Multifunctional NFC reader / writer and application system based on multifunctional NFC reader / writer

Abstract

The present application discloses a multifunctional NFC reader and an application system based on the multifunctional NFC reader. The application system includes: a computer without NFC function, an NFC reader, a FIDO NFC authenticator, and an NFC card; wherein one end of the NFC reader is connected to the computer without NFC function for receiving operation commands; the other end is connected to the FIDO NFC authenticator and / or NFC card based on a preset working mode, and the NFC reader includes a FIDO adapter working mode for operating the FIDO NFC authenticator; and includes a PC / SC reader working mode for operating the NFC card. Using the NFC reader of the present application, the FIDO NFC authenticator can be used on a computer without NFC function to realize user identity authentication, which expands the use scenarios of the FIDO NFC authenticator; the computer does not need to install additional software or drivers, providing a simple, convenient and secure identity authentication experience; it can also be used as a standard PC / SC NFC reader, reusing hardware resources as much as possible and exerting more functions.

Description

Technical Field

[0001] The present application relates to the technical field of NFC readers and writers, and in particular to a multifunctional NFC reader and writer and an application system based on the multifunctional NFC reader and writer. Background Art

[0002] The FIDO (Fast IDentity Online) Alliance is an open industry organization dedicated to developing and promoting safer and more convenient authentication standards. The FIDO Alliance now refers more to the FIDO2 protocol. CTAP (Client to Authenticator Protocol) is a part of FIDO2, which defines how client devices communicate with FIDO authenticators. The CTAP protocol defines three transport layer implementation technologies: USB HID, NFC, and BLE (Bluetooth Low Energy).

[0003] Among them, the FIDO authenticator in the form of an NFC card is a portable and easy-to-use security device that uses near-field communication technology to interact with NFC-enabled mobile devices or computers. It can be used directly on Android and iOS mobile devices with NFC capabilities. The PC / SC protocol is a set of standards designed to provide a unified communication interface between smart card readers and computers. PC / SC supports not only contact smart cards, but also contactless smart cards (such as NFC cards). For NFC readers and writers with the PC / SC protocol, modern operating systems can automatically handle the driver installation process, and can automatically detect and identify NFC cards to complete smart card function interaction.

[0004] However, although NFC readers and writers of the PC / SC protocol are supported as standard functions by mainstream operating systems in the field of smart card applications, the FIDO CTAP specification selects HID instead of PC / SC as the transport layer protocol based on USB. This results in the currently widely used PC / SC protocol NFC readers and writers being unable to directly operate FIDO NFC authenticators on some systems (CTAP does not support the transport layer based on the PC / SC protocol). In this case, middle-layer software must be developed to handle the protocol conversion problem, which requires additional software deployment, reducing the convenience of FIDO authenticators originally designed for driverless use and limiting their applicable scenarios. Summary of the invention

[0005] The embodiments of the present application provide a multifunctional NFC reader / writer and an application system based on the multifunctional NFC reader / writer, so as to at least solve the technical problem in the related art that a computer without NFC function is difficult to directly use a FIDO NFC authenticator without installing additional software.

[0006] According to one aspect of an embodiment of the present application, there is provided an application system based on a multifunctional NFC reader / writer, comprising:

[0007] Non-NFC-enabled computers, NFC readers / writers, FIDO NFC authenticators, and NFC cards;

[0008] Among them, one end of the NFC reader is connected to the non-NFC function computer for receiving operation commands; the other end is connected to the FIDO NFC authenticator and / or NFC card based on a preset working mode, and the NFC reader includes a FIDO adapter working mode for operating the FIDO NFC authenticator; and includes a PC / SC reader working mode for operating the NFC card.

[0009] In one embodiment, when the NFC reader / writer executes the FIDO adapter working mode, it includes:

[0010] One end of the NFC reader is connected to the computer via the CTAP USB HID protocol; the other end is connected to the FIDO NFC authenticator via the CTAPNFC protocol.

