Information card protection method, circuit, terminal, and computer-readable storage medium

Abstract

The embodiment of the present application discloses an information card protection method and circuit, a terminal, and a computer-readable storage medium, which can improve the security of information card protection. The information card protection circuit is applied to the terminal, including: an information card module, a power supply module, a communication module, and a control module; the control module includes at least one switch; at least one of the power supply module and the communication module is connected to the information card module through at least one switch. The control module is used to control at least one switch to be disconnected based on the first control information sent by the server, thereby disconnecting the connection between the power supply module and at least one of the communication modules and the information card module; the first control information is used to lock the information card module; or, based on the second control information sent by the server, control at least one switch to be turned on, thereby connecting the power supply module and at least one of the communication modules to the information card module; the second control information is used to unlock the information card module.

Description

Technical Field

[0001] The present application relates to the field of terminal technology, and in particular to an information card protection method and circuit, a terminal, and a computer-readable storage medium. Background Art

[0002] An embedded Subscriber Identification Module (eSIM) is a virtual Subscriber Identification Module (SIM) that integrates a SIM card chip inside the terminal to communicate with the network, allowing the terminal to be used for calls, text messages, and Internet access without a physical SIM card.

[0003] Since the eSIM card carries the user's identity information and other personal data and is integrated into the terminal, if the terminal is lost, it will bring great risks to the user's information security. The current eSIM security protection method is to perform identity authentication on the preset interface, and lock the software when the identity authentication fails, so that the user cannot further use eSIM-related functions and network services. However, this security protection method is easy to crack and has low security. Summary of the invention

[0004] The embodiments of the present application are intended to provide an information card protection method and circuit, a terminal, and a computer-readable storage medium, which can improve the security of information card protection.

[0005] The technical solution of this application is implemented as follows:

[0006] The embodiment of the present application provides an information card protection method, which is applied to a terminal, wherein the terminal includes: an information protection circuit; the information protection circuit includes: an information card module, a power supply module, a communication module and a control module; the control module includes at least one switch; at least one of the power supply module and the communication module is connected to the information card module through the at least one switch; the method includes:

[0007] Receiving first control information sent by a server; the first control information is used to lock the information card module;

[0008] The control module controls the at least one switch to be disconnected based on the first control information, thereby disconnecting the power supply module and at least one of the communication modules from the information card module.

[0009] The embodiment of the present application provides an information card protection method, which is applied to a terminal, wherein the terminal includes: an information protection circuit; the information protection circuit includes: an information card module, a power supply module, a communication module, a control module and at least one switch; at least one of the power supply module and the communication module is connected to the information card module through the at least one switch; the method includes:

[0010] receiving second control information sent by the server; the second control information is used to unlock the information card module;

[0011] The control module controls the at least one switch to be turned on based on the second control information, thereby connecting the power supply module and at least one of the communication modules with the information card module.

[0012] The embodiment of the present application provides an information card protection circuit, comprising: an information card module, a power supply module, a communication module and a control module; the control module comprises at least one switch; at least one of the power supply module and the communication module is connected to the information card module through the at least one switch; wherein,

[0013] The control module is used to control the at least one switch to be disconnected based on the first control information sent by the server, so as to disconnect the connection between the power supply module and at least one of the communication modules and the information card module; the first control information is used to lock the information card module;

[0014] Alternatively, based on the second control information sent by the server, the at least one switch is controlled to be turned on, thereby connecting the power supply module and at least one of the communication modules and the information card module; the second control information is used to unlock the information card module.

[0015] The embodiment of the present application provides a terminal, including: the information protection circuit, memory and processor provided in the embodiment of the present application; the control module in the information protection circuit is connected to the processor or included in the processor; wherein,

[0016] The memory is used to store executable data instructions;

[0017] The processor is used to implement the information card protection method provided in the embodiment of the present application when executing the executable data instructions stored in the memory.

[0018] The embodiment of the present application provides a computer-readable storage medium storing executable instructions for causing a processor to execute and implement the information card protection method provided in the embodiment of the present application.

