A user identification card, data transmission method, device, medium and product

Abstract

The present application provides a user identification card, a data transmission method, a device, a medium and a product, which belong to the field of Internet of Things technology. The user identification card (i.e., SIM card) receives the AT command sent by the MCU through the first interface, parses the AT command through the AT engine to obtain communication parameters and service data, sends instructions according to the communication parameters to control the cellular module to establish a data channel with the cloud service platform, and transmits the encrypted service data to the cloud service platform through the cellular module. The MCU no longer needs to process various security service-related instructions, but only needs to develop the original application layer business logic, avoiding the development of security services by the MCU, and the original software can be seamlessly connected, which reduces the connection threshold for security service upgrades. In addition, in the case of non-network connection, the uplink service data can be cached through the SIM card, and the SIM actively pushes data after the next network activation. The use of SIM security services does not require the cellular module to be turned on, which reduces power consumption.

Description

Technical Field

[0001] The present application belongs to the technical field of Internet of Things, and in particular, relates to a Subscriber Identity Module (SIM) card, a data transmission method, a device, a medium and a product. Background Art

[0002] With the widespread application of the Internet of Things, the number of IoT devices has increased year by year, and IoT terminals have been continuously penetrating into thousands of households. Data security protection has gradually received widespread attention; especially for energy meters, smart door locks and other products, hardware security protection measures have begun to be adopted. In order to avoid using independent security chips to provide hardware security capabilities, SIM cards are generally used as hardware security carriers. The microcontroller unit (MCU) uses the AT+CCHO command to open the application security channel in the SIM card, and assembles the data to be encrypted and sends it to the cellular module through AT+CGLA; the cellular module sends the command data in CGLA to the SIM card through ISO7816. After the SIM card uses the application security key to encrypt the data, it returns it to the MCU through the CGLA command. The MCU sends the received ciphertext data to the cellular module again through the AT command to execute the data transmission service.

[0003] However, the current data encryption method requires the MCU to process instructions including AT+CGLA / CCHO / CCHC, and its software requires additional security application modification and adaptation, which increases development costs. Summary of the invention

[0004] The embodiments of the present application provide a SIM card, a data transmission method, a device, a medium and a product, which can solve the problem that the MCU software needs additional modification and adaptation to ensure data security, resulting in high development costs.

[0005] In a first aspect, an embodiment of the present application provides a SIM card, including:

[0006] The first interface is used to connect to the micro control unit MCU to receive AT commands sent by the MCU;

[0007] The second interface is used to connect to the cellular module;

[0008] A processor connected to the first interface, configured to parse the AT command through its own AT engine to obtain communication parameters and service data; and encrypt the service data through its own security module;

[0009] The processor is also connected to the second interface, and is used to send instructions according to the communication parameters to control the cellular module to establish a data channel with the cloud service platform, and transmit the encrypted business data to the cloud service platform through the cellular module.

[0010] In one possible implementation, the first interface is a universal asynchronous receiver / transmitter (UART) interface;

[0011] The MCU is connected to the first interface via its own UART interface, and is used to send AT commands to the first interface.

[0012] In one possible implementation, the second interface is a smart card ISO7816 interface;

[0013] The cellular module is connected to the second interface via its own ISO7816 interface, and is used to receive instructions and data sent by the second interface.

[0014] In a second aspect, an embodiment of the present application provides a data transmission method, which is applied to the above-mentioned SIM card, and the method includes:

[0015] Receiving an AT command containing service data sent by the MCU through the first interface;

[0016] The service data is obtained by parsing the received AT command through the AT engine;

[0017] Encrypting the business data through a security module to obtain the encrypted business data;

[0018] The encrypted business data is transmitted to the cloud service platform through the cellular module; wherein the processor sends instructions in advance according to the communication parameters to control the cellular module to establish a data channel with the cloud service platform, and the communication parameters are obtained by parsing the AT instructions sent by the AT engine to the MCU.

[0019] In an achievable implementation, the processor sends instructions in advance according to the communication parameters to control the cellular module to establish a data channel and perform data interaction with the cloud service platform, including:

[0020] Based on the BIP protocol, active commands are sent to the cellular module to control the cellular module to establish a data channel and interact with the cloud service platform.

