Method for binding identity identification card and terminal equipment

Abstract

The method for binding the identity identification card and the terminal equipment for use comprises the following steps: when the identity identification card is installed on the terminal equipment for the first time, the terminal equipment sends a locking request to the identity identification card, the identity identification card judges whether the identity identification card is in a locking state or not, and when the identity identification card is not in the locking state, a verification key is generated and stored; a verification key is sent to the terminal equipment, and the terminal equipment is set to be in a locked state; the terminal equipment stores the verification key when receiving the verification key sent by the identity identification card; when the terminal equipment is restarted each time, verification information is sent to the identity identification card according to the stored verification key, the identity identification card verifies the verification information according to the verification key stored in the identity identification card, the identity identification card can work normally only when verification is passed, and otherwise, the identity identification card stops working. Therefore, the binding use of the identity identification card and the terminal equipment is realized, and the identity identification card is effectively prevented from being transferred from the original equipment to other equipment for use.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and in particular to a method for binding an identity recognition card with a terminal device. Background Art

[0002] SIM / eSIM cards are packaged in two ways: plug-in cards and patch cards. Plug-in cards are used by inserting them into the corresponding position of the device. They can be taken out at any time and inserted into another device for use, which makes them easy to be used for other purposes. Patch cards are SIM / eSIM cards that are soldered on the PCB board of the device in the form of chips. Patch cards are non-removable and have a certain degree of security, but there are still cases where some people dismantle the device to take out the patch cards and then move them to other devices for use, causing security issues. For example, many electronic watches have eSIM functions, which can be used for voice communication, making and receiving calls, etc. There are people who disassemble the eSIM chip on the electronic watch and transplant it to the mobile phone to make calls. In this case, the real identity information of the caller cannot be tracked, which poses a security risk.

[0003] Therefore, a technical solution is needed that can effectively prevent a SIM / eSIM card from being moved to other devices for use. Summary of the invention

[0004] The present application provides a method for binding an identity card to a terminal device, which is used to prevent a SIM / eSIM card from being transferred from an original device to another device for use.

[0005] According to the first aspect, an embodiment provides a method for binding an identity card to a terminal device, wherein the identity card is a SIM card or an eSIM card, and the method is applied to the terminal device, and the method includes:

[0006] When the identity card is first installed on the terminal device, a lock request is sent to the identity card so that the identity card determines whether it is in a locked state, wherein when the identity card determines that it is not in a locked state, it generates a verification key and stores the verification key, and sends the verification key to the terminal device to set itself to a locked state, wherein the locked state is used to indicate that the identity card has been bound to a terminal device;

[0007] If the verification key sent by the identity card is received, the verification key is stored in the memory of the terminal device;

[0008] Each time the terminal device is restarted, verification information is sent to the identity card according to the stored verification key, so that the identity card verifies the verification information according to its own stored verification key. If the verification is successful, the identity card continues to work, otherwise it stops working.

[0009] In some embodiments, the identity card sends a lock failure message to the terminal device when determining that the identity card is in a locked state, wherein the lock failure message is used to indicate that the identity card is in a locked state;

[0010] The method further comprises:

[0011] When receiving the locking failure information, checking whether the memory stores the verification key sent by the identity card;

[0012] If yes, sending verification information to the identity recognition card according to the stored verification key, so that the identity recognition card verifies the verification information according to the verification key stored in the identity recognition card;

[0013] If the verification is successful, an unlock instruction is sent to the identity card to unlock the identity card.

[0014] In some embodiments, the method further comprises: after sending an unlock instruction to the identity card to unlock the identity card, resending the lock request.

[0015] In some embodiments, the verification information is a verification key stored in the memory, and sending the verification information to the identity card according to the stored verification key so that the identity card verifies the verification information according to the verification key stored in the memory includes:

[0016] The stored verification key is sent to the identity recognition card, so that the identity recognition card determines whether the received verification key is consistent with the verification key stored in itself. If they are consistent, the verification is passed, otherwise the verification fails.