[0019] An embodiment of the present application provides a computer program product, including a computer program or instructions, which, when executed by a processor, implements the information card protection method provided in the embodiment of the present application.

[0020] The embodiment of the present application provides an information card protection method and circuit, a terminal, and a computer-readable storage medium, wherein at least one of the power supply module and the communication module on the terminal is connected to the information card module through at least one switch in the control module. When receiving the first control information sent by the server indicating that the information card module on the terminal is locked, the control module controls at least one switch to be disconnected, thereby disconnecting the connection between the power supply module and at least one of the communication modules and the information card module, directly cutting off the power supply and / or communication connection of the information card module, thereby greatly improving the security of information card protection through a protection solution combining software and hardware. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 A schematic diagram of the structure of the information card protection circuit provided in the embodiment of the present application Figure 1 ;

[0022] Figure 2A A second structural diagram of the information card protection circuit provided in an embodiment of the present application;

[0023] Figure 2B A schematic diagram of the structure of the information card protection circuit provided in the embodiment of the present application Figure 3 ;

[0024] Figure 2C A schematic diagram of the structure of the information card protection circuit provided in the embodiment of the present application Figure 4 ;

[0025] Figure 3 A schematic diagram of the structure of the information card protection circuit provided in the embodiment of the present application Figure 5 ;

[0026] Figure 4 A schematic diagram of the structure of the information card protection circuit provided in the embodiment of the present application Figure 6 ;

[0027] Figure 5 A schematic diagram of the structure of the information card protection circuit provided in the embodiment of the present application and a schematic diagram of the interaction between the information card protection circuit and the server;

[0028] Figure 6 A schematic diagram of the process of the information card protection method provided in the embodiment of the present application Figure 1 ;

[0029] Figure 7 A second process diagram of the information card protection method provided in an embodiment of the present application;

[0030] Figure 8 A schematic diagram of the structure of a terminal provided in an embodiment of the present application. DETAILED DESCRIPTION

[0031] In order to make the purpose, technical solutions and advantages of the present application clearer, the present application will be further described in detail below in conjunction with the accompanying drawings. The described embodiments should not be regarded as limiting the present application. All other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of this application.

[0032] In the following description, reference is made to “some embodiments”, which describe a subset of all possible embodiments, but it will be understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.

[0033] In the following description, the terms "first\second\third" involved are merely used to distinguish similar objects and do not represent a specific ordering of the objects. It can be understood that "first\second\third" can be interchanged with a specific order or sequence where permitted, so that the embodiments of the present application described here can be implemented in an order other than that illustrated or described here.

[0034] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0035] Before further describing the embodiments of the present application in detail, the nouns and terms involved in the embodiments of the present application are explained. The nouns and terms involved in the embodiments of the present application are subject to the following interpretations.

[0036] The embodiment of the present application provides an information card protection method and circuit, terminal, and computer-readable storage medium, which can improve the security of information card protection. The following describes an exemplary application of the terminal provided in the embodiment of the present application. The terminal provided in the embodiment of the present application can be implemented as a notebook computer, a tablet computer, a desktop computer, a set-top box, a mobile device (for example, a mobile phone, a portable music player, a personal digital assistant, a dedicated messaging device, a portable gaming device) and other types of user terminals, which are selected according to actual conditions and are not limited by the embodiment of the present application.

[0037] See also Figure 1 , Figure 1 1 is an optional structural diagram of the information card protection circuit provided in the embodiment of the present application. The information card protection circuit provided in the embodiment of the present application is applied to a terminal, such as Figure 1As shown, the information card protection circuit in the terminal includes: an information card module 10, a power supply module 11, a communication module 12 and a control module 13; the control module 13 includes at least one switch 131; at least one module among the power supply module 11 and the communication module 12 is connected to the information card module 10 through at least one switch 131.