[0021] In an achievable implementation, after transmitting the encrypted service data to the cloud service platform via the cellular module, the method further includes:

[0022] In the case of receiving a response message returned by the cellular module, the response message is decrypted by the security module to obtain the decrypted response message; wherein, after receiving the response message returned by the cloud service platform, the cellular module transmits the response message back to the SIM card through the second interface;

[0023] The decrypted response message is returned to the MCU through the first interface.

[0024] In an achievable implementation, after the cellular module establishes a data channel with the cloud service platform, the method further includes:

[0025] When receiving the key update instruction returned by the cellular module, the key of its own application security program is updated according to the key update instruction; wherein, after receiving the key update instruction returned by the cloud service platform, the cellular module transmits the key update instruction back to the SIM card through the second interface.

[0026] In a third aspect, an embodiment of the present application provides a data transmission device, comprising: a processor, and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement the above-mentioned data transmission method.

[0027] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, on which computer program instructions are stored, and when the computer program instructions are executed by a processor, the data transmission method as described above is implemented.

[0028] In a fifth aspect, an embodiment of the present application provides a computer program product, including a computer program, which implements the above-mentioned data transmission method when the computer program is processed and executed.

[0029] The SIM card of the embodiment of the present application receives the AT command sent by the MCU through the first interface, and then parses the AT command through the AT engine to obtain communication parameters and service data, sends instructions according to the communication parameters to control the cellular module to establish a data channel with the cloud service platform, and transmits the encrypted service data to the cloud service platform through the cellular module. Through this technical solution, the MCU no longer needs to process various security service-related instructions, and only needs to develop the original application layer business logic, avoiding the development of security services by the MCU, and the original software can be seamlessly connected, reducing the connection threshold for security service upgrades. In addition, in the case of non-network connection, the uplink service data can be cached through the SIM card, and the SIM actively pushes data after the next network activation. There is no need to turn on the cellular module to use the SIM security service, which reduces power consumption. BRIEF DESCRIPTION OF THE DRAWINGS

[0030] In order to more clearly illustrate the technical solution of the embodiments of the present application, the following is a brief introduction to the drawings required for use in the embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0031] Figure 1 The architecture and information flow diagram for providing hardware security capabilities for the use of security chips;

[0032] Figure 2 The architecture and information flow diagram for providing hardware security capabilities for using SIM cards;

[0033] Figure 3 A schematic diagram of the application architecture of a SIM card provided by an embodiment of the present application is shown;

[0034] Figure 4 A specific architecture diagram of a SIM card provided by an embodiment of the present application is shown;

[0035] Figure 5 A schematic diagram showing a flow chart of a data transmission method provided by an embodiment of the present application is shown;

[0036] Figure 6 A schematic diagram of a data interaction process provided by an embodiment of the present application is shown;

[0037] Figure 7 A schematic diagram of the hardware structure of a data transmission device provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0038] The features and exemplary embodiments of various aspects of the present application will be described in detail below. In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be understood that the specific embodiments described herein are only intended to explain the present application, rather than to limit the present application. For those skilled in the art, the present application can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present application by illustrating the examples of the present application.

[0039] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0040] In order to solve the problems of the prior art, the embodiments of the present application provide a SIM card, a data transmission method, a device, a medium and a product, which can solve the problem that the MCU software needs additional modification and adaptation to ensure data security, resulting in high development costs.

[0041] Figure 1 The architecture and information flow diagram for providing hardware security capabilities for the use of security chips; e.g. Figure 1 As shown, MCU1 is used as the main control unit, and MCU1 provides hardware security capabilities through an independent security chip 4 (it has the ability to prevent hardware attacks and can protect the storage and operation security of keys). When interacting with network data, MCU1 first pushes the data to the security chip 4 for data encryption. The security chip 4 performs key operations in a secure environment and returns the data to MCU1. Then MCU1 transmits the organized ciphertext data to the cellular module 2 through the AT command of the Universal Asynchronous Receive / Transmitte (UART) protocol, and finally transmits it to the cloud service platform 3 through the air interface network, where the SIM card 5 is only used for network access identity authentication of the mobile network.

[0042] In the above solution, hardware security capabilities are provided through an independent security chip, which increases the hardware cost, and the MCU needs to reserve an additional communication interface. At the same time, the MCU needs to be modified to adapt the security application logic, responsible for communicating with the security chip and organizing security messages, and realizing key update services, key negotiation, data reinforcement and decryption and other security business functions, which increases the implementation threshold and docking difficulty of the entire security business. As mentioned above, a SIM card is required in cellular network products to realize network identity authentication, so hardware security services can be provided through the SIM card.