[0017] In some embodiments, the verification information includes a random number and a first signature of the random number, and the step of sending the verification information to the identity card according to the stored verification key so that the identity card verifies the verification information according to the verification key stored in the identity card includes:

[0018] Generate a random number of a preset length, use the stored verification key and a predetermined signature algorithm to generate a first signature of the random number, send the random number and the first signature of the random number to the identity recognition card, so that the identity recognition card uses its own stored verification key and the signature algorithm to generate a second signature of the random number, and determine whether the first signature is consistent with the second signature. If they are consistent, the verification is passed, otherwise the verification fails.

[0019] According to the second aspect, an embodiment provides a method for binding an identity card to a terminal device, wherein the identity card is a SIM card or an eSIM card, and the method is applied to the identity card, and the method includes:

[0020] Upon receiving a lock request sent by a terminal device, determining whether the identity card is in a locked state, and if not, generating a verification key and sending it to the terminal device, storing the verification key in the identity card, and setting the identity card to a locked state; wherein the locked state is used to indicate that the identity card has been bound to a terminal device, the terminal device sends the lock request when the identity card is first installed on the terminal device, and stores the verification key when receiving the verification key;

[0021] When receiving the verification information sent by the terminal device according to the verification key stored therein, the verification information is verified according to the verification key stored in the identity recognition card. If the verification is successful, the identity recognition card continues to work, otherwise the identity recognition card stops working.

[0022] In some embodiments, the method further comprises: if the identity card is already in a locked state, sending a lock failure message to the terminal device, wherein the lock failure message is used to indicate that the identity card is already in a locked state.

[0023] In some embodiments, the method further comprises: when receiving an unlock instruction sent by the terminal device, unlocking the locked state of the identity card.

[0024] In some embodiments, the verification information is a key stored in the terminal device, and the verifying the verification information according to the verification key stored in the identity card includes:

[0025] It is determined whether the received verification key is consistent with the verification key stored in the identity recognition card. If they are consistent, the verification is successful; otherwise, the verification fails.

[0026] In some embodiments, the verification information includes a random number and a first signature of the random number, the random number is generated by the terminal device, and the first signature of the random number is generated by the terminal device using a verification key stored therein and a predetermined signature algorithm;

[0027] The verifying the verification information according to the verification key stored in the identity card includes: using the verification key stored in the identity card and the signature algorithm to generate a second signature of the random number, and judging whether the first signature is consistent with the second signature, if they are consistent, the verification is passed, otherwise the verification fails.

[0028] According to the method for binding the identity card with the terminal device of the above embodiment, the identity card has a locked state, and the locked state is used to indicate that the identity card has a bound terminal device; when the identity card is first installed on the terminal device, the terminal device sends a lock request to the identity card so that the identity card determines whether it is in a locked state, generates a verification key and stores the verification key when it is not in a locked state, and sends the verification key to the terminal device to set itself to a locked state; each time the terminal device restarts, it sends verification information to the identity card according to the stored verification key, so that the identity card verifies the verification information according to its own stored verification key, and the identity card can work normally only when the verification is passed, otherwise it stops working, thereby preventing the terminal device that does not have the verification key sent by the identity card from using the identity card, and the identity card enters a locked state after sending the verification key, preventing other terminal devices from obtaining the verification key at will. In summary, the present application realizes the binding use of the identity card with the terminal device, and effectively prevents the identity card from being transferred from the original device to other devices for use. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] Figure 1 A schematic diagram of a technical solution for binding an existing SIM / eSIM card to a terminal device;

[0030] Figure 2 A flowchart of a method for binding an identity card and a terminal device for use according to an embodiment;

[0031] Figure 3 A schematic diagram of a device initialization process in an embodiment;

[0032] Figure 4 A schematic diagram of a device verification process in an embodiment;

[0033] Figure 5 A schematic diagram of a device initialization process in another embodiment;

[0034] Figure 6The present invention is a flow chart of a method for binding an identity card and a terminal device according to another embodiment. DETAILED DESCRIPTION

[0035] The present invention is further described in detail below by specific embodiments in conjunction with the accompanying drawings. Wherein similar elements in different embodiments adopt associated similar element numbers. In the following embodiments, many detailed descriptions are for making the present application better understood. However, those skilled in the art can easily recognize that some features can be omitted in different situations, or can be replaced by other elements, materials, methods. In some cases, some operations related to the present application are not shown or described in the specification, this is to avoid the core part of the present application being overwhelmed by too much description, and for those skilled in the art, it is not necessary to describe these related operations in detail, and they can fully understand the related operations according to the description in the specification and the general technical knowledge in the art.