[0038] In the embodiment of the present application, at least one of the power supply module 11 and the communication module 12 is connected to the information card module 10 through the control module 13. The power supply module 11 is used to provide working power for the information card module 10; the information card module 10 is used to connect the terminal to the network through the communication module 12 to obtain corresponding services. The control module 13 is set on the hardware path between at least one of the power supply module 11 and the communication module 12 and the information card module 10, and connects at least one of the power supply module 11 and the communication module 12 to the information card module 10 through at least one internal switch 131, thus providing a hardware basis for controlling the hardware path of the information card module through the control module 13 to achieve security protection.

[0039] In an embodiment of the present application, the terminal may receive the first control information sent by the server. The first control information is used to lock the information card module. For example, after the terminal is lost, the user may initiate an information card lock application to the server, and the server may send the first control information to the corresponding terminal according to the information card lock application to lock the information card module on the terminal to protect the user's information security.

[0040] In some embodiments, the above-mentioned server may be an operator server that provides network services to the terminal, and the information card module may include: eSIM or embedded Universal Integrated Circuit Card (eUICC); the power supply module may include a battery of the terminal, and the communication module may include a modem chip of the terminal, etc. The specific selection is made according to actual conditions and is not limited in the embodiments of the present application.

[0041] In the embodiment of the present application, the control module 13 is used to control at least one switch 131 to be disconnected based on the first control information sent by the server, thereby disconnecting the connection between at least one of the power supply module 11 and the communication module 12 and the information card module 10.

[0042] In the embodiment of the present application, at least one switch 131 may include a switch connected in series between the power supply module 11 and the information card module 10; and / or a switch connected in series between the communication module 12 and the information card module 10. The control module 13 controls at least one switch 131 to be disconnected based on the first control information representing the locking of the information card module 10. In this way, the hardware path between the information card module 10 and the communication module 12 and / or the power supply module 11 can be cut off, so that the information card module 10 loses power supply or communication connection, and the function of the information card module 10 is locked, thereby protecting the information in the information card module 10 from being stolen.

[0043] For example, based on Figure 1 ,like Figure 2A As shown, at least one switch may include: a switch 131A and a switch 131B; the power supply module 11 is connected to the information card module 10 via the switch 131A; and the communication module 12 is connected to the information card module 10 via the switch 131B. Figure 2B As shown, the at least one switch may include: a switch 131A; the power supply module 11 is connected to the information card module 10 via the switch 131A. Figure 2C As shown, at least one switch may include: switch 131B; the communication module 12 is connected to the information card module 10 via the switch 131B. The specific selection is made according to the actual situation, and the implementation of this application is not limited.

[0044] In some embodiments, at least one switch includes: a first switch and / or at least one second switch; wherein the first switch is used to connect the power port of the power supply module with the information card module; and at least one second switch is used to connect the communication module with at least one preset function circuit in the information card module. Wherein, at least one preset function circuit may be a necessary circuit for the communication module to implement the communication function. Exemplarily, at least one preset function circuit includes: at least one of a clock circuit, a reset circuit, and an input / output control circuit.

[0045] It is understandable that the power supply module and at least one of the communication modules on the terminal are connected to the information card module via at least one switch. When receiving the first control information sent by the server indicating that the information card module on the terminal is locked, the control module controls at least one switch to be disconnected, thereby disconnecting the connection between the power supply module and at least one of the communication modules and the information card module, directly cutting off the power supply and / or communication connection of the information card module, thereby greatly improving the security of information card protection through a protection solution combining software and hardware.

[0046] In some embodiments, in order to further improve the security of information card protection, the server may encrypt the locking instruction sent to the terminal, obtain the encrypted locking instruction and send it to the terminal as the first control information. Figure 1 ,like Figure 3 As shown, the control module 13 may further include a verification module 132. The verification module 12 is used to decrypt the encrypted locking instruction and determine the locking instruction by decryption. In this way, the control module 13 may control at least one switch 131 to be disconnected according to the locking instruction to achieve function locking and information protection of the information card module 10.

