IC Card Personalized Data Processing Method, Device, Computer Equipment and Medium

Abstract

The present invention relates to the technical field of financial IC card personalization, and discloses an IC card personalization data processing method, device, computer device and medium, including: obtaining configuration file information of a target IC card and cardholder personalized data; according to a preset key management system, combining with a preset IC card application template, writing the configuration file information into the preset IC card application template to obtain a target IC card application template corresponding to the target IC card; generating a sub-key of the issuer master key of the target IC card, an IC card public-private key pair and an IC card public key certificate; dynamically generating a personalization instruction, where the personalization instruction is used to represent the application personalization data of the target IC card. The IC card application template of the present invention has independence and universality, does not need to rely on a specific system environment, and can be edited to obtain a more personalized IC card application template for users. The IC card application template has integrity, completely describes the application personalization data, and reduces the redundancy of the personalization data.

Description

Technical Field

[0001] The present invention relates to the technical field of financial IC card personalization, and in particular to an IC card personalization data processing method, device, computer equipment and medium. Background Art

[0002] With the rapid development and diversification of financial IC cards, the personalized data processing of financial IC cards is particularly important. Financial IC card personalization refers to the process of organizing and writing the personalized data required for transactions into the card; taking the bank card applied for by the user as an example, before the bank issues the bank card to the cardholder, it needs to write the cardholder's name, card number, password and other related information into the card. That is, after completing the writing of the personalized data of the card, the bank can send the bank card to the cardholder.

[0003] In the related technology, in the existing financial IC card personalized data processing, most of the personalized data needs to be bound to a specific system, and the versatility is not strong. The process of preparing personalized data is also relatively cumbersome, and it is difficult to achieve a complete description of the application personalized data of the financial IC card. The redundancy of personalized data is extremely high, which brings great inconvenience to the financial IC card personalized data processing. Summary of the invention

[0004] In view of this, the present invention provides an IC card personalized data processing method, device, computer equipment and medium to solve the problem that the prior art is difficult to fully describe the application personalized data of the financial IC card.

[0005] In a first aspect, the present invention provides a method for processing personalized data of an IC card, the method comprising:

[0006] Obtain the target IC card's profile information and cardholder's personalized data;

[0007] According to the preset key management system and the preset IC card application template, the configuration file information is written into the preset IC card application template to obtain the target IC card application template corresponding to the target IC card;

[0008] Generate the subkey of the issuing bank's master key of the target IC card, the public and private key pair of the IC card, and the public key certificate of the IC card according to the target IC card application template, the cardholder's personalized data, and the preset key management system;

[0009] Based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data, the personalized instructions are dynamically generated, and the personalized instructions are used to represent the application personalized data of the target IC card.

[0010] In the present invention, by designing an IC card application template, the IC card application template has independence and versatility, does not need to rely on a specific system environment, and can be edited to obtain a more personalized IC card application template for the user, so as to prepare for the subsequent generation of personalized instructions. At the same time, the IC card application template has integrity and can fully describe the application personalized data, thus overcoming the problem that it is difficult to fully describe the application personalized data of the financial IC card. The personalized instructions are dynamically generated using the IC card application template, which reduces the redundancy of the application personalized data, reduces the computational burden of personalized data processing, and improves the convenience of the personalized data processing of the financial IC card.

[0011] In an optional implementation, the preset IC card application template includes: application identification number, bank identification number, issuing bank public key certificate, issuing bank master key, IC card public and private key pair, authentication data information and DGI data group.

[0012] In this method, by designing an IC card application template, including: application identification number, bank identification number, issuing bank public key certificate, issuing bank master key, IC card public and private key pair, authentication data information and DGI data grouping, a complete description of the application personalized data of the financial IC card is achieved.

[0013] In an optional implementation, the target IC card application template further includes an application file locator, which generates a subkey of the issuing bank master key of the target IC card and an IC card public-private key pair according to the target IC card application template, the cardholder personalized data and a preset key management system, including:

[0014] Using the bank identification number and the characteristic information of the issuing bank master key in the target IC card application template, the preset key management system is screened to obtain the issuing bank master key of the target IC card;

[0015] The issuing bank's master key is used as the root key, and the discrete root key generates the subkey of the issuing bank's master key;

[0016] Generate an IC card public and private key pair using the necessary attribute information of the IC card public and private key pair in the target IC card application template.

[0017] In this method, the subkey of the issuing bank's master key and the public-private key pair of the IC card are generated according to the target IC card application template, the cardholder's personalized data and the preset key management system, so that the DGI data group can be dynamically generated using the subkey of the issuing bank's master key and the public-private key pair of the IC card, preparing for the subsequent generation of personalized instructions.

[0018] In an optional implementation, the authentication data information includes static signature data and IC card public key certificate, and the authentication data information is generated by the following steps:

[0019] Obtain the public and private key pair of the issuing bank corresponding to the target IC card in the preset key management system;

[0020] Generate static signature data using the application file locator, the public and private key pair of the issuing bank, the application interaction characteristics and the data authentication code;

[0021] Generate an IC card public key certificate using the IC card public and private key pair, the issuing bank's public and private key pair, application interaction features and auxiliary information.

[0022] In this method, static signature data is generated by utilizing the application file locator, the issuing bank's public-private key pair, application interaction features and data authentication code; the IC card public key certificate is generated by utilizing the IC card public-private key pair, the issuing bank's public-private key pair, application interaction features and auxiliary information, so as to facilitate the reference of static signature data and IC card public key certificate at the corresponding position of the DGI data group to realize the dynamic generation of personalized instructions.

[0023] In an optional implementation, the DGI data packet includes the cardholder's personalized data, the IC card public and private key pair, the IC card public key certificate, and the subkey of the issuing bank's master key.

[0024] In this way, by setting up DGI data groups, including cardholder personalized data, IC card public and private key pairs, IC card public key certificates and subkeys of the issuing bank's master key, a complete description of the application personalized data of the financial IC card is achieved.

