Data transmission method, device and equipment, computer storage medium and computer program product

Abstract

The embodiment of the invention discloses a data transmission method, and the method comprises the steps: carrying out the processing of to-be-transmitted data through a user identification card based on a target independent transmission protocol BIP, and obtaining first data; wherein the target BIP defines security information for the data; sending the first data to a first server corresponding to the user identification card through a target data channel; wherein the first data comprises channel data representing security information of the data; receiving second data sent by the first server through the target data channel, and processing the second data through the user identification card based on the target BIP protocol; wherein the second data is obtained after the first server packages a return result for the first data based on the target BIP protocol. The embodiment of the invention further discloses a data transmission device and equipment, a computer readable storage medium and a computer program product.

Description

TECHNICAL FIELD

[0001] The present application relates to the data transmission technology in the field of communication, and in particular to a data transmission method, device, equipment, computer storage medium and computer program product. BACKGROUND

[0002] Bearer Independent Protocol (BIP) is a data interaction protocol defined by an international standard for a Subscriber Identity Module (SIM) card / Universal Integrated Circuit Card (UICC) / Embedded Universal Intelligent Card (eUICC) card (referred to as a card) and an entity outside the card. Through the protocol, the card can implement data interaction with a remote entity based on an IP channel, thereby providing a safe, high-speed and reliable data channel for a service. Taking Random Access Memory (RAM) remote application management as an example, a BIP protocol interaction process is that a BIP platform sends a data short message to the card, triggers the card to establish a BIP connection, then the card and the BIP platform establish a Transport Layer Security (TLS) connection based on a Transmission Control Protocol / Internet Protocol (TCP / IP) transport layer, and finally a Hypertext Transfer Protocol secure (HTTPs) secure data channel is established based on the connection, and the card and the BIP platform perform data interaction.

[0003] At present, there are mainly two types of super SIM cards and ordinary cards; the super SIM card has implemented the BIP-HTTPs protocol, and the ordinary card cannot support the BIP-HTTPs protocol due to resource limitations. Based on the cost performance, the ordinary card is usually used in the Internet of Things field in the related technology. However, the BIP-HTTPs protocol requires the SIM card chip to have more RAM and FLASH resources, and the ordinary card cannot support the BIP-HTTPs protocol due to resource limitations, which leads to that the ordinary card cannot use the secure data channel to perform data interaction with the BIP platform, and affects the normal operation of the service. SUMMARY

[0004] To address the aforementioned technical problems, embodiments of this application provide a data transmission method, apparatus, device, computer storage medium, and computer program product, which solves the problem in related technologies that ordinary cards cannot use secure data channels to interact with the BIP platform, thus ensuring the normal operation of services.

[0005] To achieve the above objectives, the technical solution of this application embodiment is implemented as follows:

[0006] A data transmission method, the method comprising:

[0007] Based on the Target Independent Transport Protocol (BIP), the data to be transmitted is processed through the user identification card to obtain the first data; wherein, the Target BIP defines the security information for the data;

[0008] The first data is sent to a first server corresponding to the user identification card via a target data channel; wherein the first data includes channel data representing security information of the data;

[0009] The second data sent by the first server is received through the target data channel, and the second data is processed by the user identification card based on the target BIP protocol; wherein, the second data is obtained by the first server encapsulating the return result of the first data based on the target BIP protocol.

[0010] The method in the above scheme further includes:

[0011] Receive the establishment request sent by the first server to establish a communication channel;

[0012] In response to the establishment request, a target data channel is established between the first server and the user identification card based on the target BIP protocol.

[0013] In the above scheme, the channel data includes one or more of the following:

[0014] The identification information of the user identification card;

[0015] Security message data.

[0016] In the above scheme, the security message data includes one or more of the following:

[0017] Secure application data for data security;

[0018] Command data.

[0019] In the above scheme, the security application data includes one or more of the following:

[0020] Security information used to protect data;

[0021] Cascading information used to indicate the relationships between data.

[0022] A data transmission method, the method comprising:

[0023] The system receives first data sent by a user identification card through a terminal; wherein the first data includes channel data representing security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol;

[0024] The first data is parsed to obtain business data, and the business data is sent to the second server;

[0025] Receive the processing result of the business data sent by the second server;

[0026] The processing result and other data are processed based on the target BIP protocol to obtain second data, and the second data is sent to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card; wherein, the other data is the data in the first data other than the service data.

[0027] In the above scheme, sending the second data to the terminal through the target data channel includes:

[0028] Each of the second data is sent to the terminal through the target data channel; wherein each of the second data includes cascading information for indicating the association relationship of multiple second data.