[0047] In some embodiments, the verification module 132 is also used to decrypt the encrypted locking instruction, use the decrypted information as the first decrypted information, verify the first decrypted information, and determine the locking instruction by parsing the first decrypted information if the verification is successful.

[0048] Exemplarily, the locking instructions of the server can be encrypted by a private key pre-negotiated between the terminal and the server to obtain the first control information. When the terminal decrypts the first control information by the public key corresponding to the private key and verifies successfully, it indicates that the first decrypted information is a legitimate instruction issued by the server. The control module 13 parses the first decrypted information to obtain the locking instruction, and controls the disconnection of at least one switch 131 according to the locking instruction to achieve functional locking of the information card module 10.

[0049] It can be understood that in the embodiment of the present application, by further encrypting, decrypting and verifying the locking instruction, the legitimacy of the locking instruction is guaranteed, thereby further improving the security of the information card protection.

[0050] In some embodiments, based on Figure 1 or Figure 3 Information card protection circuit, such as Figure 4 As shown, the control module 13 may further include: a fuse 133. The control module 13 is connected to the information card module 10 via the fuse 133;

[0051] The control module 13 is also used to blow the fuse 133 when the encrypted locking instruction fails to be decrypted or the first decrypted information verification fails, so that at least one of the power supply module 11 and the communication module 12 and the information card module 10 are permanently disconnected and cannot be restored.

[0052] It can be understood that the embodiment of the present application configures a fuse in the control module. When an illegal instruction from the outside wants to control at least one switch, the fuse is blown to permanently cut off the power supply and / or communication connection of the information card module 10, thereby greatly reducing the value of the mobile terminal after being stolen and increasing the possibility of recovering the mobile terminal after it is lost or stolen, thereby improving security and having great practical value.

[0053] In some embodiments, based on Figures 1 to 4The terminal may also receive second control information sent by the server, wherein the second control information is used to unlock the information card module 10. For example, when the lost terminal is found by the user, the user may initiate an information card unlocking application to the server, and the server may send the second control information to the corresponding terminal based on the information card unlocking application to unlock the information card module on the terminal and restore the function of the information card module.

[0054] In the embodiment of the present application, the control module 13 can control at least one switch 131 to be turned on based on the second control information sent by the server, so as to connect at least one module among the power supply module 11 and the communication module 12 and the information card module 10 .

[0055] In the embodiment of the present application, at least one switch 131 in the control module 13 can be implemented by a repeatable switch. When at least one switch 131 is disconnected and at least one of the power supply module 11 and the communication module 12 is disconnected from the information card module 10, the control module 13 can turn on at least one switch 131 based on the second control information to restore the power supply and / or communication connection of the information card module 10.

[0056] It can be understood that at least one of the power supply module and the communication module on the terminal is connected to the information card module through at least one switch in the control module. When receiving the second control information sent by the server indicating that the information card module is unlocked, the control module controls at least one switch to be turned on, thereby turning on the connection between at least one of the power supply module and the communication module and the information card module, restoring the power supply and / or communication connection of the information card module, and realizing the recovery mechanism of the information card protection lock. The security of the information card protection is greatly improved through the protection scheme combining software and hardware.

[0057] In some embodiments, the server may encrypt the unlock instruction sent to the terminal, obtain the encrypted unlock instruction and send it to the terminal as the second control information. The verification module 132 in the control module 13 may decrypt the encrypted unlock instruction and determine the unlock instruction by decryption. In this way, the control module 13 may control at least one switch 131 to be turned on according to the unlock instruction to unlock the information card module 10.

[0058] In some embodiments, the verification module 132 is also used to decrypt the encrypted unlocking instruction, use the decrypted information as the second decrypted information, verify the second decrypted information, and determine the unlocking instruction by parsing the second decrypted information when the verification is successful.

[0059] Exemplarily, the digital signature of the second decryption information can be verified. If the verification is successful, it means that the second decryption information is a legitimate instruction issued by the server. The control module 13 parses the second decryption information to obtain an unlocking instruction to control the disconnection of at least one switch 131 according to the unlocking instruction to unlock the information card module 10.