[0025] In an optional implementation, based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data, a personalized instruction is generated, including:

[0026] Parse the public key certificate of the issuing bank using the application identification number, and fill the public key certificate of the issuing bank into the tag corresponding to the public key certificate of the issuing bank in the DGI data group;

[0027] The personal identification code, IC card public-private key pair and subkey of the issuing bank's master key in the cardholder's personalized data are encrypted to obtain the encrypted personal identification code, IC card public-private key pair and subkey of the issuing bank's master key, and the encrypted personal identification code, IC card public-private key pair, subkey of the issuing bank's master key and the cardholder's personalized data are filled into the tags corresponding to the personal identification code, IC card public-private key pair, subkey of the issuing bank's master key and the cardholder's personalized data in the DGI data group, and the DGI data group is dynamically filled to obtain a personalized instruction.

[0028] In this method, compared with the existing static generation of DGI data groups, there is too much redundant data. Excessive redundant data will take up a lot of storage space, increase the time and cost of data processing, transmission and backup, and may also lead to data consistency problems, causing data errors and inconsistencies, and may also bring security risks, making data more vulnerable to attacks and destruction; the process of dynamically generating DGI data groups greatly reduces the redundancy of personalized data.

[0029] In a second aspect, the present invention provides an IC card personalization data processing device, the device comprising:

[0030] A data acquisition module is used to acquire the configuration file information of the target IC card and the personalized data of the cardholder;

[0031] The template construction module is used to write the configuration file information into the preset IC card application template according to the preset key management system and the preset IC card application template to obtain the target IC card application template corresponding to the target IC card;

[0032] The data generation module is used to generate the subkey of the issuing bank master key of the target IC card, the public and private key pair of the IC card and the public key certificate of the IC card according to the target IC card application template, the cardholder personalized data and the preset key management system;

[0033] The personalized instruction generation module is used to dynamically generate personalized instructions based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data. The personalized instructions are used to represent the application personalized data of the target IC card.

[0034] In a third aspect, the present invention provides a computer device, comprising: a memory and a processor, the memory and the processor being communicatively connected to each other, the memory storing computer instructions, and the processor executing the IC card personalization data processing method of the first aspect or any corresponding embodiment thereof by executing the computer instructions.

[0035] In a fourth aspect, the present invention provides a computer-readable storage medium having computer instructions stored thereon, the computer instructions being used to enable a computer to execute the IC card personalization data processing method of the first aspect or any corresponding embodiment thereof.

[0036] In a fifth aspect, the present invention provides a computer program product, including computer instructions, and the computer instructions are used to enable a computer to execute the IC card personalization data processing method of the first aspect or any corresponding embodiment thereof. BRIEF DESCRIPTION OF THE DRAWINGS

[0037] In order to more clearly illustrate the specific implementation methods of the present invention or the technical solutions in the prior art, the drawings required for use in the specific implementation methods or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are some implementation methods of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0038] Figure 1 It is a flowchart of an IC card personalized data processing method according to an embodiment of the present invention.

[0039] Figure 2 The figure is a flow chart of a method for processing personalized data of a financial IC card according to an embodiment of the present invention.

[0040] Figure 3 The figure is a principle block diagram of a method for processing personalized data of a financial IC card according to an embodiment of the present invention.

[0041] Figure 4 It is a flowchart of another IC card personalized data processing method according to an embodiment of the present invention.

[0042] Figure 5 It is a structural schematic diagram of a template of a financial IC card application according to an embodiment of the present invention.

[0043] Figure 6 It is a flowchart of another IC card personalized data processing method according to an embodiment of the present invention.

[0044] Figure 7 4 is a structural block diagram of an IC card personalized data processing device according to an embodiment of the present invention.

[0045] Figure 8 Schematic diagram of the hardware structure of a computer device according to an embodiment of the present invention. DETAILED DESCRIPTION

[0046] In order to make the purpose, technical solution and advantages of the embodiments of the present invention clearer, the technical solution in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present invention.

[0047] In the related technology, in the existing financial IC card personalized data processing, most of the personalized data needs to be bound to a specific system, and the versatility is not strong. The process of preparing personalized data is also relatively cumbersome, and it is difficult to achieve a complete description of the application personalized data of the financial IC card. The redundancy of personalized data is extremely high, which brings great inconvenience to the financial IC card personalized data processing.

[0048] In order to solve the above problems, an IC card personalized data processing method is provided in an embodiment of the present invention, which is used in a computer device. It should be noted that its execution subject can be an IC card personalized data processing device, which can be implemented as part or all of a computer device through software, hardware, or a combination of software and hardware. The computer device can be a terminal, a client, or a server. The server can be a single server or a server cluster composed of multiple servers. The terminal in the embodiment of the present application can be a smart phone, a personal computer, a tablet computer, or other intelligent hardware devices. In the following method embodiments, the execution subject is a computer device as an example for explanation.

[0049] The computer device in this embodiment is suitable for the use scenario of financial IC card personalized data processing. The present invention provides an IC card personalized data processing method. By designing an IC card application template, the IC card application template has independence and versatility, and does not need to rely on a specific system environment. It can be edited to obtain a more personalized IC card application template for the user, and prepare for the subsequent generation of personalized instructions. At the same time, the IC card application template has integrity and can fully describe the application personalized data, overcoming the problem of difficulty in fully describing the application personalized data of the financial IC card. The use of IC card application templates to dynamically generate personalized instructions reduces the redundancy of the application personalized data, reduces the computational burden of personalized data processing, and improves the convenience of financial IC card personalized data processing.

[0050] According to an embodiment of the present invention, an embodiment of an IC card personalized data processing method is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0051] In this embodiment, a method for processing IC card personalization data is provided, which can be used in the above-mentioned computer device. Figure 1 : is a flow chart of a method for processing IC card personalized data according to an embodiment of the present invention, such as Figure 1 As shown, the process includes the following steps:

[0052] Step S101, obtaining the configuration file information of the target IC card and the personalized data of the cardholder.

[0053] In one example, the configuration file information, i.e., the profile information of the financial IC card product, may include the application identification number, the bank identification number, the characteristic information of the issuing bank master key, the attribute information of the IC card public and private key pair, the information for generating authentication data, and the DGI data grouping related information. Preprocessing is performed based on the original card making data, i.e., the cardholder's name, personal identification number, card account number, effective date, expiration date, track 1 data, equivalent track 2 data, and other cardholder personalized data are extracted from the original card making data.

