in the RFID smart card be n, and the preset number selected in this step be m, then m≤n is satisfied.

[0097] S732: removing the highest consumption amount data and the lowest consumption amount data from the selected consumption amount data, and calculating the average consumption amount a from the remaining consumption amount data;

[0098] In order to avoid the influence of normal accidental consumption behavior on the accuracy of the judgment, this step first removes the highest amount and the lowest amount in the recent consumption amount data.

[0099] S733: calculating the difference b between the current consumption amount and the average consumption amount;

[0100] Let the current consumption amount be CP, then the difference b between the current consumption amount and the average consumption amount is CP-a.

[0101] S734: obtaining a consumption abnormality difference coefficient K;

[0102] The consumption abnormality difference coefficient K can be set according to experience.

[0103] S735: calculating a ratio b / a of a difference value b between the current consumption amount and the average consumption amount and the average consumption amount a;

[0104] S736: comparing the ratio b / a with the consumption abnormality difference coefficient K, if the ratio b / a is greater than the consumption abnormality difference coefficient K, determining that the current consumption behavior is abnormal, if the ratio b / a is less than or equal to the consumption abnormality difference coefficient K, determining that the current consumption behavior is not abnormal.

[0105] In the embodiment, the privacy information data of the smart card user includes name, class, age, gender, grade point, attendance, borrowed book number, account ID, account balance, residence address, and recent consumption amount.

[0106] In the S01: obtaining the non-privacy information data of the smart card user, the ID information data of the smart card user is obtained as the non-privacy information data.

[0107] The ID information of the smart card user can be the student number, and since the privacy sensitivity of the information is low, the non-privacy information data can be written into the non-privacy data electronic tag, so that the terminal device can quickly read the student number, which is beneficial to quickly read a large number of student numbers in the attendance scene.

[0108] The S06: sending a write signal of the corresponding frequency band according to the operation frequency of the privacy data electronic tag of the corresponding frequency band to write the privacy information data of the student into the privacy data electronic tag of the corresponding frequency band further includes the following steps:

[0109] S061: writing the name, class, and gender data of the student into the first privacy data electronic tag to form a group of privacy information data, and the name, class, and gender are taken as the sub-privacy information data of the group of privacy information data, and the group of privacy information data has the lowest security level, so the data is encrypted by using the first encryption rule with low encryption complexity when being written.

[0110] S062: writing the borrowed book number, attendance, and residence address data of the student into the second privacy data electronic tag to form a group of privacy information data, and the borrowed book number, attendance, and residence address are taken as the sub-privacy information data of the group of privacy information data; the group of privacy information data has a medium security level, and the data is encrypted by using the second encryption rule with medium encryption complexity when being written.

[0111] S063: write the student's GPA, account ID, account balance, and recent consumption data into a third privacy data electronic tag to form a set of privacy information data, and the GPA, account ID, account balance, and recent consumption data are sub-privacy information data of the set of privacy information data; the set of privacy information data has the highest security level, and the third encryption rule with the highest encryption complexity is used for encryption when data is written.

[0112] To further improve the security of the fund account used by the smart card user for consumption, in the embodiment, the S04: obtaining the security level of the privacy information data of the smart card user further comprises:

[0113] S041: obtaining the one-time consumption limit CM of the smart card user;

[0114] The one-time consumption limit CM of the smart card user refers to the maximum value that can be reached by the smart card user for one consumption without verification, and if the amount exceeds the limit, further verification is required. The one-time consumption limit CM of the smart card user can be determined according to the historical consumption data of the user, or can be set by the user himself.

[0115] When the smart card user activates or recharges, the latest balance of the fund account authorized by the smart card user needs to be written into the smart card. In order to provide the security of the account, different frequency bands of electronic tags are used to store the account balance of the smart card user.

[0116] S043: determining whether the account balance of the smart card user is greater than the one-time consumption limit CM;

[0117] This step first determines whether the total balance of the account of the smart card user is greater than the one-time consumption limit CM.

[0118] S044: if not, determining that the security level of the account balance of the smart card user is the second security level;

[0119] If the total balance of the account of the smart card user is less than or equal to the one-time consumption limit CM, it indicates that the balance of the account of the smart card user is small, and at this time, it is not necessary to use the ultra-high frequency band for storage, therefore, the security level of the account balance of the smart card user is set to the second security level, and the second security level corresponds to the small consumption amount stored in the smart card which can be rewritten without further verification.