[0043] The SIM card is a secure chip with security capabilities, and also provides a secure key storage and computing environment. Therefore, the hardware security capabilities based on the SIM can be used for external application security services. Figure 2 The architecture and information flow diagram for providing hardware security capabilities using SIM cards; e.g. Figure 2 As shown, the SIM card 5 is not directly linked to the MCU 1 , and its security capabilities need to be transferred by the cellular module 2 . The SIM command interaction can be exposed to the MCU for use through the AT+CCHO / AT+CGLA / AT+CCHO commands (3GPP standard commands).

[0044] However, in the above-mentioned solution using SIM to provide security functions, security services need to be forwarded through the cellular module, the interactive link of security data is long, and the communication time is high. In addition, the software in the MCU requires additional security application modification and adaptation, and it is necessary to process instructions such as AT+CGLA / CCHO / CCHC, and implement the same functions as when using a security chip (key update, data reinforcement process, etc.). When performing some offline security services such as secure storage and access of data, it is also necessary to wake up the module, which increases system power consumption.

[0045] The present application proposes a hardware security carrier based on a SIM card, which can conveniently provide data security services for applications, avoid excessive software adaptation of the MCU, and the security service does not rely on the cellular module and can support independent use. The SIM card provided in the embodiment of the present application is first introduced below. Figure 3 A schematic diagram of the application architecture of a SIM card provided by an embodiment of the present application is shown; Figure 3 As shown, the SIM card 5 includes:

[0046] The first interface 6 is used to connect to the MCU1 to receive AT commands sent by the MCU1;

[0047] The second interface 7 is used to connect to the cellular module 2;

[0048] The processor 8 is connected to the first interface 6 and is used to parse the AT command through its own AT engine to obtain communication parameters and service data; and encrypt the service data through its own security module;

[0049] The processor 8 is also connected to the second interface 7, and is used to send instructions according to the communication parameters to control the cellular module 2 to establish a data channel with the cloud service platform 3, and transmit the encrypted business data to the cloud service platform 3 through the cellular module 2.

[0050] The types of the first interface and the second interface provided in this embodiment are not specifically limited, because the first interface is used to connect to the MCU to receive AT commands sent by the MCU; and the MCU usually uses the UART interface to send AT commands, so the first interface is usually a UART interface.

[0051] The second interface is used to connect to the cellular module. In the traditional solution, the SIM card and the cellular module are connected through a smart card (ISO7816) interface, so the second interface is usually an ISO7816 interface.

[0052] The processor is connected to the first interface and the second interface respectively, and receives the AT command sent by the MCU through the first interface. The processor is equipped with an AT engine and a security module, etc. The AT engine parses the AT command to obtain communication parameters and service data, and encrypts the service data through the security module. The second interface sends instructions to control the cellular module to establish a data channel with the cloud service platform. After the channel is established, the encrypted service data is transmitted to the cloud service platform through the cellular module.

[0053] It can be seen that the embodiment of the present application expands a UART serial port to interact with the external MCU for data based on the original ISO7816 interface connection between the SIM card and the cellular module; the software logic of the MCU can remain unchanged, and the UART interface can still be used to send AT commands for data transmission requests, while the data processor is changed from the cellular module to the SIM card. After the SIM card completes the instruction processing and encrypts the data, it operates the cellular module through the BIP channel to interact with the data. Through the SIM card in this application, the IoT terminal can omit the software docking in the security solution through hardware integration.

[0054] Figure 4 FIG. 4 shows a specific architecture diagram of a SIM card provided by an embodiment of the present application; Figure 4 As shown, compared with the traditional SIM card 5, the SIM card 5 in the embodiment of the present application expands the UART driver, AT engine, security module, and BIP interaction protocol to realize the main functions on the basis of the original Universal Subscriber Identity Module (USIM) file system, supporting basic USIM network access authentication functions, and interacting with the cellular module 2 through ISO7816.

[0055] Among them, the first interface 6 specifically adopts the UART interface, which is a common communication interface in the Internet of Things terminal, and the original interactive interface between the MCU1 and the cellular module 2 is also a UART interface. In order to allow the terminal device to seamlessly connect, the newly added physical interface can be consistent with the original solution. In the original solution, the SIM card 5 and the cellular module 2 are connected using the ISO7816 interface, so the second interface 7 of the embodiment of the present application can specifically adopt the ISO7816 interface.