[0054] Step S102, according to the preset key management system and in combination with the preset IC card application template, the configuration file information is written into the preset IC card application template to obtain the target IC card application template corresponding to the target IC card.

[0055] In one example, the financial IC card product profile information is organized and edited in a template of a financial IC card application, and the profile information is filled in according to the classification corresponding to the data in the preset IC card application template. A unique application identification number, a unique bank identification number, at least one group of issuing bank public key certificates, at least one group of issuing bank master keys, at least one group of IC card public and private key pairs, at least one group of information for generating authentication data, and a DGI data group are defined in a template of a financial IC card application.

[0056] Step S103, generating the subkey of the issuing bank master key of the target IC card, the IC card public-private key pair and the IC card public key certificate according to the target IC card application template, the cardholder personalized data and the preset key management system.

[0057] In one example, a subkey of the issuing bank's master key, an IC card public-private key pair, and an IC card public key certificate are generated based on a financial IC card application template, cardholder personalized data, and a preset key management system.

[0058] Step S104, dynamically generate personalized instructions based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data.

[0059] In the embodiment of the present invention, the personalization instruction is used to represent the application personalization data of the target IC card.

[0060] In one example, a personalization instruction is generated through a template of a financial IC card application, a preset key management system, a subkey of the issuing bank's master key, an IC card public and private key pair, an IC card public key certificate, and cardholder personalized data.

[0061] In one implementation scenario, Figure 2 is a flow chart of a method for processing personalized data of a financial IC card according to an embodiment of the present invention, Figure 3 is a principle block diagram of a method for processing personalized data of a financial IC card according to an embodiment of the present invention. Figure 2 and Figure 3 As shown, according to the financial IC card product profile information and the preset key management system, the financial IC card product profile information is organized and edited in a template of a financial IC card application. In a template of a financial IC card application, a unique application identification number, a unique bank identification number, at least one group of issuing bank public key certificates, at least one group of issuing bank master keys, at least one group of IC card public and private key pairs, at least one group of information for generating authentication data and DGI data grouping are defined. Preprocessing is performed according to the original card making data, that is, the cardholder's name, personal identification code, card account number, effective date, expiration date, track 1 data, equivalent track 2 data and other cardholder personalized data are extracted from the original card making data. According to a template of a financial IC card application, the cardholder personalized data and the preset key management system, the subkey of the issuing bank master key, the IC card public and private key pair, and the IC card public key certificate are generated. Personalization instructions are generated through a template of a financial IC card application, a preset key management system, the subkey of the issuing bank master key, the IC card public and private key pair, the IC card public key certificate and the cardholder personalized data.

[0062] The IC card personalized data processing method provided in this embodiment, by designing an IC card application template, the IC card application template has independence and versatility, does not need to rely on a specific system environment, and can be edited to obtain a more personalized IC card application template for the user, so as to prepare for the subsequent generation of personalized instructions. At the same time, the IC card application template has integrity and can fully describe the application personalized data, thus overcoming the problem of difficulty in fully describing the application personalized data of the financial IC card. The IC card application template is used to dynamically generate personalized instructions, which reduces the redundancy of the application personalized data, reduces the computational burden of personalized data processing, and improves the convenience of financial IC card personalized data processing.

[0063] In this embodiment, a method for processing IC card personalized data is provided, which can be used in the above-mentioned computer device. Figure 4 4 is a flow chart of another IC card personalized data processing method according to an embodiment of the present invention. Figure 4 As shown, the process includes the following steps:

[0064] Step S401, obtain the configuration file information of the target IC card and the cardholder's personalized data. Figure 1 Step S101 of the illustrated embodiment will not be described in detail here.

[0065] Step S402, according to the preset key management system and in combination with the preset IC card application template, the configuration file information is written into the preset IC card application template to obtain the target IC card application template corresponding to the target IC card.

[0066] In an optional implementation, the preset IC card application template includes: application identification number, bank identification number, issuing bank public key certificate, issuing bank master key, IC card public and private key pair, authentication data information and DGI data group.

[0067] In an optional implementation, the authentication data information includes static signature data and IC card public key certificate, and the authentication data information is generated by the following steps: Step a1, obtaining the issuing bank's public and private key pair corresponding to the target IC card in the preset key management system.

[0068] Step a2, using the application file locator, the public and private key pair of the issuing bank, the application interaction characteristics and the data authentication code, generate static signature data.

[0069] Step a3, using the IC card public and private key pair, the issuing bank's public and private key pair, application interaction characteristics and auxiliary information, generate an IC card public key certificate.

[0070] In an optional implementation, the DGI data packet includes the cardholder's personalized data, the IC card public and private key pair, the IC card public key certificate, and the subkey of the issuing bank's master key.

[0071] In one example, Figure 5 is a schematic diagram of the structure of a template for a financial IC card application according to an embodiment of the present invention, such as Figure 5 As shown, the template of the financial IC card application includes: a unique application identification number, a unique bank identification number, at least one set of issuing bank public key certificates, at least one set of issuing bank master keys, at least one set of IC card public and private key pairs, at least one set of information for generating authentication data, and DGI data grouping.

[0072] Specifically, AID and BIN are defined in a template application instance of a financial IC card application, and at least one set of issuing bank public key certificates, at least one set of characteristic information of issuing bank master keys, at least one set of attribute information of IC card public and private key pairs, at least one set of information for generating authentication data, and related information of DGI data grouping are defined under the application instance. Among them, AID is the application identification number, which is unique; BIN is the bank identification number, which is unique.

[0073] The template of financial IC card application may include: 1. Public key certificate of issuing bank: In a template of financial IC card application, an ID is defined, and the CA public key certificate and the public key certificate of issuing bank issued by CA are input. The module of the public key of issuing bank is obtained by parsing the public key certificate of issuing bank through bank, and the uniqueness is determined according to the module value and bank identification number. The corresponding public and private key pairs of issuing bank in the preset key management system are used to prepare personalized data. Among them, ID is the ID of the public key certificate of issuing bank, which can be a number or a string. ID is used to reference the public key certificate of issuing bank; CA is the certificate issuing authority.