[0120] S045: if yes, dividing the balance A in the account of the smart card user into a first balance A1 and a second balance A2 according to the one-time consumption limit CM, such that A2 = CM, and A = A1 + A2;

[0121] If the total balance of the smart card user's account is greater than the one-time consumption limit CM, it indicates that the balance of the smart card user's account is large, and at this time, the balance can be divided into two parts for storage. Specifically, the total balance of the account is divided into two parts, one part is equal to the one-time consumption limit CM of the account funds, and the other part is the account funds exceeding the one-time consumption limit CM.

[0122] S046: taking the first security level as the security level of the first balance and taking the second security level as the security level of the second balance;

[0123] Since the second balance is the part less than or equal to the one-time consumption limit CM, a relatively low second security level is used, and the first balance as the exceeding part uses a relatively high first security level.

[0124] In the S05: obtaining the privacy data electronic tag of the corresponding frequency band of the privacy information data of the smart card user according to the security level of the privacy information data of the smart card user, the privacy data electronic tag of the ultra-high frequency band is taken as the privacy data electronic tag of the first security level corresponding frequency band, and the privacy data electronic tag of the high frequency band is taken as the privacy data electronic tag of the second security level corresponding frequency band.

[0125] The embodiment uses the privacy data electronic tag of the ultra-high frequency band with higher security as the privacy data electronic tag corresponding to the first security level, which is used to store the part of the balance of the smart card user's account balance exceeding the one-time consumption limit CM. The privacy data electronic tag of the high frequency band with relatively low security is used as the privacy data electronic tag corresponding to the second security level, which is used to store the balance of the smart card user's account balance less than or equal to the one-time consumption limit CM. In this way, the convenience of rewriting small amount of funds in consumption can be improved while ensuring the safety of large amount of funds.

[0126] The high frequency band privacy data electronic tag is provided with a consumption state storage area for storing a consumption state, and the consumption state includes a first state and a second state. In the S06: sending a write signal of the corresponding frequency band according to the operation frequency of the privacy data electronic tag of the corresponding frequency band to write the privacy information data of the smart card user into the privacy data electronic tag of the corresponding frequency band, the first balance is written into the privacy data electronic tag of the ultra-high frequency band, the second balance is written into the privacy data electronic tag of the high frequency band, and the consumption state stored in the consumption state storage area is set to the first state.

[0127] This embodiment also utilizes a consumption status storage area to store the consumption status after the previous consumption. A second consumption status indicates that the previous consumption exceeded the balance stored in the high-frequency privacy data electronic tag and was not approved by the user. A first consumption status indicates that the most recent consumption was normal. To ensure the security of smart card users' account funds and prevent large transactions without the smart card owner's permission, the method in this embodiment further includes:

[0128] S81: Responding to the smart card user's current consumption request, read the consumption status stored in the consumption status storage area;

[0129] If a person carrying a smart card swipes their card at the payment terminal, a transaction request will be generated on the terminal. This step, upon generating a transaction request, first reads the transaction status stored in the transaction status storage area.

[0130] S82: If the consumption status is the second status, the current consumption request is rejected and an alarm signal is sent to the server terminal;

[0131] When the transaction status is in the second state, it indicates that the previous transaction exceeded the balance stored in the high-frequency privacy data electronic tag and was not verified by the user. In this case, there is a high probability that the smart card was fraudulently used without the cardholder's knowledge. Therefore, the current transaction request is rejected, and no further transactions are permitted. The terminal then sends an alarm signal to the server, which can then send an alarm signal to the mobile phone number linked to the smart card to alert the cardholder that their smart card may have been fraudulently used.

[0132] S83: If the consumption status is the first status, then determine whether the consumption limit CP currently requested by the smart card user is greater than the smart card user's account balance;

[0133] If the consumption status is in the first state, it indicates that the previous consumption was normal or that the abnormal consumption has been processed by the smart card owner. In this case, the CP can decide whether to allow the current consumption request based on the current requested consumption amount.