[0056] In the original scheme, the interaction between MCU1 and cellular module 2 is usually AT command. For example, MCU1 operates cellular module 2 through AT command to send data to the specified server. However, this embodiment connects MCU1 and cellular module 2 through SIM card 5, and SIM card 5 needs to parse AT command, so AT engine needs to be added in the processor of SIM card 5. When the service data is transmitted, it needs to be encrypted, so a security module is added.

[0057] The embodiment of the present application expands the AT engine and security module on the SIM card 5, which can receive and process AT commands of the MCU1, is compatible with the transmission protocol of the original solution, and avoids the user's software modification; at the same time, the application security logic is moved from the MCU1 to the SIM card 5, avoiding software modification and resource consumption of the MCU1.

[0058] The AT engine is used to parse the data interaction request sent by MCU1 in the original solution, obtain the Internet Protocol Address (IP address) and port number of its target communication service, obtain the interactive communication protocol (UDP / TCP / HTTP, etc.), and obtain the original business data requested for transmission.

[0059] The security module is an application security program installed on the processor. Relying on the hardware security environment of the SIM card 5, while implementing the original USIM application, the SIM card 5 operating system (COS) can store additional security keys and implement key-based cryptographic computing services, secure data storage services, key update services, etc.

[0060] The SIM card of the embodiment of the present application receives the AT command sent by the MCU through the first interface, and then parses the AT command through the AT engine to obtain communication parameters and service data, sends instructions according to the communication parameters to control the cellular module to establish a data channel with the cloud service platform, and transmits the encrypted service data to the cloud service platform through the cellular module. Through this technical solution, the MCU no longer needs to process various security service-related instructions, and only needs to develop the original application layer business logic, avoiding the development of security services by the MCU, and the original software can be seamlessly connected, reducing the connection threshold for security service upgrades. In addition, in the case of non-network connection, the uplink service data can be cached through the SIM card, and the SIM actively pushes data after the next network activation. There is no need to turn on the cellular module to use the SIM security service, which reduces power consumption.

[0061] The embodiment of the present application expands a serial port (first interface) on the original SIM card to receive AT commands from an external control unit, is compatible with the communication interface of the original MCU and cellular module, and can be easily and quickly connected with the original design. In one embodiment, the first interface can be a universal asynchronous receiver and transmitter UART interface, and the MCU is connected to the first interface through its own UART interface to send AT commands to the first interface.

[0062] The SIM card can be directly connected to the UART interface of the MCU via the first interface, without the need to modify the MCU or perform data type conversion.

[0063] In another embodiment, the second interface may specifically be a smart card ISO7816 interface, and the cellular module is connected to the second interface via its own ISO7816 interface to receive instructions and data sent by the second interface.

[0064] Because the ISO7816 interface of the cellular module is connected to the SIM card in the traditional solution, this solution uses the ISO7816 interface to connect the SIM card and the cellular module, and there is no need to add or modify the original interface.

[0065] Based on the SIM card provided in the above embodiment, the embodiment of the present application also provides a data transmission method. Figure 5 A schematic diagram of a data transmission method according to an embodiment of the present application is shown; Figure 5 As shown, the method comprises the following steps:

[0066] S50: receiving an AT instruction including service data sent by the MCU through the first interface.

[0067] S51: Analyzing the received AT command through the AT engine to obtain service data.

[0068] S52: Encrypting the business data through the security module to obtain encrypted business data.

[0069] S53: Transmit the encrypted business data to the cloud service platform via the cellular module.

[0070] Among them, the processor sends instructions in advance according to the communication parameters to control the cellular module and the cloud service platform to establish a data channel. The communication parameters are obtained by parsing the AT instructions sent by the MCU by the AT engine.

[0071] Since the data transmission method provided in this embodiment corresponds to the SIM card in the above embodiment, it has the same effect as the above SIM card, and will not be described in detail here.

[0072] In actual applications, the processor can send active commands to the cellular module based on the Bearer Independent Protocol (BIP protocol) to control the cellular module to establish a data channel and interact with the cloud service platform. The SIM card sends instructions to the cellular module through the BIP protocol. After the security module completes the security reinforcement of the user data, the active command function of the SIM card can realize data security communication, key update and other services based on the BIP protocol. The SIM card can send active commands to request the cellular communication module to establish basic network communication with the cloud security service, and then the SIM card completes the processing of the security interaction protocol, including key negotiation, key update, encrypted transmission of user uplink data, and decryption and return of platform downlink data, etc.