[0074] 2. Card issuing bank master key: A template for a financial IC card application defines the characteristic information of the card issuing bank master key, such as KCV (key verification value), and may also have other auxiliary information. Other auxiliary information includes key type, key name, etc. The corresponding card issuing bank master key is obtained in the preset key management system through the bank identification number and KCV, or the corresponding card issuing bank master key is obtained in the preset key management system through the bank identification number, KCV and other auxiliary information. The card issuing bank master key is used as the root key, and the subkey of the card issuing bank master key is generated for the card through the root key, card account number and application master account serial number. Different card accounts will generate different subkeys. The subkey is written into the card when the card is personalized. The subkey is used when the card is authenticated for transaction to ensure transaction security. Define the DGI data group in a template for a financial IC card application according to the preset specification and set the key name of the corresponding card issuing bank master key.

[0075] 3. IC card public and private key pair: define the attribute information of the IC card public and private key pair. Generate the IC card public and private key pair according to the necessary attribute information defined in a template of a financial IC card application, where the IC card public and private key pair includes RSA key, SM2 key, ECC key, etc. The attribute information of different keys is also different. For example, define the attribute information e, id, mode and size of the RSA key, and generate the RSA key according to e, mode and size. According to the IC card public and private key pair ID defined in a template of a financial IC card application, reference the IC card public and private key pair at the corresponding position. Among them, id is the ID of the IC card public and private key pair, which is additional auxiliary information. In order to facilitate the reference of the IC card public and private key pair, id is the attribute information contained in all IC card public and private key pairs, not limited to RSA keys; mode is the mode; size is the length; e is the exponent.

[0076] 4. Generate authentication data: Define and generate authentication data information in a template of a financial IC card application, such as AFL, AIP, authentication data ID, reference to the public and private key pair of the issuing bank, data authentication code and reference to the public and private key pair of the IC card. Authentication data includes static signature data and IC card public key certificate. Among them, the IC card public key certificate is used for dynamic data authentication, and static signature data is used for static data authentication. Static signature data is generated by applying file locator, application interaction features, public and private key pair of the issuing bank, and data authentication code. Generate IC card public key certificate by IC card public and private key pair, public and private key pair of the issuing bank, AIP and auxiliary information, and auxiliary information includes card account number and expiration period. Multiple groups of IC card public key certificates can be generated according to the definition in a template of a financial IC card application. According to the authentication data ID defined in the template of a financial IC card application, the static signature data and IC card public key certificate are referenced at the position corresponding to the DGI data group. Among them, the authentication data ID is used to reference the static signature data and the IC card public key certificate; AFL is the application file locator, and the AFL value will define the DGI data grouping involved in static data authentication; AIP is the application interaction feature, and the AIP value will participate in the generation of the IC card public key certificate. If AIP is not required, do not fill it in; SAD is the data authentication code, and if SAD is not required, do not fill it in.

[0077] 5. DGI data grouping: DGI data grouping is defined according to preset specifications, where DGI is a data grouping identifier. A template for a financial IC card application defines the TLV of the tag type structure and the TLV of the original data, defines the tag and the tag value, and the tag value can be input as a fixed value or the defined issuing bank public key certificate ID, the key name of the issuing bank master key, the IC card public and private key pair ID, and the authentication data ID.

[0078] In one implementation scenario, generating personalized data may include:

[0079] Define a unique AID (application identification number) and a unique BIN (bank identification number) based on the financial IC card product profile information, for example:

[0080] <instance aid="A0000000031010" bin="12345678">

[0081] Define the issuing bank public key certificate ID (customized), enter root_cert (CA public key certificate) and val (issuing bank public key certificate issued by CA). You can define multiple sets of issuing bank public key certificates according to your needs, for example:

[0082] <issuer_cert_group>

[0083] <issuer_cert id="01" root_cert="XX" val="XXX" / >

[0084] <issuer_cert id="02" root_cert="XX" val="XXX" / >

[0085] < / issuer_cert_group>

[0086] Define the KCV, key type, and key name of the issuing bank's master key. You can define multiple sets of characteristic information of the issuing bank's master key as needed, for example:

[0087] <symm_key_group>

[0088] <symm_key KCV="8BAF47" alg="DDES" name="AC" / >

[0089] <symm_key KCV="8BAF47" alg="DDES" name="MAC" / >

[0090] <symm_key KCV="8BAF47" alg="DDES" name="ENC" / >

[0091] <symm_key KCV="8EB0E2" alg="SM4" name="AC_SM4" / >

[0092] <symm_key KCV="8EB0E2" alg="SM4" name="MAC_SM4" / >

[0093] <symm_key KCV="8EB0E2" alg="SM4" name="ENC_SM4" / >

[0094] < / symm_key_group>

[0095] Define the attribute information of the IC card public and private key pair, such as the exponent, id, mode and length of the RSA key. The IC card public and private key pair is not limited to RSA keys, but also includes SM2 keys, ECC keys, etc. Different keys have different attribute information. You can define multiple sets of IC card public and private key pairs according to your needs, for example:

[0096] <asymm_key_group>

[0097] <rsa_key e="3" id="01" mode="CRT" size="1024" / >

[0098] <sm2_key id="02" / >

[0099] < / asymm_key_group>

[0100] Define AFL (Application File Locator) and AIP (Application Interaction Feature, if AIP is not needed, leave it blank), authentication data ID, reference to the public and private key pair of the issuing bank, SAD (Data Authentication Code), reference to the public and private key pair of the IC card. You can define multiple sets of information to generate authentication data according to your needs, for example:

[0101] <authentic_data_group><authentic_data AFL="18010201" AIP="3C00" group="01" signer="01"> <sad data_auth_code="4213" / > <card_cert key="01" / >< / authentic_data>

[0102] <authentic_data AFL="18010202" AIP="3C00" group="02" signer="02"><SADdata_auth_code="4213" / ><card_cert key="02" / >< / authentic_data>

[0103] < / authentic_data_group>

[0104] The third DGI data group is defined according to the preset specification. TLVs are stored under the DGI data group, including structured TLVs and raw data TLVs. The structured TLVs and raw data TLVs each define a tag and a tag value. The tag value is an input fixed value or a predefined issuing bank public key certificate ID, a key name of the issuing bank master key, an IC card public-private key pair ID, and an authentication data ID. The tags defined under the raw data TLV include the application master account serial number, cardholder name, personal identification code, card account number, effective date, expiration date, track 1 data, and equivalent track 2 data information.