[0134] S831: If so, reject the current consumption request and send a prompt signal to the server terminal;

[0135] If the spending limit (CP) requested by the smart card user is greater than the user's account balance, it indicates that the user's account balance is insufficient to pay the full amount for the current spending. Therefore, the spending request is rejected, and a prompt signal is sent to the server terminal. The server terminal can also send a prompt signal to the smart card user's linked mobile phone, indicating that the user's balance is insufficient.

[0136] S832: If not, judge whether the current consumption limit CP is greater than the one-time consumption limit CM;

[0137] If the current consumption limit CP requested by the smart card user is less than or equal to the account balance of the smart card user, it indicates that the account balance of the smart card user is sufficient to pay for the current consumption, at this time, whether to allow this consumption can be decided according to whether the current consumption limit CP exceeds the one-time consumption limit CM. SS8321: If yes, send an alarm signal to the server terminal, and wait for the user's reply confirmation information; if the current consumption limit CP is greater than the one-time consumption limit CM, it indicates that the current consumption limit is too large, and there may be a stolen card, so an alarm message can be sent to the user's bound mobile phone through the server.

[0138] After receiving the alarm signal, the user can confirm, if the user confirms that the consumption can be consumed, the confirmation information can be replied within a predetermined time, if there is no reply confirmation information within the predetermined time, it indicates that the user does not agree with this consumption.

[0139] SS83211: If the user's reply confirmation information is received within a predetermined time, the current consumption is allowed, and the first balance is rewritten as A1-CM, and the second balance is rewritten as CM-(CP-A2);

[0140] This step can ensure that the first balance can be rewritten only after the user's confirmation.

[0141] SS83212: If the user's reply confirmation information is not received within a predetermined time, the consumption is refused; S8322: If not, the current consumption request is allowed, and whether the current consumption limit CP requested is greater than the second balance A2 is judged;

[0142] If the current consumption limit CP requested is less than or equal to the one-time consumption limit CM, it indicates that the current consumption limit does not exceed the limit, at this time, the consumption can be allowed, and the second balance stored in the high-frequency electronic tag can be rewritten according to the consumption request limit.

[0143] S83221: If not, the second balance is rewritten as A2-CP;

[0144] If the current consumption limit CP requested is less than or equal to the second balance A2, the consumption limit can be directly deducted from the second balance A2.

[0145] S83222: If yes, the second balance is rewritten as CP-A2, the consumption state is set to the second state, and an audit prompt signal is sent to the smart card user's bound mobile phone through the server terminal;

[0146] If the current consumption limit CP is greater than the second balance A2, it indicates that the first balance stored in the UHF electronic tag needs to be rewritten to correctly record the remaining balance of the account after allowing the current consumption request. At this time, the difference between the second balance and the current consumption limit is calculated by CP-A2, and then the consumption state is set to the second state, and information is sent to wait for the owner of the smart card to review.

[0147] S84: Monitor the review confirmation operation signal of the user for the review prompt signal;

[0148] S85: When the review confirmation operation signal is monitored, rewrite the first balance to A1-CM, rewrite the second balance to CM-(CP-A2), and set the consumption state to the first state.

[0149] If the owner confirms that the current consumption is normal consumption after receiving the review prompt signal, the owner can use the mobile phone to send a review confirmation operation signal to the consumption terminal through the server. When the review confirmation operation signal is received, the right to rewrite the first balance stored in the UHF electronic tag is obtained. At this time, the first balance and the second balance can be rewritten at the same time to obtain the correct balance after consumption, and the consumption state is set to the first state. This will not affect the next normal consumption.

[0150] The embodiment divides the account balance of the smart card user into two parts according to the one-time consumption limit CM, so that the user's consumption behavior that is less than the one-time consumption limit CM can be successfully implemented by rewriting only the first balance stored in the high-frequency electronic tag. Therefore, the daily consumption of the smart card user is facilitated, and the consumption exceeding the limit or the cumulative consumption reaching a certain amount needs to rewrite the first balance stored in the UHF electronic tag. The rewriting of the first balance needs the user's review confirmation, so the embodiment ensures the convenience of daily consumption of the user and ensures the safety of the funds when large consumption occurs.