[0060] It can be understood that in the embodiment of the present application, by further encrypting, decrypting and verifying the unlocking instruction, the legitimacy of the unlocking instruction is guaranteed, thereby further improving the security of the information card protection.

[0061] In some embodiments, the control module 13 is also used to blow the fuse 133 when the decryption of the encrypted unlocking instruction fails or the verification of the second decryption information fails, so that at least one of the power supply module 11 and the communication module 12 and the information card module 10 are permanently placed in a disconnected state and cannot be restored.

[0062] Exemplarily, the communication module may be a Modem chip 201 in the terminal, and the information card module may be an eUICC 202 in the terminal; the structure of the information card protection circuit of the embodiment of the present application and the schematic diagram of the interaction between the information card protection circuit and the server may be as shown in FIG. Figure 5 As shown. After the terminal is lost, the server 10 sends a card lock instruction (equivalent to the first control information) to the terminal according to the user's card lock application. The terminal decrypts and verifies the card lock instruction through the verification module 2031 in the control module 203. When the decryption is successful and the verification is passed, the control module 203 controls the switch 2031 and the switch 2032 to be disconnected, thereby cutting off the hardware path between the eUICC and the Modem chip and the power supply module 204, and cutting off the mobile terminal's reading and loading of the eSIM profile to achieve the card lock function. When the terminal is retrieved by the user, the server can send an unlock instruction (equivalent to the second control information) to the terminal. The terminal decrypts and verifies the card lock instruction through the verification module 2031 in the control module 203. When the decryption is successful and the verification is passed, the control module 203 controls the switch 2031 and the switch 2032 to be turned on, thereby restoring the connection between the eUICC and the power supply module 204 and the Modem chip 201 to achieve unlocking. The switch 2031 and the switch 2032 may be implemented by a single-pole switch, the switch 2031 is connected in series between the eUICC 202 and the power supply module 204, and the switch 2032 is connected in series between the eUICC 202 and the Modem chip 201. The control module 203 has a fuse design inside, and when illegal data from the outside rewrites the switch, the verification module 2031 will determine that the decryption fails or the verification fails, and the fuse 2033 will be blown, and the eUICC 202 will be permanently placed in a cut-off state and cannot be restored.

[0063] It is understandable that users can remotely control the locking and unlocking of the eUICC module of the terminal through the server, which is highly secure and reusable. In addition, the fuse mechanism for illegal instructions can greatly reduce the value of the mobile terminal after it is stolen and increase the possibility of recovering the mobile terminal after it is lost or stolen, which has great practical value.

[0064] The present application embodiment provides an information card protection method, which is applied to a terminal. The terminal includes: Figure 1-Figure 5 The information protection circuit shown in any one of the items. That is, the information protection circuit at least includes: an information card module, a power supply module, a communication module and a control module; the control module includes at least one switch; at least one of the power supply module and the communication module is connected to the information card module through at least one switch. The information card protection method of the embodiment of the present application can be implemented by S101-S102, such as Figure 6 As shown below:

[0065] S101. Receive first control information sent by a server.

[0066] In the embodiment of the present application, the first control information is used to lock the information card module.

[0067] S102: Control at least one switch to be disconnected based on first control information through a control module, thereby disconnecting the power supply module and at least one of the communication modules from the information card module.

[0068] In the embodiment of the present application, the terminal controls at least one switch to be disconnected based on the received first information through the control module to cut off the connection between the power supply module and at least one of the communication modules and the information card module. Here, the description of the process of the control module controlling at least one switch to be disconnected based on the first control information is consistent with the description of the control module 13 in the above circuit embodiment, and is not repeated here.

[0069] In some embodiments, the first control information includes: an encrypted locking instruction; and controlling the at least one switch to be disconnected based on the first control information by the control module includes:

[0070] The encrypted locking instruction is decrypted by the control module to determine the locking instruction; and according to the locking instruction, the at least one switch is controlled to be disconnected.