[0105] In this method, by designing an IC card application template, including: application identification number, bank identification number, issuing bank public key certificate, issuing bank master key, IC card public and private key pair, authentication data information and DGI data group, a complete description of the application personalized data of the financial IC card is achieved. Static signature data is generated by using the application file locator, issuing bank public and private key pair, application interaction characteristics and data authentication code; IC card public key certificate is generated by using IC card public and private key pair, issuing bank public and private key pair, application interaction characteristics and auxiliary information, so as to facilitate the reference of static signature data and IC card public key certificate at the corresponding position of DGI data group to realize dynamic generation of personalized instructions. By setting DGI data group, including cardholder personalized data, IC card public and private key pair, IC card public key certificate and subkey of issuing bank master key, a complete description of the application personalized data of the financial IC card is achieved.

[0106] Step S403, generating the subkey of the issuing bank master key of the target IC card, the IC card public-private key pair and the IC card public key certificate according to the target IC card application template, the cardholder personalized data and the preset key management system.

[0107] Specifically, the target IC card application template also includes an application file locator, and the above step S403 includes:

[0108] Step S4031, using the bank identification number and characteristic information of the issuing bank master key in the target IC card application template, the preset key management system is screened to obtain the issuing bank master key of the target IC card.

[0109] Step S4032: The issuing bank master key is used as the root key, and the root key is discretely used to generate a subkey of the issuing bank master key.

[0110] Step S4033, generating an IC card public and private key pair using the necessary attribute information of the IC card public and private key pair in the target IC card application template.

[0111] In one example, the corresponding card issuing bank master key is obtained in a preset key management system through the unique bank identification number and characteristic information of the card issuing bank master key in a template of a financial IC card application, and the obtained card issuing bank master key is used as a root key, and a subkey of the card issuing bank master key is generated for the card through the root key, the card account number and the application master account serial number. The IC card public and private key pair is generated according to the necessary attribute information of the IC card public and private key pair in a template of a financial IC card application.

[0112] In this method, the subkey of the issuing bank's master key and the public-private key pair of the IC card are generated according to the target IC card application template, the cardholder's personalized data and the preset key management system, so that the DGI data group can be dynamically generated using the subkey of the issuing bank's master key and the public-private key pair of the IC card, preparing for the subsequent generation of personalized instructions.

[0113] Step S404: Dynamically generate personalized instructions based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data. Figure 1 Step S104 of the illustrated embodiment will not be described in detail here.

[0114] The IC card personalized data processing method provided in this embodiment realizes the complete description of the application personalized data of the financial IC card by designing an IC card application template, including: application identification number, bank identification number, issuing bank public key certificate, issuing bank master key, IC card public and private key pair, authentication data information and DGI data group. Static signature data is generated by using application file locator, issuing bank public and private key pair, application interaction characteristics and data authentication code; IC card public key certificate is generated by using IC card public and private key pair, issuing bank public and private key pair, application interaction characteristics and auxiliary information, so as to facilitate the reference of static signature data and IC card public key certificate at the corresponding position of DGI data group to realize dynamic generation of personalized instructions. By setting DGI data group, including cardholder personalized data, IC card public and private key pair, IC card public key certificate and subkey of issuing bank master key, the complete description of the application personalized data of the financial IC card is realized. By generating the subkey of the issuing bank's master key and the IC card public-private key pair based on the target IC card application template, the cardholder's personalized data and the preset key management system, it is convenient to dynamically generate DGI data groups using the subkey of the issuing bank's master key and the IC card public-private key pair, preparing for the subsequent generation of personalized instructions.

[0115] In this embodiment, a method for processing IC card personalized data is provided, which can be used in the above-mentioned computer device. Figure 6 is a flow chart of another IC card personalized data processing method according to an embodiment of the present invention, such as Figure 6 As shown, the process includes the following steps:

[0116] Step S601, obtain the configuration file information of the target IC card and the cardholder's personalized data. Figure 4 Step S402 of the illustrated embodiment will not be described in detail here.

[0117] Step S602: According to the preset key management system and the preset IC card application template, the configuration file information is written into the preset IC card application template to obtain the target IC card application template corresponding to the target IC card. Figure 4 Step S402 of the illustrated embodiment will not be described in detail here.

[0118] Step S603: Generate the subkey of the issuing bank master key of the target IC card, the public and private key pair of the IC card, and the public key certificate of the IC card according to the target IC card application template, the cardholder's personalized data, and the preset key management system. Figure 4 Step S403 of the illustrated embodiment will not be described in detail here.

[0119] Step S604, dynamically generate personalized instructions based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data.

[0120] Specifically, the above step S604 includes:

[0121] Step S6041, parse the public key certificate of the issuing bank using the application identification number, and fill the public key certificate of the issuing bank into the tag corresponding to the public key certificate of the issuing bank in the DGI data group.

[0122] Step S6042, encrypt the personal identification code, IC card public-private key pair and subkey of the issuing bank's master key in the cardholder's personalized data to obtain the encrypted personal identification code, IC card public-private key pair and subkey of the issuing bank's master key, fill the encrypted personal identification code, IC card public-private key pair, subkey of the issuing bank's master key and the cardholder's personalized data into the label corresponding to the personal identification code, IC card public-private key pair, subkey of the issuing bank's master key and the cardholder's personalized data in the DGI data group, dynamically fill in to generate a DGI data group, and obtain a personalized instruction.

[0123] In one example, in a template of a financial IC card application, the public key certificate of the issuing bank is parsed by a unique application identification number. The label that needs to be referenced to the public key certificate information of the issuing bank is filled with corresponding data; the corresponding issuing bank master key is obtained in a preset key management system through the unique bank identification number and characteristic information of the issuing bank master key in a template of a financial IC card application, the obtained issuing bank master key is used as the root key, and the subkey of the issuing bank master key is generated for the card through the root key, the card account number and the application master account serial number; the IC card public and private key pair is generated according to the necessary attribute information of the IC card public and private key pair in a template of a financial IC card application; the IC card public key certificate is generated according to the application file locator, IC card public and private key pair, issuing bank public and private key pair, application interaction characteristics and auxiliary information in a template of a financial IC card application; finally, the personal identification code, the subkey of the issuing bank master key and the IC card public and private key pair are encrypted; then a DGI data group is dynamically generated, and the cardholder personalized data, the subkey of the issuing bank master key, the IC card public and private key pair and the IC card public key certificate are filled into the corresponding label in the DGI data group, so as to generate a complete personalized instruction.