[0151] Embodiment 2

[0152] As Figure 8As shown, the embodiment provides an RFID smart card information interaction device with privacy protection, the RFID smart card has at least one non-private data electronic tag and at least one private data electronic tag, each electronic tag has a different operating frequency, the non-private data electronic tag has a first data storage area, the first data storage area is used to store non-private information data of a student, the private data electronic tag has a key storage area and a second data storage area, the second data storage area is used to store encrypted private information data of a student, and the key storage area is used to store a key corresponding to the encrypted private information data of a student, the non-private data electronic tag and the private data electronic tag have different operating frequencies, and the device comprises:

[0153] A data reading signal sending module is configured to make the smart card receive a data reading signal with an operating frequency, determine an electronic tag with a corresponding operating frequency according to the data reading signal, and activate the electronic tag;

[0154] An electronic tag data reading module is configured to make the smart card, after being activated, emit data containing user information stored in an electronic tag with a corresponding operating frequency according to the data reading signal;

[0155] A password data judging module is configured to analyze whether password data exists in the data containing user information;

[0156] A non-private data obtaining module is configured to, if the password data does not exist, execute a first operation according to the data containing user information;

[0157] A key obtaining module is configured to, if the password data exists, obtain a key corresponding to the password data according to the password data;

[0158] A data decryption module is configured to, after performing decryption processing on encrypted private information data of a smart card user corresponding to the password data according to the obtained key, obtain partial private information data of the smart card user obtained after the decryption processing, and execute a second operation;

[0159] A feedback module is configured to, when the first operation and the second operation are executed, feed back confirmation information of execution completion to the smart card.

[0160] Embodiment 3

[0161] As Figure 9As shown, the embodiment provides an RFID smart card information interaction system with privacy protection function, which comprises an RFID smart card, a card reader and a terminal device. The card reader and the terminal device are connected. The RFID smart card has at least one non-private data electronic tag and at least one private data electronic tag. Each electronic tag has a different operating frequency. The non-private data electronic tag has a first data storage area for storing non-private information data of a student. The private data electronic tag has a key storage area and a second data storage area. The second data storage area is used for storing encrypted private information data of the student. The key storage area is used for storing a key corresponding to the encrypted private information data of the student. The terminal device comprises at least one processor, at least one memory and computer program instructions stored in the memory. When the computer program instructions are executed by the processor, the method described in embodiment 1 is realized. In addition, the aforementioned RFID smart card information interaction system further comprises a background server, which is in communication connection with the terminal device. The terminal device can send a request to the background server according to the information read in the RFID smart card, and perform information interaction.

[0162] The above is a detailed introduction to the RFID smart card information interaction method, device and system with privacy protection function provided by the embodiment.

[0163] It should be clear that the present application is not limited to the specific configurations and processes described above and shown in the drawings. For the sake of brevity, detailed descriptions of known methods are omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown. Those skilled in the art can make various changes, modifications and additions, or change the order of the steps, after understanding the spirit of the present application.

[0164] The functional blocks shown in the structural block diagrams described above can be implemented as hardware, software, firmware, or a combination thereof. When implemented in hardware, they can be, for example, electronic circuits, application specific integrated circuits (ASICs), appropriate firmware, plug-ins, functional cards, and the like. When implemented in software, the elements of the present application are program or code segments that are used to perform the required tasks. The program or code segments can be stored in a machine-readable medium or transmitted through a data signal carried in a carrier wave over a transmission medium or communication link. A "machine-readable medium" includes any medium that can store or transport information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, ROM, flash memory, erasable ROM (EROM), floppy disks, CD-ROMs, optical disks, hard disks, optical fiber media, radio frequency (RF) links, and the like. The code segments can be downloaded via computer networks such as the Internet, intranets, and the like.

[0165] It should also be noted that the exemplary embodiments mentioned in the present application describe some methods or systems based on a series of steps or devices. However, the present application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiments, or in an order different from that in the embodiments, or several steps can be performed simultaneously.

[0166] The above description is merely a specific implementation of the present application. Those skilled in the art can clearly understand the specific working processes of the above-described system, modules and units for the convenience and brevity of description, and the corresponding processes in the foregoing method embodiments can be referred to, which will not be described herein. It should be understood that the protection scope of the present application is not limited thereto, and any person skilled in the art can easily think of various equivalent modifications or replacements within the technical scope disclosed by the present application, and these modifications or replacements should be covered within the protection scope of the present application.