[0071] In some embodiments, decrypting the encrypted locking instruction to determine the locking instruction includes:

[0072] The encrypted locking instruction is decrypted to determine first decryption information, the first decryption information is verified, and when the verification is successful, the locking instruction is determined by parsing the first decryption information.

[0073] In some embodiments, the control module and the information card module are connected via a fuse; the method further includes:

[0074] In case the decryption of the encrypted locking instruction fails and / or the verification of the first decryption information fails, the fuse is blown by the control module.

[0075] In some embodiments, the at least one switch includes: a first switch and / or at least one second switch; wherein the first switch is used to connect the power port of the power supply module with the information card module; and the at least one second switch is used to connect the communication module with at least one preset functional circuit in the information card module.

[0076] In some embodiments, the at least one preset function circuit includes: at least one of a clock circuit, a reset circuit, and an input / output control circuit.

[0077] In some embodiments, based on the information card protection circuit provided in the embodiment of the present application, the information card protection method applied to the terminal provided in the embodiment of the present application may further include S201-S202, such as Figure 7 As shown below:

[0078] S201. Receive second control information sent by a server.

[0079] In the embodiment of the present application, the second control information is used to unlock the information card module.

[0080] S202: Control at least one switch to be turned on through the control module based on the second control information, so as to connect the power supply module and at least one of the communication modules and the information card module.

[0081] In the embodiment of the present application, the terminal controls at least one switch to be turned on based on the received second information through the control module to restore the connection between the power supply module and at least one of the communication modules and the information card module. Here, the description of the process of the control module controlling at least one switch to be turned on based on the second control information is consistent with the description of the control module 13 in the above circuit embodiment, and will not be repeated here.

[0082] In some embodiments, the second control information includes: an encrypted unlocking instruction; based on the second control information, controlling at least one switch to be turned on through a control module includes:

[0083] The encrypted unlocking instruction is decrypted by the control module to determine the unlocking instruction; and at least one switch is controlled to be turned on according to the unlocking instruction.

[0084] In some embodiments, decrypting the encrypted unlocking instruction to determine the unlocking instruction includes:

[0085] The encrypted unlocking instruction is decrypted to determine the second decryption information, the second decryption information is verified, and when the verification is successful, the unlocking instruction is determined by parsing the second decryption information.

[0086] In some embodiments, the control module and the information card module are connected via a fuse; the method further comprises:

[0087] In case the decryption of the encrypted unlocking instruction fails and / or the verification of the second decryption information fails, the fuse is blown by the control module.

[0088] In some embodiments, the at least one switch includes: a first switch and / or at least one second switch; wherein,

[0089] The first switch is used to connect the power port of the power supply module with the information card module; and the at least one second switch is used to connect the communication module with at least one preset functional circuit in the information card module.

[0090] In some embodiments, at least one preset function circuit includes at least one of a clock circuit, a reset circuit, and an input / output control circuit.

[0091] It should be noted that the description of the above method embodiment is similar to the description of the above circuit embodiment, and has similar beneficial effects as the circuit embodiment. For technical details not disclosed in the method embodiment of the present application, please refer to the description of the circuit embodiment of the present application for understanding.

[0092] In some embodiments, the present application also provides a terminal, Figure 8 This is an optional structural diagram of a terminal provided in an embodiment of the present application. Figure 8 As shown, the terminal 2 includes: an information protection circuit 21, a memory 22 and a processor 23 provided in the embodiment of the present application. Among them, the control module in the information protection circuit 21 is connected to the processor 23, or is included in the processor 23; the memory 22 and the processor 23 are connected through a communication bus 24; the memory 22 is used to store executable instructions; the processor 23 is used to execute the executable instructions stored in the memory 22 to implement the information card protection method provided in the embodiment of the present application.

[0093] The present application embodiment provides a computer-readable storage medium storing executable instructions, wherein the executable instructions are stored. When the executable instructions are executed by a processor, the processor will be caused to execute the method provided by the present application embodiment, for example, Figure 6 or Figure 7 The method shown.