[0124] The issuing bank's public key certificate information is referenced through the designed corresponding label and the issuing bank's public key certificate ID. The issuing bank's public key certificate information includes the issuing bank's public key certificate index, the issuing bank's public key certificate signature value, the issuing bank's public key certificate exponent and the issuing bank's public key certificate remainder; the subkey's key value and the subkey's key check value are referenced through the designed corresponding label and the issuing bank's master key key name; the IC card public and private key pair information is referenced through the designed corresponding label and the IC card public and private key pair ID and other attribute information; the IC card public key certificate signature value, the IC card public key certificate remainder and the static signature data are referenced through the designed corresponding label and authentication data ID.

[0125] In one implementation scenario, the issuing bank's public key certificate information is referenced through the designed corresponding tags and the issuing bank's public key certificate ID. The issuing bank's public key certificate information includes the issuing bank's public key certificate index, the issuing bank's public key certificate signature value, the issuing bank's public key certificate index, and the issuing bank's public key certificate remainder; the corresponding tags include the issuing bank's public key certificate index tag, the issuing bank's public key certificate signature value tag, the issuing bank's public key certificate index tag, and the issuing bank's public key certificate remainder tag; for example, the issuing bank's public key certificate signature value is referenced through the designed issuing bank's public key certificate signature value tag and the issuing bank's public key certificate ID:

[0126] <dgi id="0301">

[0127] <constructed_TLV tag="70">

[0128] <primitive_TLV tag="90">

[0129] <issuer_cert_sig_value ref="01" / >

[0130] < / primitive_TLV>

[0131] < / constructed_TLV>

[0132] < / dgi>

[0133] The key value of the subkey and the key check value of the subkey are referenced through the designed corresponding label and the key name of the issuing bank's master key; the corresponding label includes the key value label of the subkey and the key check value label of the subkey; for example, the key value of the subkey is referenced through the designed key value label of the subkey and the key name of the issuing bank's master key:

[0134] <dgi id="8000">

[0135] <symm_key_value ref="AC" / >

[0136] <symm_key_value ref="MAC" / >

[0137] <symm_key_value ref="ENC" / >

[0138] < / dgi>

[0139] For example, the key check value of the subkey is referenced through the designed key check value label of the subkey and the key name of the issuing bank's master key:

[0140] <dgi id="9000">

[0141] <kcv ref="AC" / >

[0142] <kcv ref="MAC" / >

[0143] <kcv ref="ENC" / >

[0144] < / dgi>

[0145] The attribute information of the IC card public and private key pair is referenced through the designed corresponding label and the IC card public and private key pair ID and other attribute information. The corresponding label includes the IC card public and private key pair data label; for example, the attribute information of the RSA public and private key pair is referenced through the designed RAS public and private key pair data label, RSA public and private key pair ID and RSA component:

[0146] <dgi id="8201">

[0147] <rsa_key_data component="InvQ" ref="01" / >

[0148] < / dgi>

[0149] <dgi id="8202">

[0150] <rsa_key_data component="DQ" ref="01" / >

[0151] < / dgi>

[0152] The signature value of the IC card public key certificate, the remainder of the IC card public key certificate and the static signature data are referenced through the designed corresponding tags and authentication data ID; the corresponding tags include the IC card public key certificate signature value tag, the IC card public key certificate remainder tag, and the static signature data tag. For example, the signature value of the IC card public key certificate is referenced through the designed IC card public key certificate signature value tag and authentication data ID:

[0153] <dgi id="0206">

[0154] <constructed_TLV tag="70">

[0155] <primitive_TLV tag="9F46">

[0156] <icc_cert_sig_value group="01" / >

[0157] < / primitive_TLV>

[0158] < / constructed_TLV>

[0159] < / dgi>

[0160] The IC card personalized data processing method provided in this embodiment is different from the existing static generation of DGI data groups, which contain too much redundant data. Too much redundant data will occupy a large amount of storage space, increase the time and cost of data processing, transmission and backup, and may also lead to data consistency problems, causing data errors and inconsistencies, and may also bring security risks, making data more vulnerable to attacks and destruction. The process of dynamically generating DGI data groups greatly reduces the redundancy of personalized data.

[0161] In the present embodiment, a kind of IC card personalization data processing device is also provided, and this device is used to realize the above-mentioned embodiment and preferred implementation mode, and the description that has been made is not repeated. As used below, the term "module" can realize the combination of software and / or hardware of predetermined function. Although the device described in the following embodiment is preferably realized by software, the realization of hardware, or the combination of software and hardware is also possible and conceived.

[0162] This embodiment provides an IC card personalized data processing device, such as Figure 7 As shown, including:

[0163] The data acquisition module 701 is used to acquire the configuration file information of the target IC card and the personalized data of the cardholder. Figure 1 Step S101 of the illustrated embodiment will not be described in detail here.

[0164] The template construction module 702 is used to write the configuration file information into the preset IC card application template according to the preset key management system and the preset IC card application template to obtain the target IC card application template corresponding to the target IC card. Figure 1 Step S102 of the illustrated embodiment will not be described in detail here.

[0165] The data generation module 703 is used to generate the subkey of the issuing bank master key of the target IC card, the public and private key pair of the IC card and the public key certificate of the IC card according to the target IC card application template, the cardholder's personalized data and the preset key management system. Figure 1 Step S103 of the illustrated embodiment will not be described in detail here.

[0166] The personalized instruction generation module 704 is used to dynamically generate personalized instructions based on the target IC card application template, the preset key management system, the subkey of the card issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data. The personalized instructions are used to represent the application personalized data of the target IC card. For details, please refer to Figure 1 Step S104 of the illustrated embodiment will not be described in detail here.