Claims

1. A method for information interaction of a privacy hierarchical protection RFID smart card, characterized in that, The RFID smart card has at least one non-private data electronic tag and at least one private data electronic tag, the non-private data electronic tag has a first data storage area for storing a unique identifier of a smart card user, the private data electronic tag has a password data storage area and a second data storage area for storing encrypted partial private information data of the smart card user, the password data storage area is used for storing password data corresponding to the partial private information data, the non-private data electronic tag and the private data electronic tag have different operating frequencies, and the RFID smart card is packaged into a smart card chip by combining a low-frequency module with a low-frequency coil and a high-frequency module with a high-frequency coil, or by combining a low-frequency module and a super-high-frequency module. The smart card receives a data reading signal with an operating frequency, determines an electronic tag with a corresponding operating frequency according to the data reading signal, and activates; After the smart card is activated, the smart card transmits data containing user information stored in the electronic tag with the corresponding operating frequency according to the data reading signal; It is determined whether the data containing user information contains password data; If there is no password data, a first operation is performed according to the data containing user information, and the first operation is an operation for non-private information data; If there is password data, a key corresponding to the password data is obtained according to the password data; The encrypted private information data of the smart card user corresponding to the password data is decrypted according to the obtained key, and the partial private information data of the smart card user obtained after the decryption is performed is obtained, a second operation is performed, and the second operation is an operation related to the private information data of the smart card user; When the first operation and the second operation are completed, confirmation information of the completed execution is fed back to the smart card.

2. The method of claim 1, wherein the method further comprises: Each private data electronic tag is used to store a set of private information data, the private information data of the smart card user stored in each private data electronic tag has different security levels, and the method further comprises: Obtaining non-private information data of a smart card user; Obtaining an operating frequency corresponding to the non-private data electronic tag; Sending a write signal of a corresponding frequency band to write the non-private information data of the smart card user into the non-private data electronic tag according to the operating frequency corresponding to the non-private data electronic tag; Obtaining the security level of the private information data of the smart card user, wherein the higher the privacy of the private information is, the higher the security level of the corresponding private information data is; Obtaining a private data electronic tag of a corresponding frequency band corresponding to the security level of the private information data of the smart card user according to the security level of the private information data of the smart card user; Sending a write signal of a corresponding frequency band to write the private information data of the smart card user into the private data electronic tag of the corresponding frequency band according to the operating frequency of the private data electronic tag of the corresponding frequency band.

3. The method of claim 2, wherein the method further comprises: Each of the privacy information data includes at least two sub-privacy information data, the password data includes several sub-password data corresponding to the sub-privacy information data, and the step of obtaining the key corresponding to the password data according to the password data when the password data exists further includes the following steps: determining whether the terminal device connected to the current card reader stores the key corresponding to at least one of the sub-password data in the obtained password data; if so, obtaining the key corresponding to the sub-password data; if not, generating a first prompt information, which is used to prompt that the current terminal device does not have the permission to read the privacy information data stored in the privacy data electronic tag of the corresponding frequency band.

4. The method of claim 3, wherein the method further comprises: The step of obtaining the decrypted partial privacy information data of the smart card user after decrypting the encrypted privacy information data of the smart card user according to the obtained key further includes: obtaining the position of the sub-privacy information data corresponding to the key in the privacy information data according to the sub-password data corresponding to the key; extracting the sub-privacy information data corresponding to the key from the privacy information data according to the position of the sub-password data in the privacy information data; obtaining the decrypted sub-privacy information data by decrypting the extracted sub-privacy information data using the key.

5. The method of claim 2, wherein the method further comprises: The privacy information data of the smart card user includes name, class, age, gender, grade point, attendance, borrowed book number, account ID, account balance, residence address, and recent consumption amount; In the step of obtaining the non-privacy information data of the smart card user, the ID information data of the smart card user is obtained as the non-privacy information data. The step of transmitting the write signal of the corresponding frequency band according to the operation frequency of the privacy data electronic tag of the corresponding frequency band to write the privacy information data of the smart card user into the privacy data electronic tag of the corresponding frequency band further includes the following steps: encrypting the name and class data of the smart card user using a first encryption rule and writing them into the first privacy data electronic tag; encrypting the borrowed book number, attendance, and residence address data of the smart card user using a second encryption rule and writing them into the second privacy data electronic tag; encrypting the grade point, account ID, account balance, and recent consumption amount data of the smart card user using a third encryption rule and writing them into the third privacy data electronic tag; The first privacy data electronic tag and the second privacy data electronic tag are high-frequency RFID electronic tags, and the third privacy data electronic tag is an ultra-high-frequency RFID electronic tag.