[0094] In some embodiments, the computer-readable storage medium may be a memory such as FRAM, ROM, PROM, EPROM, EEPROM, flash memory, magnetic surface storage, optical disk, or CD-ROM; or it may be various devices including one or any combination of the above memories.

[0095] In some embodiments, executable instructions may be in the form of a program, software, software module, script or code, written in any form of programming language (including compiled or interpreted languages, or declarative or procedural languages), and may be deployed in any form, including as a stand-alone program or as a module, component, subroutine or other unit suitable for use in a computing environment.

[0096] As an example, executable instructions may, but need not, correspond to a file in a file system, may be stored as part of a file that stores other programs or data, such as in one or more scripts in a HyperText Markup Language (HTML) document, in a single file dedicated to the program in question, or in multiple coordinated files (e.g., files storing one or more modules, subroutines, or code portions).

[0097] By way of example, executable instructions may be deployed to be executed on one computing device, or on multiple computing devices located at one site, or on multiple computing devices distributed across multiple sites and interconnected by a communication network.

[0098] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of hardware embodiments, software embodiments, or embodiments in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) that contain computer-usable program code.

[0099] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1A device that provides the functions specified in a block or multiple blocks.

[0100] These computer program instructions may also be stored in a computer readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer readable memory produce an article of manufacture including an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0101] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0102] The above is only a preferred embodiment of the present application and is not intended to limit the protection scope of the present application. Any modifications, equivalent substitutions and improvements made within the spirit and scope of the present application are included in the protection scope of the present application.

Claims

1. An information card protection method, applied to a terminal, characterized in that: The terminal comprises: an information protection circuit; the information protection circuit comprises: an information card module, a power supply module, a communication module and a control module; the control module comprises at least one switch; at least one of the power supply module and the communication module is connected to the information card module via the at least one switch; the method comprises: Receiving first control information sent by a server; the first control information is used to lock the information card module; The control module controls the at least one switch to be disconnected based on the first control information, thereby disconnecting the power supply module and at least one of the communication modules from the information card module.

2. The method according to claim 1, characterized in that The first control information includes: an encrypted locking instruction; the controlling the at least one switch to be disconnected based on the first control information by the control module includes: Decrypting the encrypted locking instruction through the control module to determine the locking instruction; According to the locking instruction, the at least one switch is controlled to be disconnected.

3. The method according to claim 2, characterized in that The decrypting the encrypted locking instruction to determine the locking instruction includes: The encrypted locking instruction is decrypted to determine first decryption information, the first decryption information is verified, and when the verification is successful, the locking instruction is determined by parsing the first decryption information.

4. The method according to claim 2 or 3, characterized in that: The control module and the information card module are connected via a fuse; the method further includes: In case the decryption of the encrypted locking instruction fails and / or the verification of the first decryption information fails, the fuse is blown by the control module.

5. The method according to any one of claims 1 to 3, characterized in that: The at least one switch comprises: a first switch and / or at least one second switch; wherein, The first switch is used to connect the power port of the power supply module and the information card module; the at least one second switch is used to connect the communication module and at least one preset functional circuit in the information card module.

6. The method according to claim 5, characterized in that The at least one preset function circuit includes: at least one of a clock circuit, a reset circuit, and an input / output control circuit.

7. An information card protection method, applied to a terminal, characterized in that: The terminal comprises: an information protection circuit; the information protection circuit comprises: an information card module, a power supply module, a communication module, a control module and at least one switch; at least one of the power supply module and the communication module is connected to the information card module via the at least one switch; the method comprises: receiving second control information sent by the server; the second control information is used to unlock the information card module; The control module controls the at least one switch to be turned on based on the second control information, thereby connecting the power supply module and at least one of the communication modules with the information card module.