[0167] In some optional implementations, the preset IC card application template includes: application identification number, bank identification number, issuing bank public key certificate, issuing bank master key, IC card public and private key pair, authentication data information and DGI data grouping.

[0168] In some optional implementations, the target IC card application template further includes an application file locator, and the data generation module 703 includes:

[0169] The card issuing bank master key generation unit is used to screen the preset key management system by using the bank identification number and the characteristic information of the card issuing bank master key in the target IC card application template to obtain the card issuing bank master key of the target IC card.

[0170] The subkey generation unit of the card issuing bank master key is used to use the card issuing bank master key as a root key and to generate the subkey of the card issuing bank master key by discrete root key.

[0171] The IC card public-private key pair generation unit is used to generate the IC card public-private key pair by using the necessary attribute information of the IC card public-private key pair in the target IC card application template.

[0172] In some optional implementations, the authentication data information includes static signature data and an IC card public key certificate, and the template construction module 702 includes:

[0173] The card issuing bank public and private key pair acquisition unit is used to acquire the card issuing bank public and private key pair corresponding to the target IC card in the preset key management system.

[0174] The static signature data generation unit is used to generate static signature data using the application file locator, the public and private key pair of the issuing bank, the application interaction characteristics and the data authentication code.

[0175] The IC card public key certificate generation unit is used to generate an IC card public key certificate by using the IC card public and private key pair, the issuing bank public and private key pair, application interaction characteristics and auxiliary information.

[0176] In some optional implementations, the DGI data packet includes the cardholder's personalized data, the IC card public and private key pair, the IC card public key certificate, and a subkey of the issuing bank's master key.

[0177] In some optional implementations, the personalized instruction generation module 704 includes:

[0178] The card issuing bank public key certificate filling unit is used to parse the card issuing bank public key certificate using the application identification number, and fill the card issuing bank public key certificate into the label corresponding to the card issuing bank public key certificate in the DGI data group.

[0179] The DGI data packet dynamic generation unit is used to encrypt the personal identification code, IC card public-private key pair and subkey of the issuing bank's master key in the cardholder's personalized data to obtain the encrypted personal identification code, IC card public-private key pair and subkey of the issuing bank's master key, fill the encrypted personal identification code, IC card public-private key pair, subkey of the issuing bank's master key and the cardholder's personalized data into the label corresponding to the personal identification code, IC card public-private key pair, subkey of the issuing bank's master key and the cardholder's personalized data in the DGI data packet, dynamically fill and generate the DGI data packet to obtain the personalized instruction.

[0180] The further functional description of each of the above modules and units is the same as that of the above corresponding embodiments and will not be repeated here.

[0181] The IC card personalization data processing device in this embodiment is presented in the form of a functional unit, where the unit refers to an ASIC (Application Specific Integrated Circuit) circuit, a processor and memory that executes one or more software or fixed programs, and / or other devices that can provide the above functions.

[0182] The embodiment of the present invention also provides a computer device having the above Figure 7 The IC card personalization data processing device shown.

[0183] See also Figure 8 , Figure 8 is a schematic diagram of the structure of a computer device provided by an optional embodiment of the present invention, such as Figure 8 As shown, the computer device includes: one or more processors 10, a memory 20, and interfaces for connecting various components, including high-speed interfaces and low-speed interfaces. Various components are connected to each other using different buses for communication, and can be installed on a common mainboard or installed in other ways as needed. The processor can process the instructions executed in the computer device, including instructions stored in or on the memory to display the graphical information of the GUI on an external input / output device (such as, a display device coupled to the interface). In some optional embodiments, if necessary, multiple processors and / or multiple buses can be used together with multiple memories and multiple memories. Similarly, multiple computer devices can be connected, and each device provides some necessary operations (for example, as a server array, a group of blade servers, or a multi-processor system). Figure 8 A processor 10 is taken as an example.

[0184] The processor 10 may be a central processing unit, a network processor or a combination thereof. The processor 10 may further include a hardware chip. The hardware chip may be a dedicated integrated circuit, a programmable logic device or a combination thereof. The programmable logic device may be a complex programmable logic device, a field programmable gate array, a general purpose array logic or any combination thereof.

[0185] The memory 20 stores instructions executable by at least one processor 10, so that the at least one processor 10 executes the method shown in the above embodiment.

[0186] The memory 20 may include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function; the data storage area may store data created according to the use of the computer device, etc. In addition, the memory 20 may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some optional embodiments, the memory 20 may optionally include a memory remotely arranged relative to the processor 10, and these remote memories may be connected to the computer device via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0187] The memory 20 may include a volatile memory, such as a random access memory; the memory may also include a non-volatile memory, such as a flash memory, a hard disk or a solid state drive; the memory 20 may also include a combination of the above types of memory.

[0188] The computer device also includes an input device 30 and an output device 40. The processor 10, the memory 20, the input device 30 and the output device 40 may be connected via a bus or other means. Figure 8 The example of connecting through bus is taken in the following.

[0189] The input device 30 can receive input digital or character information, and generate key signal input related to the user settings and function control of the computer device, such as a touch screen, a keypad, a mouse, a track pad, a touch pad, an indicator bar, one or more mouse buttons, a trackball, a joystick, etc. The output device 40 may include a display device, an auxiliary lighting device (e.g., an LED) and a tactile feedback device (e.g., a vibration motor), etc. The above-mentioned display device includes but is not limited to a liquid crystal display, a light emitting diode, a display and a plasma display. In some optional embodiments, the display device may be a touch screen.

[0190] The embodiment of the present invention also provides a computer-readable storage medium. The method according to the embodiment of the present invention can be implemented in hardware, firmware, or can be implemented as a computer code that can be recorded in a storage medium, or can be implemented as a computer code that is originally stored in a remote storage medium or a non-temporary machine-readable storage medium and will be stored in a local storage medium through a network download, so that the method described herein can be stored in such software processing on a storage medium using a general-purpose computer, a dedicated processor, or programmable or dedicated hardware. Among them, the storage medium can be a magnetic disk, an optical disk, a read-only storage memory, a random access memory, a flash memory, a hard disk or a solid-state hard disk, etc.; further, the storage medium can also include a combination of the above types of memories. It can be understood that a computer, a processor, a microprocessor controller, or programmable hardware includes a storage component that can store or receive software or computer code. When the software or computer code is accessed and executed by a computer, a processor, or hardware, the method shown in the above embodiment is implemented.