[0073] In the original solution, due to the passive execution of the SIM card, it is impossible to directly send the reinforced service transmission protocol, and the encrypted data needs to be returned to the MCU, and then the MCU performs data encapsulation and transmits it through the network through AT commands. In this embodiment, the SIM card completes the network interaction of service data based on the BIP active command, avoiding the cumbersome command interaction between the main control unit and the cellular module, simplifying the interaction process, and improving the docking efficiency.

[0074] In actual applications, after receiving the business data, the cloud service platform may also return a corresponding response message. Generally, the returned response message is encrypted and needs to be decrypted before being transmitted back to the MCU. Therefore, after the processor transmits the encrypted business data to the cloud service platform through the cellular module, when receiving the response message returned by the cellular module, the response message is decrypted through the security module to obtain a decrypted response message, and then the decrypted response message is returned to the MCU through the first interface. Among them, after receiving the response message returned by the cloud service platform, the cellular module transmits the response message back to the SIM card through the second interface.

[0075] Compared with the original solution in which the cellular module sends the message to the SIM card for decryption and receives the decrypted message, and then sends the decrypted message to the MCU, the solution provided in this embodiment simplifies the data interaction process.

[0076] In addition, in the specific implementation, the cloud service platform may update the secret key at any time. In order to ensure normal data transmission, the SIM card needs to synchronize and update its own secret key. Therefore, after the cellular module and the cloud service platform establish a data channel, the processor will update the secret key of its own application security program according to the secret key update instruction after receiving the secret key update instruction returned by the cellular module. Among them, after receiving the secret key update instruction returned by the cloud service platform, the cellular module transmits the secret key update instruction back to the SIM card through the second interface, avoiding the participation of the MCU.

[0077] Through the solution provided in this embodiment, the SIM card itself can complete the key update of the application security program, keep the key information synchronized with the cloud service platform, and ensure normal data interaction.

[0078] Here is a specific data interaction process. Figure 6 A schematic diagram of a data interaction process provided by an embodiment of the present application is shown; Figure 6 As shown, data interaction specifically includes the following steps:

[0079] S60: The MCU sends the IP address and port number of the target cloud service platform to the SIM card through the UART interface to request to establish a network connection.

[0080] S61: After parsing the AT command through the AT engine, the SIM card initiates an active command Open Channel to the cellular communication module based on the BIP protocol.

[0081] S62: The MCU sends the expected uplink plain text service data to the SIM card via an AT command.

[0082] S63: After being parsed by the AT engine, the business data is encrypted using the key to form a ciphertext, and the active command Send Data is used to send the message to the target cloud service.

[0083] S64: If there is a downlink ciphertext application protocol on the cloud service platform, it is sent to the cellular module through the air interface network.

[0084] S65: After receiving the message from the cloud service platform, the cellular module sends a data arrival instruction to the SIM card, and then the SIM card sends an active command to obtain a response message.

[0085] S66: The SIM card uses the security module to perform protocol analysis on the message, and uses the application key to complete the authentication and decryption of the downlink message, restore the plaintext application transmission protocol, and notify the MCU.

[0086] This application migrates the logic of the entire security service from the MCU to the SIM card, simplifying the docking cost of the control terminal. The MCU only needs to focus on the original business protocol, and the SIM card implements the interactive process of the entire security service, security message parsing, and creating a secure communication link with the cloud service. The SIM card can easily and securely connect with the user, improving the use value of the SIM; it can also directly provide offline security services for the MCU.

[0087] Figure 7 A schematic diagram of the hardware structure of a data transmission device provided in an embodiment of the present application is shown; as shown in the figure, the data transmission device may include a processor 701 and a memory 702 storing computer program instructions.

[0088] Specifically, the processor 701 may include a central processing unit (CPU), or an application specific integrated circuit (ASIC), or may be configured to implement one or more integrated circuits of the embodiments of the present application.