[0036] In addition, the features, operations or characteristics described in the specification can be combined in any appropriate manner to form various implementations. At the same time, the steps or actions in the method description can also be interchanged or adjusted in a manner that is obvious to those skilled in the art. Therefore, the various sequences in the specification and the drawings are only for the purpose of clearly describing a certain embodiment and are not meant to be a required sequence, unless otherwise specified that a certain sequence must be followed.

[0037] The serial numbers of the components in this document, such as "first", "second", etc., are only used to distinguish the objects described and do not have any order or technical meaning. The "connection" and "coupling" mentioned in this application, unless otherwise specified, include direct and indirect connections (couplings).

[0038] The following is a brief description of some terms involved in this application.

[0039] Identity card: refers to SIM card or eSIM card.

[0040] SIM: Subscriber Identity Module.

[0041] eSIM: Embedded SIM, embedded SIM card.

[0042] IMEI: International Mobile Equipment Identity.

[0043] Terminal devices: including IoT devices and consumer terminal devices, among which IoT devices include POS machines, smart cameras, MIFI, etc., and consumer terminal devices include mobile phones, smart watches, PCs (Personal Computers), etc.

[0044] Regarding the issue of SIM / eSIM cards being randomly transferred to other devices, please refer to Figure 1 In the prior art, a separate area is usually set up in the SIM / eSIM card to store the IMEI number of the terminal device to be bound; the user informs the telecommunications company of the IMEI information of the terminal device in advance, and the telecommunications company writes it into the SIM / eSIM card; each time the terminal device is turned on and powered on, it needs to read the IMEI number of the machine and input it into the SIM / eSIM card through special instructions. The SIM / eSIM card determines whether it is consistent with the IMEI number stored in itself. If it is consistent, it continues to work and performs normal communication functions. Otherwise, it refuses to work and stops the communication function service.

[0045] The disadvantages of this method are: 1. The process is cumbersome, and the SIM / eSIM card needs to be pre-set with the device's IMEI number. During production, the terminal device and the card must correspond one-to-one, which increases the workload; 2. The IMEI number of the terminal device can be tampered with. The IMEI number of the terminal device to be transplanted with the SIM / eSIM card can be changed to the IMEI number of the original terminal device and can continue to be used.

[0046] The present application provides a method for binding an identity card to a terminal device, wherein the SIM / eSIM card determines whether the terminal device using the card is a legitimate device, and only a legitimate device can continue to use the communication function; and the method of the present application does not use device information as a basis for judgment, but the SIM / eSIM card itself generates a key for the terminal device to use, and the SIM / eSIM card determines the legitimacy of the terminal device by verifying the key.

[0047] The method for binding an identity card with a terminal device in some embodiments of the present application is applied to the terminal device and can be executed by device software such as an application on the terminal device. Please refer to Figure 2 The method for binding the identity card and the terminal device in this embodiment includes steps 110 to 130, which are described in detail below.

[0048] Step 110: When the identity card is installed in the terminal device for the first time, a lock request is sent to the identity card so that the identity card determines whether it is in a locked state.

[0049] Specifically, when the identity card is installed on the terminal device, the terminal device will check whether it has the relevant information of the identity card stored in itself. If not, it means that the identity card is installed on the terminal device for the first time.

[0050] Please refer to Figure 3 After receiving the lock request, the identity card determines whether it is in a locked state. If it is not in a locked state, it generates a key, called a verification key. The identity card stores the verification key and sends the verification key to the terminal device to set itself to a locked state. The locked state is used to indicate that the identity card has a bound terminal device, that is, the identity card has been bound to a certain terminal device / terminal devices. Here, the binding of the identity card and the terminal device means that the identity card can only be used by the bound terminal device. After the identity card is locked, it is also in a locked state when it is transferred to other terminal devices.

[0051] If the verification key sent by the identity card is received, step 120 is executed.

[0052] Step 120: Store the verification key in the memory of the terminal device.

[0053] Step 130: Each time the terminal device is restarted, verification information is sent to the identity card according to the stored verification key, so that the identity card verifies the verification information according to its own stored verification key. If the verification is successful, the identity card continues to work, otherwise it stops working.