[0011] In one embodiment, when the NFC reader / writer executes the FIDO adapter working mode, the NFC reader / writer includes:

[0012] Simulate the FIDO HID authenticator module to receive the HID command packet sent by the computer and return the HID response packet to the computer;

[0013] A protocol conversion module, configured to extract data from the HID command packet, encapsulate the data in the format of an NFC command packet, obtain an NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of an HID response packet, obtain an HID response packet, and send the HID response packet to the simulated FIDO HID authenticator module;

[0014] The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

[0015] In one embodiment, when the NFC reader / writer executes the FIDO adapter working mode, it includes:

[0016] One end of the NFC reader is connected to the computer wirelessly via Bluetooth; the other end is connected to the FIDO NFC authenticator via the CTAP NFC protocol.

[0017] In one embodiment, when the NFC reader / writer executes the FIDO adapter working mode, the NFC reader / writer includes:

[0018] Simulate the FIDO BLE authenticator module to receive the CTAP BLE command packet sent by the computer and return the CTAP BLE response packet to the computer;

[0019] A protocol conversion module is used to extract data from the CTAP BLE command packet, then encapsulate the data in the format of the NFC command packet to obtain an NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, then encapsulate the data in the format of the CTAP BLE response packet to obtain a CTAP BLE response packet, and send the CTAP BLE response packet to the simulated FIDO BLE authenticator module;

[0020] The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

[0021] In one embodiment, when the NFC reader / writer executes the PC / SC reader / writer working mode, it includes:

[0022] One end of the NFC reader is connected to the computer via the USB PC / SC protocol; the other end reads the NFC card.

[0023] In one embodiment, the NFC reader includes a physical switch for switching between the FIDO adapter working mode and the PC / SC reader working mode; or,

[0024] The NFC reader / writer supports both the FIDO adapter working mode and the PC / SC reader / writer working mode.

[0025] According to one aspect of an embodiment of the present application, a multifunctional NFC reader is provided, wherein one end of the NFC reader is connected to the non-NFC function computer for receiving operation commands; the other end is connected to the FIDO NFC authenticator and / or NFC card based on a preset working mode;

[0026] The NFC reader / writer includes a FIDO adapter working mode for operating the FIDO NFC authenticator; and includes a PC / SC reader / writer working mode for operating the NFC card.

[0027] In one embodiment, when the NFC reader / writer executes the FIDO adapter working mode, it includes: one end of the NFC reader / writer is connected to the computer through the CTAP USB HID protocol; and the other end is connected to the FIDO NFC authenticator through the CTAP NFC protocol.

[0028] In one embodiment, when the NFC reader / writer executes the FIDO adapter working mode, it includes:

[0029] Simulate the FIDO HID authenticator module to receive the HID command packet sent by the computer and return the HID response packet to the computer;

[0030] A protocol conversion module, configured to extract data from the HID command packet, encapsulate the data in the format of an NFC command packet, obtain an NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of an HID response packet, obtain an HID response packet, and send the HID response packet to the simulated FIDO HID authenticator module;

[0031] The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

[0032] The technical solution provided by the embodiments of the present application may have the following beneficial effects:

[0033] The present application provides an NFC reader / writer that supports protocol conversion, which can realize user authentication using a FIDO NFC authenticator on a computer without NFC function; expands the usage scenarios of the FIDO NFC authenticator; in the FIDO adapter working mode, the computer does not need to install additional software or drivers, and the application can access the FIDO NFC authenticator without driver through the WebAuthn API; provides a simple, convenient and secure authentication experience; does not require non-standard modification of the FIDO NFC authenticator; through the combined application of the reader / writer + NFC card, the overall cost of an organization deploying an authentication solution can be reduced; and supports working mode switching, and can also be used as a standard PC / SC NFC reader / writer, reusing hardware resources as much as possible and bringing into play more functions. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The drawings described herein are used to provide a further understanding of the present application and constitute a part of the present application. The illustrative embodiments of the present application and their descriptions are used to explain the present application and do not constitute an improper limitation on the present application. In the drawings:

[0035] Figure 1 is a schematic diagram of an optional application system based on a multifunctional NFC reader / writer according to an embodiment of the present application;

[0036] Figure 2 is a schematic diagram of accessing a FIDO NFC card through an NFC reader / writer in the prior art according to an embodiment of the present application;

[0037] Figure 3 is a schematic diagram of a FIDO adapter working mode according to an embodiment of the present application;

[0038] Figure 4 is a schematic diagram of a PC / SC reader / writer working mode according to an embodiment of the present application;

[0039] Figure 5 is a schematic diagram of a FIDO adapter working mode according to an embodiment of the present application;

[0040] Figure 6 is a protocol conversion flow chart according to an embodiment of the present application;

[0041] Figure 7 is a schematic diagram of a working mode of a Bluetooth FIDO adapter according to an embodiment of the present application;

[0042] Figure 8 This is a protocol conversion flow chart according to an embodiment of the present application. DETAILED DESCRIPTION

[0043] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0044] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0045] At present, we take the example of accessing FIDO NFC card for identity authentication through NFC reader on macOS system. Since macOS10.5, it has provided support for PC / SC standard, and the system can automatically identify NFC reader of PC / SC protocol. Figure 2 As shown, for applications that call the FIDO WebAuthn API to initiate authentication requests, the FIDO NFC card cannot be discovered through the reader, because the FIDO CTAP standard supported by the macOS system does not define a transport layer based on the PC / SC protocol. In this case, the FIDO NFC card cannot complete the authentication on a computer with the macOS system installed, and users need to use FIDO authenticators with other interfaces supported by the macOS system (such as CTAP USB HID) to achieve the same function. Or an additional driver software needs to be installed to simulate the NFC reader of the PC / SC protocol into an authenticator of the CTAP USB HID protocol so that it can be recognized by CTAP.

[0046] Therefore, the disadvantages of the existing technology include: 1) it is necessary to deploy additional driver software on the computer, otherwise it cannot be used; this destroys the original design goal of FIDO, which is to be easy to use and focus on user experience, and limits its applicable scenarios; 2) after installing the special driver software, the original universal PC / SC reader becomes a dedicated FIDO authenticator and cannot be used for general smart card operations.

[0047] Based on this, an embodiment of the present application provides an external NFC reader / writer that can be identified as a FIDO USB HID authenticator on a computer that does not have NFC functionality but runs an operating system that supports the FIDO CTAP protocol. In one embodiment of the present application, the operating system communicates with the reader / writer using the CTAP USB HID protocol, and the reader / writer communicates with the FIDO NFC authenticator using the CTAP NFC protocol, and the data format conversion between the HID protocol and the NFC protocol is implemented inside the reader / writer. In addition, the reader / writer also supports being identified by the system as a general PC / SC reader / writer, and can operate standard contactless smart cards.

[0048] The application system based on the multi-functional NFC reader / writer in the embodiment of the present application is described below with reference to the accompanying drawings.

[0049] like Figure 1 As shown, an application system based on a multifunctional NFC reader / writer includes: a computer without NFC function, an NFC reader / writer, a FIDO NFC authenticator, and an NFC card.

[0050] Among them, the NFC (Near Field Communication) reader is a device that can read and write NFC tags. It is widely used in various scenarios such as access control systems, mobile payments, and identity authentication. One end of the NFC reader is connected to a non-NFC-enabled computer to receive operation commands; the other end is connected to a FIDO NFC authenticator and / or NFC card based on a preset working mode.