6. The method of claim 2, wherein the method further comprises: The step of transmitting the data stored in the electronic tag of the corresponding operation frequency containing user information according to the data read signal after the smart card is activated further includes: when the campus card is used for attendance, obtaining the data in the non-privacy data electronic tag of the RFID smart card; when the campus card is used for public welfare activity record, obtaining the data in the non-privacy data electronic tag of the RFID smart card and the data in the first privacy data electronic tag of the RFID smart card; when the campus card is used for book borrowing, obtaining the data in the non-privacy data electronic tag of the RFID smart card and the data in the second privacy data electronic tag of the RFID smart card; When the campus card is used to swipe the dormitory access, the data in the non-private data electronic tag in the RFID smart card and the data in the second private data electronic tag in the RFID smart card are acquired; When the campus card is used for smart card user score management, the data in the non-private data electronic tag in the RFID smart card and the data in the third private data electronic tag in the RFID smart card are acquired.

7. The method of claim 1, wherein the method further comprises: The private data electronic tag for storing the highest secret level of the smart card user's private information data stores the smart card user's historical consumption quota data, and when the campus card is used for consumption on the campus consumption terminal, the method further comprises: reading the recent smart card user's historical consumption quota data stored in the private data electronic tag; acquiring current consumption quota data; analyzing the smart card user's historical consumption quota data and the current consumption quota data to determine whether the current consumption behavior is abnormal; if there is no abnormality, allowing the current consumption quota to be transferred from the RFID smart card corresponding account; if there is an abnormality, locking the RFID smart card corresponding account, and sending an alarm message to the RFID smart card currently bound mobile phone, the alarm message at least including the location of the consumption terminal currently reading the RFID smart card user's private information data.

8. The method of claim 7, wherein the method further comprises: The analysis of the smart card user's historical consumption quota data and the current consumption quota data to determine whether the current consumption behavior is abnormal further comprises the following steps: selecting a preset number of consumption quota data from the recent smart card user's historical consumption quota data; after removing the highest consumption quota data and the lowest consumption quota data from the selected consumption quota data, calculating the average consumption quota a according to the remaining consumption quota data; calculating the difference b between the current consumption quota and the average consumption quota; acquiring the consumption abnormal difference coefficient K; calculating the ratio b / a of the difference b between the current consumption quota and the average consumption quota and the average consumption quota a; comparing the ratio b / a with the consumption abnormal difference coefficient K, if the ratio b / a is greater than the consumption abnormal difference coefficient K, it is determined that the current consumption behavior is abnormal, and if the ratio b / a is less than or equal to the consumption abnormal difference coefficient K, it is determined that the current consumption behavior is not abnormal.

9. The method of claim 1, wherein the method further comprises: According to the operating frequency of the corresponding frequency band private data electronic tag, the corresponding frequency band write signal is sent to write the smart card user's private information data into the corresponding frequency band private data electronic tag, which further comprises: writing the student's name, class, gender data into the first private data electronic tag to form a set of private information data; writing the student's borrowed book number, attendance, and dormitory address data into the second private data electronic tag to form a set of private information data; writing the student's GPA, account ID, account balance, and recent consumption data into the third private data electronic tag to form a set of private information data.

10. A privacy-hierarchical-protected RFID smart card information interaction system, characterized in that, An RFID smart card, a card reader and a terminal device are connected, the RFID smart card has at least one non-private data electronic tag and at least one private data electronic tag, the non-private data electronic tag has a first data storage area for storing a unique identifier of a smart card user, the private data electronic tag has a password data storage area and a second data storage area, the second data storage area is used for storing encrypted partial private information data of the smart card user, and the password data storage area is used for storing password data corresponding to the partial private information data, the non-private data electronic tag and the private data electronic tag have different operating frequencies, and the terminal device includes at least one processor, at least one memory, and computer program instructions stored in the memory, which, when executed by the processor, implement the method of any one of claims 1-9.

Images