[0054] The identity card verifies the verification information according to the verification key stored in itself, and the main purpose is to verify whether the verification key used by the terminal device is consistent with the verification key stored in it. There are two ways to perform key verification between the identity card and the terminal device. In one embodiment, the verification information is the verification key stored in the memory of the terminal device. In step 130, the verification information is sent to the identity card according to the stored verification key, so that the identity card verifies the verification information according to the verification key stored in itself, including: sending the stored verification key to the identity card, so that the identity card determines whether the received verification key is consistent with the verification key stored in itself. If they are consistent, the verification is passed, otherwise the verification fails.

[0055] In another embodiment, the verification information includes a random number and a first signature of the random number. In step 130, the verification information is sent to the identity card according to the stored verification key, so that the identity card verifies the verification information according to its own stored verification key, including: generating a random number of a preset length, using the stored verification key and a predetermined signature algorithm to generate a first signature of the random number, sending the random number and the first signature of the random number to the identity card, so that the identity card uses its own stored verification key and the signature algorithm to generate a second signature of the random number, and determining whether the first signature is consistent with the second signature. If they are consistent, the verification is successful, otherwise the verification fails.

[0056] For example, the terminal device generates a random number: 232312424241243, generates the first signature of the random number: EFA33ED, and sends these two data to the identity card. The identity card generates the second signature EFA33ED based on the random number 232312424241243 using its own stored verification key. After comparison, it is found that the first signature is consistent with the second signature, and the identity card continues to work.

[0057] Please refer to Figure 4 When the verification is successful, the identity card can send a verification success message to the terminal device. When the verification fails, the identity card can send a key error message to the terminal device to inform the terminal device of the verification result.

[0058] In some embodiments, the verification key may be sent to the device management platform for storage to prevent the terminal device from being unable to use the identity card and thus unable to connect to the Internet after the verification key stored locally is lost.

[0059] Please refer to Figure 5 In some embodiments, when the identity recognition card determines that it is in a locked state, it sends a lock failure message to the terminal device, and the lock failure message is used to indicate that the identity recognition card is in a locked state. Then the method of binding the identity recognition card and the terminal device of this embodiment also includes: when the lock failure message is received, checking whether the memory stores the verification key sent by the identity recognition card; if so, sending verification information to the identity recognition card according to the stored verification key, so that the identity recognition card verifies the verification information according to its own stored verification key; if the verification is successful, sending an unlock instruction to the identity recognition card, so that the identity recognition card is unlocked. Among them, when the verification pass information sent by the identity recognition card is received, it can be confirmed that the verification is successful, and an unlock instruction is sent to the identity recognition card.

[0060] In this embodiment, the identity recognition card provides an unlocking instruction for the terminal device to cancel the locked state, but it must be executed after the key verification is passed. The key verification method between the identity recognition card and the terminal device can refer to the above related description, which will not be repeated here.

[0061] Please refer to Figure 5 In some embodiments, after sending the unlock instruction to the identity card to unlock the identity card, the lock request is resent, that is, returning to step 110. Figure 5 As shown, the identity card can send lock release information to the terminal device after the lock state is released. When the lock release information sent by the identity card is received, it can be confirmed that the identity card has been unlocked, and the lock request is resent.

[0062] The method for binding an identity card with a terminal device in some other embodiments of the present application is applied to the identity card, please refer to Figure 6 The method for binding the identity card and the terminal device in this embodiment includes steps 210 to 220, which are described in detail below.

[0063] Step 210: upon receiving the lock request sent by the terminal device, determine whether the identity card is in a locked state; if not, generate a verification key and send it to the terminal device, store the verification key in the identity card, and set the identity card to a locked state.

[0064] like Figure 3 As shown, the terminal device sends a lock request when the identity card is first installed on the terminal device, and stores the verification key when the verification key is received.

[0065] Each time the terminal device is restarted, it sends verification information to the identity recognition card according to the verification key stored therein. When the verification information sent by the terminal device according to the verification key stored therein is received, step 220 is executed.

[0066] Step 220: Verify the verification information according to the verification key stored in the identity card. If the verification is successful, the identity card continues to work; otherwise, the identity card stops working.