[0051] The NFC reader / writer of this application has at least two working modes. It includes a FIDO adapter working mode for operating a FIDO NFC authenticator; in this mode, the NFC reader / writer acts as a FIDO adapter and can be used for identity authentication and secure login. Users can log in to online services or applications through NFC devices (such as smartphones or smart watches) through biometric authentication, such as fingerprint or facial recognition. It includes a PC / SC reader / writer working mode for operating NFC cards. In this mode, the NFC reader / writer acts as a standard PC / SC smart card reader / writer and can communicate with applications that support the PC / SC framework. This mode is typically used in scenarios where smart card authentication is required.

[0052] In one embodiment, the NFC reader includes a physical switch for switching between the FIDO adapter working mode and the PC / SC reader working mode. In an exemplary scenario, a physical switch is provided on the reader, including but not limited to a button, a key, a membrane, a lever, a knob, etc., and the working mode is selected or switched through the physical switch. For example, if the user needs to perform online authentication, they can switch to the FIDO adapter mode; if they need to interact with a smart card application, such as accessing specific enterprise resources, they can switch to the PC / SC reader mode. This design provides flexibility and convenience, allowing users to select the most appropriate working mode according to specific application scenarios, while also simplifying the use and management of the device.

[0053] Optionally, the NFC reader supports both FIDO adapter working mode and PC / SC reader working mode. After the reader is connected to the computer, it is recognized by the computer as two logical devices; device 1 is a FIDO USB HID authenticator device, and device 2 is a PC / SC reader device. The two logical devices can receive system instructions in parallel, and the application software selects the device it needs to operate through the logical interface.

[0054] like Figure 3 As shown in the figure, in the FIDO adapter working mode, the reader / writer simulates the FIDO NFC authenticator (such as NFC card, NFC token) into a FIDO USB HID authenticator, so that the system can automatically discover the FIDO HID authenticator. The upper-layer FIDO application can call the FIDO authenticator function through the FIDO WebAuthn API without driver, and the actual identity authentication operation is implemented by the NFC authenticator.

[0055] In one embodiment, Figure 5 As shown, when the NFC reader executes the FIDO adapter working mode, it includes: one end of the NFC reader is connected to the computer through the CTAP USB HID protocol; the other end is connected to the FIDO NFC authenticator through the CTAP NFC protocol.

[0056] In FIDO adapter working mode, the reader needs to be recognized by the computer as a FIDO USB HID authenticator. According to the USB HID protocol in the FIDO CTAP protocol, CTAP USB HID is a custom HID device, and some descriptors have special restrictions:

[0057] 1) USB interface descriptor: requires the use of 2 BLUK endpoints;

[0058] 2)USB endpoint descriptor: bInterval byte is required to be 0x05;

[0059] This allows the computer to identify the reader as a FIDO HID authenticator. Operating systems that support FIDO CTAP, such as Windows and macOS, will automatically discover such FIDO authenticators, and applications can access the authenticator without a driver by calling the FIDO WebAuthnAPI.

[0060] like Figure 5 As shown, the NFC reader includes a simulated FIDO HID authenticator module, a protocol conversion module, and a simulated FIDONFC client module. When the application accesses the FIDO authenticator: the computer sends a CTAP HID command packet 1 to the reader through the USB channel, and the reader sends a CTAP NFC command packet 2 to the FIDO NFC authenticator (such as a FIDO NFC card) through the NFC channel; the NFC authenticator returns a CTAP NFC response packet 3 to the reader; and the reader returns a CTAP HID response packet 4 to the computer. The data payload content in command packet 1 is the same as that in command packet 2, but the packet format is different. The data payload content in response packet 3 is the same as that in response packet 4, but the packet format is different.

[0061] like Figure 6 The protocol conversion flow chart is shown in FIG. 1 , wherein the reader / writer submodule 1 is a simulated FIDO HID authenticator module, which is used to receive the HID command packet sent by the computer and return the HID response packet to the computer.