8. The method according to claim 7, characterized in that The second control information includes: an encrypted unlocking instruction; the controlling the at least one switch to be turned on based on the second control information by the control module includes: Decrypting the encrypted unlocking instruction through the control module to determine the unlocking instruction; According to the unlocking instruction, the at least one switch is controlled to be turned on.

9. The method according to claim 8, characterized in that The decrypting the encrypted unlocking instruction to determine the unlocking instruction includes: The encrypted unlocking instruction is decrypted to determine second decryption information, the second decryption information is verified, and when the verification is successful, the unlocking instruction is determined by parsing the second decryption information.

10. The method according to claim 8 or 9, characterized in that: The control module and the information card module are connected via a fuse; the method further includes: In case the decryption of the encrypted unlocking instruction fails and / or the verification of the second decryption information fails, the fuse is blown by the control module.

11. The method according to any one of claims 7 to 9, characterized in that: The at least one switch comprises: a first switch and / or at least one second switch; wherein, The first switch is used to connect the power port of the power supply module and the information card module; the at least one second switch is used to connect the communication module and at least one preset functional circuit in the information card module.

12. The method according to claim 11, characterized in that The at least one preset function circuit includes: at least one of a clock circuit, a reset circuit, and an input / output control circuit.

13. An information card protection circuit, characterized in that: include: An information card module, a power supply module, a communication module and a control module; the control module includes at least one switch; at least one of the power supply module and the communication module is connected to the information card module through the at least one switch; wherein, The control module is used to control the at least one switch to be disconnected based on the first control information sent by the server, so as to disconnect the connection between the power supply module and at least one of the communication modules and the information card module; the first control information is used to lock the information card module; Alternatively, based on the second control information sent by the server, the at least one switch is controlled to be turned on, thereby connecting the power supply module and at least one of the communication modules and the information card module; the second control information is used to unlock the information card module.

14. The circuit according to claim 13, characterized in that The first control information includes: an encrypted locking instruction; the control module also includes: a verification module; the second control information includes: an encrypted unlocking instruction; The verification module is further used to decrypt the encrypted locking instruction to determine the locking instruction; The control module is further used to control the at least one switch to be disconnected according to the locking instruction; or, The verification module is further used to decrypt the encrypted unlocking instruction to determine the unlocking instruction; The control module is further configured to control the at least one switch to be turned on according to the unlocking instruction.

15. The circuit according to claim 14, characterized in that The verification module is further used to decrypt the encrypted locking instruction, determine first decryption information, verify the first decryption information, and determine the locking instruction by parsing the first decryption information if the verification is successful; or, The encrypted unlocking instruction is decrypted to determine second decryption information, the second decryption information is verified, and when the verification is successful, the unlocking instruction is determined by parsing the second decryption information.

16. The circuit according to claim 14 or 15, characterized in that The control module and the information card module are connected via a fuse; The control module is further configured to blow the fuse when decryption of the encrypted locking instruction or the encrypted unlocking instruction fails, or verification of the first decryption information or the second decryption information fails.

17. The circuit according to any one of claims 13 to 15, characterized in that: The at least one switch comprises: a first switch and / or at least one second switch; wherein, The first switch is used to connect the power port of the power supply module and the information card module; the at least one second switch is used to connect the communication module and at least one preset functional circuit in the information card module.

18. The circuit according to claim 17, characterized in that The at least one preset function circuit includes: at least one of a clock circuit, a reset circuit, and an input / output control circuit.

19. A terminal, characterized in that: include: The information protection circuit, memory and processor as described in any one of claims 13 to 18; The control module in the information protection circuit is connected to the processor or included in the processor; wherein, The memory is used to store executable data instructions; The processor is used to implement the information card protection method described in any one of claims 1 to 6 when executing the executable data instructions stored in the memory; or implement the information card protection method described in any one of claims 7 to 12.

20. A computer-readable storage medium, characterized in that: Executable instructions are stored, which are used to cause the processor to execute and implement the information card protection method described in any one of claims 1 to 6; or implement the information card protection method described in any one of claims 7 to 12.

Images