[0191] A part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. Those skilled in the art should understand that the existence of the computer program instruction in a computer-readable medium includes, but is not limited to, a source file, an executable file, an installation package file, etc., and accordingly, the way in which the computer program instruction is executed by the computer includes, but is not limited to: the computer directly executes the instruction, or the computer compiles the instruction and then executes the corresponding compiled program, or the computer reads and executes the instruction, or the computer reads and installs the instruction and then executes the corresponding installed program. Here, the computer-readable medium may be any available computer-readable storage medium or communication medium accessible to the computer.

[0192] Although the embodiments of the present invention have been described in conjunction with the accompanying drawings, those skilled in the art may make various modifications and variations without departing from the spirit and scope of the present invention, and such modifications and variations are all within the scope defined by the appended claims.< / instance>

Claims

1. A method for processing personalized data of an IC card, characterized in that: The method comprises: Obtain the target IC card's profile information and cardholder's personalized data; According to the preset key management system, in combination with the preset IC card application template, the configuration file information is written into the preset IC card application template to obtain the target IC card application template corresponding to the target IC card; the preset IC card application template includes the application identification number, the bank identification number, the public key certificate of the issuing bank, the characteristic information of the master key of the issuing bank, the attribute information of the public and private key pair of the IC card, the authentication data information and the DGI data group; Generate a subkey of the issuing bank master key of the target IC card, an IC card public-private key pair and an IC card public key certificate according to the target IC card application template, the cardholder personalized data and the preset key management system; The target IC card application template also includes an application file locator, which generates the subkey of the issuing bank master key of the target IC card and the IC card public-private key pair according to the target IC card application template, the cardholder personalized data and the preset key management system, including: using the bank identification number and the characteristic information of the issuing bank master key in the target IC card application template to screen the preset key management system to obtain the issuing bank master key of the target IC card; using the issuing bank master key as the root key, discretizing the root key to generate the subkey of the issuing bank master key; using the necessary attribute information of the IC card public-private key pair in the target IC card application template to generate the IC card public-private key pair, and the application file locator is used to define the DGI data grouping participating in static data authentication; Based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public-private key pair, the IC card public key certificate and the cardholder's personalized data, a personalized instruction is dynamically generated, and the personalized instruction is used to characterize the application personalized data of the target IC card.

2. The method according to claim 1, characterized in that The authentication data information includes static signature data and the IC card public key certificate, and the authentication data information is generated by the following steps: Obtain the public and private key pair of the issuing bank corresponding to the target IC card in the preset key management system; Generate the static signature data using the application file locator, the public and private key pair of the issuing bank, the application interaction feature and the data authentication code; The IC card public key certificate is generated by using the IC card public and private key pair, the issuing bank public and private key pair, the application interaction characteristics and auxiliary information.

3. The method according to claim 2, characterized in that The DGI data packet includes the cardholder personalized data, the IC card public-private key pair, the IC card public key certificate and the subkey of the issuing bank's master key.

4. The method according to claim 3, characterized in that The generating of a personalized instruction based on the target IC card application template, the preset key management system, the subkey of the issuing bank master key, the IC card public-private key pair, the IC card public key certificate and the cardholder personalized data includes: Parsing the public key certificate of the issuing bank using the application identification number, and filling the public key certificate of the issuing bank into the tag corresponding to the public key certificate of the issuing bank in the DGI data group; The personal identification code, the public-private key pair of the IC card, and the subkey of the master key of the issuing bank in the personalized data of the cardholder are encrypted to obtain the encrypted personal identification code, the public-private key pair of the IC card, and the subkey of the master key of the issuing bank; the encrypted personal identification code, the public-private key pair of the IC card, the subkey of the master key of the issuing bank, and the personalized data of the cardholder are filled into the tag corresponding to the personal identification code, the public-private key pair of the IC card, the subkey of the master key of the issuing bank, and the personalized data of the cardholder in the DGI data group; the DGI data group is dynamically filled to obtain the personalized instruction.

5. An IC card personalization data processing device, characterized in that: The device comprises: A data acquisition module is used to acquire the configuration file information of the target IC card and the personalized data of the cardholder; A template construction module is used to write the configuration file information into the preset IC card application template according to the preset key management system and in combination with the preset IC card application template, so as to obtain the target IC card application template corresponding to the target IC card; the preset IC card application template includes the application identification number, the bank identification number, the public key certificate of the issuing bank, the characteristic information of the master key of the issuing bank, the attribute information of the public and private key pair of the IC card, the authentication data information and the DGI data group; A data generation module, used to generate a subkey of the issuing bank master key of the target IC card, an IC card public-private key pair and an IC card public key certificate according to the target IC card application template, the cardholder personalized data and the preset key management system; The target IC card application template also includes an application file locator, which generates the subkey of the issuing bank master key of the target IC card and the IC card public-private key pair according to the target IC card application template, the cardholder personalized data and the preset key management system, including: using the bank identification number and the characteristic information of the issuing bank master key in the target IC card application template to screen the preset key management system to obtain the issuing bank master key of the target IC card; using the issuing bank master key as the root key, discretizing the root key to generate the subkey of the issuing bank master key; using the necessary attribute information of the IC card public-private key pair in the target IC card application template to generate the IC card public-private key pair, and the application file locator is used to define the DGI data grouping participating in static data authentication; A personalized instruction generation module is used to dynamically generate personalized instructions based on the target IC card application template, the preset key management system, the subkey of the issuing bank's master key, the IC card public and private key pair, the IC card public key certificate and the cardholder's personalized data, wherein the personalized instructions are used to represent the application personalized data of the target IC card.

6. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are connected to communicate with each other, the memory stores computer instructions, and the processor executes the IC card personalization data processing method according to any one of claims 1 to 4 by executing the computer instructions.

7. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the IC card personalization data processing method according to any one of claims 1 to 4.

8. A computer program product, characterized in that The method comprises computer instructions for causing a computer to execute the IC card personalization data processing method according to any one of claims 1 to 4.

Images