[0062] The reader / writer submodule 2 is a protocol conversion module, which is used to extract data from the HID command packet, encapsulate the data in the format of the NFC command packet, obtain the NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of the HID response packet, obtain the HID response packet, and send the HID response packet to the simulated FIDO HID authenticator module;

[0063] The reader / writer submodule 3 is a simulated FIDO NFC client module, which is used to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

[0064] It can be understood that the simulated FIDO HID authenticator module of the embodiment of the present application simulates the behavior of a FIDO HID authenticator to the computer: that is, receiving a HID command packet and returning a HID response packet. The simulated FIDO NFC client module simulates the behavior of a FIDO NFC client to the NFC authenticator: that is, sending an NFC command packet and receiving an NFC response packet. The protocol conversion module implements the protocol conversion function: a) extracting the data payload from the HID command packet and then encapsulating the data in the format of the NFC command packet; b) extracting the data payload from the NFC response packet and then encapsulating the data in the format of the HID response packet.

[0065] Based on the NFC reader / writer provided in the embodiment of the present application, the operating system discovers the (simulated) FIDO HID authenticator; the application calls the FIDO WebAuthn API in a driverless manner to access the authenticator; the computer sends a HID command to the authenticator; the authenticator returns a HID response; the application operates the authenticator to complete user identity authentication.

[0066] The reader / writer simulates the above HID authenticator behavior, and the actual identity authentication process is completed by the reader / writer operating the NFC authenticator.

[0067] The encapsulation formats of the HID command packet / response packet and NFC command packet / response packet involved in the above process refer to the HID and NFC protocol sections in the FIDOCTAP specification "fido-client-to-authenticator-protocol", which will not be discussed in detail in this application.

[0068] The CTAP protocol defines three transport layer implementation technologies: USB HID, NFC, and BLE (Bluetooth Low Energy). Referring to the technical solution in the FIDO adapter working mode, the USB channel between the reader and the computer is changed to the Bluetooth channel to obtain a new "Bluetooth FIDO adapter working mode". This mode is suitable for using a FIDO NFC authenticator on a computer that does not have NFC function but has Bluetooth function.

[0069] like Figure 7 As shown, when the NFC reader executes the FIDO adapter working mode, it includes: one end of the NFC reader is connected to the computer through the CTAP BLE protocol; that is, it is connected wirelessly through Bluetooth. The other end is connected to the FIDO NFC authenticator through the CTAP NFC protocol. The USB channel between the reader and the computer is changed to the Bluetooth channel.

[0070] like Figure 8 As shown, the specific implementation method includes:

[0071] Simulate a FIDO BLE authenticator module, that is Figure 8 The reader / writer submodule 1 in the embodiment is used to receive the CTAP BLE command packet sent by the computer and return the CTAP BLE response packet to the computer.

[0072] Protocol conversion module, that is Figure 8 The reader / writer submodule 2 in the embodiment is used to extract data from the CTAP BLE command packet, encapsulate the data in the format of the NFC command packet, obtain the NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of the CTAP BLE response packet, obtain the CTAP BLE response packet, and send the CTAP BLE response packet to the simulated FIDO BLE authenticator module.

[0073] The simulated FIDO NFC client module, that is, the reader / writer submodule 3, is used to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

[0074] Based on this application, the FIDO NFC authenticator can also be used on computers without NFC function but with Bluetooth function.

[0075] In one embodiment, when the NFC reader is in PC / SC reader mode, Figure 4 As shown, the reader / writer is a general PC / SC reader / writer, and the upper-layer application can access the smart card without a driver through the system interface.

[0076] Among them, one end of the NFC reader is connected to the computer via the USB PC / SC protocol; the other end reads the NFC card. In this working mode, the reader is recognized by the computer as a PC / SC standard reader. Its working process and technical principles belong to the prior art and are not elaborated in detail in the embodiments of this application.

[0077] Therefore, the application system of the present application supports working mode switching, and the reader can also be used as a standard PC / SC NFC reader, reusing hardware resources as much as possible and exerting more functions.

[0078] According to another aspect of the embodiments of the present application, a multifunctional NFC reader / writer is provided.