[0089] The memory 702 may include a large capacity memory for data or instructions. By way of example and not limitation, the memory 702 may include a hard disk drive (HDD), a floppy disk drive, a flash memory, an optical disk, a magneto-optical disk, a magnetic tape, or a universal serial bus (USB) drive or a combination of two or more of these. In one example, the memory 702 may include a removable or non-removable (or fixed) medium, or the memory 702 is a non-volatile solid-state memory. The memory 702 may be inside or outside the integrated gateway disaster recovery device.

[0090] In one example, the memory 702 may be a read-only memory (ROM). In one example, the ROM may be a mask-programmed ROM, a programmable ROM (PROM), an erasable PROM (EPROM), an electrically erasable PROM (EEPROM), an electrically rewritable ROM (EAROM), or a flash memory, or a combination of two or more of these.

[0091] The memory 702 may include a read-only memory (ROM), a random access memory (RAM), a magnetic disk storage media device, an optical storage media device, a flash memory device, an electrical, optical or other physical / tangible memory storage device. Thus, in general, the memory includes one or more tangible (non-transitory) computer-readable storage media (e.g., a memory device) encoded with software including computer-executable instructions, and when the software is executed (e.g., by one or more processors), it is operable to perform the operations described with reference to the method according to an aspect of the present disclosure.

[0092] The processor 701 implements the data transmission method in the above embodiment by reading and executing the computer program instructions stored in the memory 702 .

[0093] In one example, the data transmission device may further include a communication interface 703 and a bus 704. Figure 7 As shown, the processor 701, the memory 702, and the communication interface 703 are connected via a bus 704 and communicate with each other.

[0094] The communication interface 703 is mainly used to implement communication between various modules, devices, units and / or equipment in the embodiments of the present application.

[0095] The bus 704 includes hardware, software or both, coupling the components of the data transmission device to each other. For example, but not limitation, the bus may include an accelerated graphics port (Accelerated Graphics Port, AGP) or other graphics bus, an enhanced industry standard architecture (Extended Industry Standard Architecture, EISA) bus, a front side bus (Front Side Bus, FSB), a hypertransport (Hyper Transport, HT) interconnection, an industry standard architecture (Industry Standard Architecture, ISA) bus, an infinite bandwidth interconnection, a low pin count (LPC) bus, a memory bus, a micro channel architecture (MCA) bus, a peripheral component interconnect (PCI) bus, a PCI-Express (PCI-X) bus, a serial advanced technology attachment (SATA) bus, a video electronics standard association local (VLB) bus or other suitable buses or a combination of two or more of these. Where appropriate, the bus 704 may include one or more buses. Although the present application embodiment describes and illustrates a specific bus, the present application considers any suitable bus or interconnection.

[0096] In addition, in combination with the data transmission method in the above embodiment, the embodiment of the present application can provide a computer storage medium for implementation. The computer storage medium stores computer program instructions; when the computer program instructions are executed by a processor, any one of the data transmission methods in the above embodiment is implemented.

[0097] An embodiment of the present application also provides a computer program product, including a computer program, which implements any one of the data transmission methods in the above embodiments when the computer program is processed and executed.

[0098] It should be clear that the present application is not limited to the specific configuration and processing described above and shown in the figures. For the sake of simplicity, a detailed description of the known method is omitted here. In the above embodiments, several specific steps are described and shown as examples. However, the method process of the present application is not limited to the specific steps described and shown, and those skilled in the art can make various changes, modifications and additions, or change the order between the steps after understanding the spirit of the present application.

[0099] The functional blocks shown in the structural block diagram described above can be implemented as hardware, software, firmware or a combination thereof. When implemented in hardware, it can be, for example, an electronic circuit, an application-specific integrated circuit (Application Specific Integrated Circuit, ASIC), appropriate firmware, plug-in, function card, etc. When implemented in software, the elements of the present application are programs or code segments used to perform the required tasks. The program or code segment can be stored in a machine-readable medium, or transmitted on a transmission medium or communication link via a data signal carried in a carrier. "Machine-readable medium" can include any medium capable of storing or transmitting information. Examples of machine-readable media include electronic circuits, semiconductor memory devices, read-only memory (Read-Only Memory, ROM), flash memory, erasable read-only memory (Erasable ReadOnly Memory, EROM), floppy disks, compact disc read-only memory (Compact Disc Read-Only Memory, CD-ROM), optical discs, hard disks, optical fiber media, radio frequency (Radio Frequency, RF) links, etc. The code segment can be downloaded via a computer network such as the Internet, an intranet, etc.