[0067] As described above, in one embodiment, the verification information is a key stored in the terminal device. In step 220, the verification information is verified according to the verification key stored in the identity card, including: determining whether the received verification key is consistent with the verification key stored in the identity card. If they are consistent, the verification passes, otherwise the verification fails.

[0068] In another embodiment, the verification information includes a random number and a first signature of the random number. In step 220, the verification information is verified according to a verification key stored in the identity card, including: using the verification key stored in the identity card and a predetermined signature algorithm to generate a second signature of the random number, and determining whether the first signature is consistent with the second signature. If they are consistent, the verification passes, otherwise the verification fails.

[0069] Please refer to Figure 4 When the verification is successful, a verification success message can be sent to the terminal device. When the verification fails, a key error message can be sent to the terminal device to inform the terminal device of the verification result.

[0070] Please refer to Figure 5 In some embodiments, if it is determined that the identity card is in a locked state, a lock failure message is sent to the terminal device.

[0071] like Figure 5As shown, when the terminal device receives the lock failure information, it checks whether it stores the verification key sent by the identity card; if so, it sends the verification information to the identity card according to the stored verification key. At this time, when the verification information sent by the terminal device is received, the verification information is verified according to the verification key stored in the identity card; if the verification is successful, the verification pass information is sent to the terminal device. When the terminal device receives the verification pass information sent by the identity card, it sends an unlock instruction to the identity card. When the unlock instruction sent by the terminal device is received, the lock state of the identity card is unlocked, and the lock release information can be sent to the terminal device after the lock state is unlocked. The method of key verification between the identity card and the terminal device can refer to the relevant instructions above, which will not be repeated here.

[0072] The method for binding an identity card with a terminal device provided in an embodiment of the present application enables the identity card to have a locked state, and the locked state is used to indicate that the identity card has a bound terminal device; when the identity card is first installed on the terminal device, the terminal device sends a lock request to the identity card, and if the identity card is not in a locked state, it provides a verification key to the terminal device and stores the verification key itself. Each subsequent time the terminal device is restarted, it is necessary to verify the device with the identity card through the verification key. Only when the verification is passed can the identity card work normally, otherwise it stops working, thereby preventing the terminal device that does not have the verification key sent by the identity card from using the identity card, and the identity card enters a locked state after sending the verification key, preventing other terminal devices from obtaining the verification key at will. Therefore, the present application realizes the binding of the identity card with the terminal device, and effectively prevents the identity card from being transferred from the original device to other devices for use.

[0073] Furthermore, the present application does not use the IMEI number of the terminal device as the basis for the identity card to judge the terminal device. Instead, the identity card generates a key in the card and sends it to the terminal device to store the key. The key is verified to determine whether the terminal device is the device bound to the identity card. This is more convenient to implement and overcomes the defect of using the IMEI number as the basis for verification. It can effectively prevent the identity card from being disassembled from the terminal device and used on other terminal devices.

[0074] Those skilled in the art will appreciate that all or part of the functions of the various methods in the above-mentioned embodiments can be implemented by hardware or by computer programs. When all or part of the functions in the above-mentioned embodiments are implemented by computer programs, the program can be stored in a computer-readable storage medium, and the storage medium can include: read-only memory, random access memory, disk, optical disk, hard disk, etc., and the program is executed by a computer to implement the above-mentioned functions. For example, the program is stored in the memory of the device, and when the program in the memory is executed by the processor, all or part of the above-mentioned functions can be implemented. In addition, when all or part of the functions in the above-mentioned embodiments are implemented by computer programs, the program can also be stored in a storage medium such as a server, another computer, disk, optical disk, flash disk or mobile hard disk, and can be downloaded or copied and saved in the memory of the local device, or the system of the local device is updated, and when the program in the memory is executed by the processor, all or part of the functions in the above-mentioned embodiments can be implemented.

[0075] The above specific examples are used to illustrate the present invention, which is only used to help understand the present invention and is not intended to limit the present invention. For those skilled in the art, according to the concept of the present invention, some simple deductions, modifications or substitutions can be made.