[0079] Specifically, one end of the NFC reader is connected to a non-NFC-enabled computer to receive operation commands; the other end is connected to a FIDO NFC authenticator and / or an NFC card based on a preset working mode.

[0080] Among them, the NFC reader includes a FIDO adapter working mode for operating a FIDO NFC authenticator; and includes a PC / SC reader working mode for operating an NFC card.

[0081] In one embodiment, when the NFC reader executes the FIDO adapter working mode, it includes: one end of the NFC reader is connected to the computer through the CTAP USB HID protocol; and the other end is connected to the FIDO NFC authenticator through the CTAP NFC protocol.

[0082] In one embodiment, when the NFC reader / writer implements the FIDO adapter working mode, it includes:

[0083] Simulate the FIDO HID authenticator module to receive the HID command packet sent by the computer and return the HID response packet to the computer;

[0084] The protocol conversion module is used to extract data from the HID command packet, encapsulate the data in the format of the NFC command packet, obtain the NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of the HID response packet, obtain the HID response packet, and send the HID response packet to the simulated FIDO HID authenticator module;

[0085] The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

[0086] The multifunctional NFC reader / writer provided in the embodiment of the present application can also change the USB channel between the reader / writer and the computer to a Bluetooth channel, thereby obtaining a new "Bluetooth FIDO adapter working mode". This mode is suitable for using a FIDO NFC authenticator on a computer without NFC function but with Bluetooth function.

[0087] In the embodiment of the present application, when the NFC reader / writer executes the PC / SC reader / writer working mode, the reader / writer acts as a general PC / SC reader / writer, and the upper-layer application can access the smart card without a driver through the system interface.

[0088] The NFC reader / writer provided in the embodiment of the present application has at least the following beneficial effects:

[0089] 1) By using the NFC reader / writer of the present invention, it is possible to use a FIDO NFC authenticator on a computer without NFC function to implement user identity authentication; the use scenarios of FIDO NFC authenticators (such as FIDO NFC cards) are expanded;

[0090] 2) In FIDO adapter working mode, the computer does not need to install additional software or drivers, and the application can access the FIDO NFC authenticator through the WebAuthn API without driver, providing a simple, convenient and secure identity authentication experience;

[0091] 3) No need to make non-standard modifications to FIDO NFC authenticators; the combined application of reader / writer + NFC card can reduce the overall cost of deploying identity authentication solutions for organizations;

[0092] 4) It supports working mode switching and can also be used as a standard PC / SC NFC reader / writer, reusing hardware resources as much as possible and bringing out more functions.

[0093] The technical solution of this application, in addition to having the function of a general NFC reader / writer, also supports the conversion function between the FIDO HID protocol and the FIDO NFC protocol. Operating systems such as Windows and macOS already natively support the HID protocol in the FIDO CTAP specification. With the help of the device of this application, computers installed with these systems, even if they do not have NFC functions, can directly use FIDO NFC authenticators without installing additional software, to achieve convenient and secure user identity authentication, which can significantly improve the applicable scenarios and ease of use of FIDO NFC authenticators.

[0094] It should be noted that the NFC reader / writer provided in the above embodiment and the application system embodiment based on the multifunctional NFC reader / writer belong to the same concept, and the embodiment and implementation process thereof are detailed in the application system embodiment, which will not be repeated here.

[0095] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0096] The above embodiments only express several implementation methods of the present invention, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the present invention. It should be pointed out that, for a person of ordinary skill in the art, several modifications and improvements can be made without departing from the concept of the present invention, and these all belong to the protection scope of the present invention. Therefore, the protection scope of the present invention patent shall be subject to the attached claims.

Claims

1. An application system based on a multifunctional NFC reader / writer, characterized in that: include: Non-NFC-enabled computers, NFC readers / writers, FIDO NFC authenticators, and NFC cards; One end of the NFC reader is connected to the non-NFC function computer for receiving operation commands; the other end is connected to the FIDO NFC authenticator and / or NFC card based on a preset working mode, and the NFC reader includes a FIDO adapter working mode for operating the FIDO NFC authenticator; Includes a PC / SC reader / writer operating mode for operating the NFC card.