[0100] It should also be noted that the exemplary embodiments mentioned in this application describe some methods or systems based on a series of steps or devices. However, this application is not limited to the order of the above steps, that is, the steps can be performed in the order mentioned in the embodiment, or in a different order from the embodiment, or several steps can be performed simultaneously.

[0101] Aspects of the present disclosure are described above with reference to the flowcharts and / or block diagrams of the methods, devices, computer program media, and computer program products according to the embodiments of the present disclosure. It should be understood that each box in the flowchart and / or block diagram and the combination of each box in the flowchart and / or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device to produce a machine so that these instructions executed by the processor of the computer or other programmable data processing device enable the implementation of the function / action specified in one or more boxes of the flowchart and / or block diagram. Such a processor can be, but is not limited to, a general-purpose processor, a special-purpose processor, a special application processor, or a field programmable logic circuit. It can also be understood that each box in the block diagram and / or flowchart and the combination of boxes in the block diagram and / or flowchart can also be implemented by dedicated hardware that performs a specified function or action, or can be implemented by a combination of dedicated hardware and computer instructions.

[0102] The above is only a specific implementation of the present application. Those skilled in the art can clearly understand that for the convenience and simplicity of description, the specific working processes of the systems, modules and units described above can refer to the corresponding processes in the aforementioned method embodiments, and will not be repeated here. It should be understood that the protection scope of the present application is not limited to this. Any technician familiar with the technical field can easily think of various equivalent modifications or replacements within the technical scope disclosed in this application, and these modifications or replacements should be included in the protection scope of this application.

Claims

1. A user identification card, characterized in that: include: The first interface is used to connect to the micro control unit MCU to receive AT commands sent by the MCU; The second interface is used to connect to the cellular module; A processor connected to the first interface, configured to parse the AT command through its own AT engine to obtain communication parameters and service data; and encrypt the service data through its own security module; The processor is also connected to the second interface, and is used to send active commands to the cellular module according to the communication parameters and the BIP protocol to control the cellular module to establish a data channel with the cloud service platform, and transmit the encrypted business data to the cloud service platform through the cellular module.

2. The user identification card according to claim 1, characterized in that: The first interface is a universal asynchronous receiver and transmitter (UART) interface; The MCU is connected to the first interface via its own UART interface, and is used to send AT commands to the first interface.

3. The user identification card according to claim 2, characterized in that: The second interface is a smart card ISO7816 interface; The cellular module is connected to the second interface via its own ISO7816 interface, and is used to receive instructions and data sent by the second interface.

4. A data transmission method, characterized in that: Applied to the user identification card according to any one of claims 1 to 3, the method comprises: Receiving an AT command containing service data sent by the MCU through the first interface; The service data is obtained by parsing the received AT command through the AT engine; Encrypting the business data through a security module to obtain the encrypted business data; The encrypted business data is transmitted to the cloud service platform through the cellular module; wherein the processor sends active instructions to the cellular module in advance according to the communication parameters and the BIP protocol to control the cellular module to establish a data channel with the cloud service platform, and the communication parameters are obtained by parsing the AT instructions sent by the AT engine to the MCU.

5. The data transmission method according to claim 4, characterized in that: After transmitting the encrypted service data to the cloud service platform through the cellular module, the method further includes: In the case of receiving a response message returned by the cellular module, the response message is decrypted by the security module to obtain the decrypted response message; wherein, after receiving the response message returned by the cloud service platform, the cellular module returns the response message to the user identification card through the second interface; The decrypted response message is returned to the MCU through the first interface.

6. The data transmission method according to claim 4, characterized in that: After the cellular module establishes a data channel with the cloud service platform, the method further includes: When receiving the key update instruction returned by the cellular module, the key of its own application security program is updated according to the key update instruction; wherein, after receiving the key update instruction returned by the cloud service platform, the cellular module transmits the key update instruction back to the user identification card through the second interface.

7. A data transmission device, characterized in that: The device comprises: a processor, and a memory storing computer program instructions; the processor reads and executes the computer program instructions to implement the data transmission method according to any one of claims 4 to 6.

8. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer program instructions, and when the computer program instructions are executed by a processor, the data transmission method according to any one of claims 4 to 6 is implemented.

9. A computer program product, characterized in that The invention comprises a computer program, which, when being processed and executed, implements the data transmission method according to any one of claims 4 to 6.

Images