Claims

1. A method for binding an identity card to a terminal device, wherein the identity card is a SIM card or an eSIM card, and the method is applied to the terminal device. It is characterized in that The method comprises: When the identity card is first installed on the terminal device, a lock request is sent to the identity card so that the identity card determines whether it is in a locked state, wherein when the identity card determines that it is not in a locked state, it generates a verification key and stores the verification key, and sends the verification key to the terminal device to set itself to a locked state, wherein the locked state is used to indicate that the identity card has been bound to a terminal device; If the verification key sent by the identity card is received, the verification key is stored in the memory of the terminal device; Each time the terminal device is restarted, verification information is sent to the identity card according to the stored verification key, so that the identity card verifies the verification information according to its own stored verification key. If the verification is successful, the identity card continues to work, otherwise it stops working.

2. The method according to claim 1, It is characterized in that When the identity recognition card determines that it is in a locked state, the identity recognition card sends a lock failure message to the terminal device, wherein the lock failure message is used to indicate that the identity recognition card is in a locked state; The method further comprises: When receiving the locking failure information, checking whether the memory stores the verification key sent by the identity card; If yes, sending verification information to the identity recognition card according to the stored verification key, so that the identity recognition card verifies the verification information according to the verification key stored in the identity recognition card; If the verification is successful, an unlock instruction is sent to the identity card to unlock the identity card.

3. The method according to claim 2, It is characterized in that Also includes: After sending the unlock instruction to the identity card so that the identity card is unlocked, the lock request is resent.

4. The method according to claim 1 or 2, It is characterized in that The verification information is a verification key stored in the memory, and the step of sending the verification information to the identity card according to the stored verification key so that the identity card verifies the verification information according to the verification key stored in the memory includes: The stored verification key is sent to the identity recognition card, so that the identity recognition card determines whether the received verification key is consistent with the verification key stored in itself. If they are consistent, the verification is passed, otherwise the verification fails.

5. The method according to claim 1 or 2, It is characterized in that The verification information includes a random number and a first signature of the random number, and the step of sending the verification information to the identity recognition card according to the stored verification key so that the identity recognition card verifies the verification information according to the verification key stored in the identity recognition card includes: Generate a random number of a preset length, use the stored verification key and a predetermined signature algorithm to generate a first signature of the random number, send the random number and the first signature of the random number to the identity recognition card, so that the identity recognition card uses its own stored verification key and the signature algorithm to generate a second signature of the random number, and determine whether the first signature is consistent with the second signature. If they are consistent, the verification is passed, otherwise the verification fails.

6. A method for binding an identity card to a terminal device, wherein the identity card is a SIM card or an eSIM card, and the method is applied to the identity card. It is characterized in that The method comprises: Upon receiving a lock request sent by a terminal device, determining whether the identity card is in a locked state, and if not, generating a verification key and sending it to the terminal device, storing the verification key in the identity card, and setting the identity card to a locked state; wherein the locked state is used to indicate that the identity card has been bound to a terminal device, the terminal device sends the lock request when the identity card is first installed on the terminal device, and stores the verification key when receiving the verification key; When receiving the verification information sent by the terminal device according to the verification key stored therein, the verification information is verified according to the verification key stored in the identity recognition card. If the verification is successful, the identity recognition card continues to work, otherwise the identity recognition card stops working.

7. The method according to claim 6, It is characterized in that Also includes: If the identity card is already in a locked state, a lock failure message is sent to the terminal device, where the lock failure message is used to indicate that the identity card is already in a locked state.

8. The method according to claim 7, It is characterized in that Also includes: When the unlocking instruction sent by the terminal device is received, the locked state of the identity card is unlocked.

9. The method according to claim 6, It is characterized in that The verification information is a key stored in the terminal device, and the verification of the verification information according to the verification key stored in the identity card includes: It is determined whether the received verification key is consistent with the verification key stored in the identity recognition card. If they are consistent, the verification is successful; otherwise, the verification fails.

10. The method according to claim 6, It is characterized in that The verification information includes a random number and a first signature of the random number, the random number is generated by the terminal device, and the first signature of the random number is generated by the terminal device using a verification key stored therein and a predetermined signature algorithm; The verifying the verification information according to the verification key stored in the identity card includes: using the verification key stored in the identity card and the signature algorithm to generate a second signature of the random number, and judging whether the first signature is consistent with the second signature, if they are consistent, the verification is passed, otherwise the verification fails.

Images