2. The application system according to claim 1, characterized in that: In the case where the NFC reader / writer executes the FIDO adapter working mode, it includes: One end of the NFC reader is connected to the computer via the CTAP USB HID protocol; the other end is connected to the FIDO NFC authenticator via the CTAP NFC protocol.

3. The application system according to claim 1, characterized in that: In the case where the NFC reader / writer executes the FIDO adapter working mode, the NFC reader / writer includes: Simulate the FIDO HID authenticator module to receive the HID command packet sent by the computer and return the HID response packet to the computer; A protocol conversion module, configured to extract data from the HID command packet, encapsulate the data in the format of an NFC command packet, obtain an NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of an HID response packet, obtain an HID response packet, and send the HID response packet to the simulated FIDO HID authenticator module; The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

4. The application system according to claim 1, characterized in that: In the case where the NFC reader / writer executes the FIDO adapter working mode, it includes: One end of the NFC reader is connected to the computer wirelessly via Bluetooth; the other end is connected to the FIDO NFC authenticator via the CTAP NFC protocol.

5. The application system according to claim 1, characterized in that: In the case where the NFC reader / writer executes the FIDO adapter working mode, the NFC reader / writer includes: Simulate the FIDO BLE authenticator module to receive the CTAP BLE command packet sent by the computer and return the CTAP BLE response packet to the computer; A protocol conversion module is used to extract data from the CTAP BLE command packet, then encapsulate the data in the format of the NFC command packet to obtain an NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, then encapsulate the data in the format of the CTAP BLE response packet to obtain a CTAP BLE response packet, and send the CTAP BLE response packet to the simulated FIDO BLE authenticator module; The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

6. The application system according to claim 1, characterized in that: When the NFC reader / writer executes the PC / SC reader / writer working mode, it includes: One end of the NFC reader is connected to the computer via the USB PC / SC protocol; the other end reads the NFC card.

7. The application system according to claim 1, characterized in that: The NFC reader / writer includes a physical switch for switching between the FIDO adapter working mode and the PC / SC reader / writer working mode; or, The NFC reader / writer supports both the FIDO adapter working mode and the PC / SC reader / writer working mode.

8. A multifunctional NFC reader / writer, characterized in that: One end of the NFC reader is connected to the non-NFC function computer for receiving operation commands; the other end is connected to the FIDO NFC authenticator and / or NFC card based on a preset working mode; The NFC reader / writer includes a FIDO adapter working mode for operating the FIDO NFC authenticator; and includes a PC / SC reader / writer working mode for operating the NFC card.

9. The multifunctional NFC reader / writer according to claim 8, characterized in that: In the case where the NFC reader / writer executes the FIDO adapter working mode, it includes: one end of the NFC reader / writer is connected to the computer through the CTAP USB HID protocol; and the other end is connected to the FIDO NFC authenticator through the CTAP NFC protocol.

10. The multifunctional NFC reader / writer according to claim 8, characterized in that: In the case where the NFC reader / writer executes the FIDO adapter working mode, it includes: Simulate the FIDO HID authenticator module to receive the HID command packet sent by the computer and return the HID response packet to the computer; A protocol conversion module, configured to extract data from the HID command packet, encapsulate the data in the format of an NFC command packet, obtain an NFC command packet, and send the NFC command packet to the simulated FIDO NFC client module; extract data from the NFC response packet, encapsulate the data in the format of an HID response packet, obtain an HID response packet, and send the HID response packet to the simulated FIDO HID authenticator module; The FIDO NFC client module is simulated to send the received NFC command packet to the FIDO NFC authenticator, receive the NFC response packet returned by the FIDO NFC authenticator, and send the NFC response packet to the protocol conversion module.

Images