[0029] In the above scheme, the channel data includes one or more of the following:

[0030] The identification information of the user identification card;

[0031] Security message data.

[0032] In the above scheme, the security message data includes one or more of the following:

[0033] Secure application data for data security;

[0034] Command data.

[0035] In the above scheme, the security application data includes one or more of the following:

[0036] Security information used to protect data;

[0037] Cascading information used to indicate the relationships between data.

[0038] A first data transmission device, comprising:

[0039] The first processing unit is used to process the data to be transmitted through the user identification card based on the target independent transport protocol BIP to obtain the first data; wherein, the target BIP defines security information for the data;

[0040] The first transmitting unit is configured to transmit the first data to a server corresponding to the user identification card via a target data channel; wherein the first data includes channel data representing security information of the data;

[0041] The first receiving unit is configured to receive second data sent by the server through the target data channel, and process the second data based on the target BIP protocol via the user identification card; wherein, the second data is generated by the server based on...

[0042] A second data transmission device, comprising:

[0043] The second receiving unit is used to receive first data sent by the user identification card through the terminal; wherein, the first data includes channel data representing security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol;

[0044] The second sending unit is used to parse the first data to obtain service data and send the service data to the second server;

[0045] The second receiving unit is further configured to receive the processing result of the business data sent by the second server;

[0046] The second processing unit is configured to process the processing result and other data based on the target BIP protocol to obtain second data, and send the second data to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card; wherein, the other data is the data in the first data other than the service data.

[0047] A terminal, the terminal comprising: a first processor, a first memory, and a first communication bus;

[0048] The first communication bus is used to establish a communication connection between the first processor and the first memory;

[0049] The first processor is used to execute the data transfer program in the first memory to implement the steps of the data transfer method described above.

[0050] A first server, the first server comprising: a second processor, a second memory, and a second communication bus;

[0051] The second communication bus is used to establish a communication connection between the second processor and the second memory;

[0052] The second processor is used to execute the data transfer program in the second memory to implement the steps of the data transfer method described above.

[0053] A computer-readable storage medium storing one or more programs that can be executed by one or more processors to implement the steps of the above-described data transmission method.

[0054] A computer program product comprising a computer program that, when executed by a processor, implements the above-described method.

[0055] The data transmission method, apparatus, device, computer storage medium, and computer program product provided in the embodiments of this application are based on the Target Independent Transmission Protocol (BIP). First data is obtained by processing data to be transmitted through a user identification card (UIC). The target BIP defines security information for the data. The first data, including channel data representing the security information, is sent to a first server corresponding to the UIC via a target data channel. Second data sent by the first server is received through the target data channel. The UIC processes the second data based on the target BIP protocol. The second data is obtained by encapsulating the return result of the first data based on the target BIP protocol. Thus, a regular UIC in the terminal can transmit its own data to the corresponding first server (i.e., the BIP platform) based on the target BIP that defines the security information for the data. It can also transmit service data within the data to the corresponding second server (i.e., the service platform) and transmit the processing result of the service data processed by the second server back to the regular UIC. This enables data transmission between the service platform, the BIP platform, and the regular UIC in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use secure data channels to interact with the BIP platform, ensuring the normal operation of services. Attached Figure Description

[0056] Figure 1 A schematic flowchart illustrating a data transmission method provided for an embodiment of this application;

[0057] Figure 2 A schematic diagram of the layered architecture of a terminal, BIP platform, and user identification card corresponding to a data transmission method provided in an embodiment of this application;

[0058] Figure 3 A flowchart illustrating another data transmission method provided for an embodiment of this application;

[0059] Figure 4 A schematic diagram of the structure of a first data transmission device provided for an embodiment of this application;

[0060] Figure 5 A schematic diagram of the structure of a second data transmission device provided for an embodiment of this application;

[0061] Figure 6 A schematic diagram of the structure of a terminal provided for an embodiment of this application;

[0062] Figure 7 This is a schematic diagram of the structure of a first server provided for an embodiment of this application. Detailed Implementation

[0063] The technical solutions in the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings.

[0064] It should be understood that the phrases "embodiments of this application" or "foreign embodiments" throughout the specification mean that a specific feature, structure, or characteristic related to an embodiment is included in at least one embodiment of this application. Therefore, "embodiments of this application" or "in the foreign embodiments" appearing throughout the specification do not necessarily refer to the same embodiment. Furthermore, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments. In the various embodiments of this application, the sequence numbers of the above-described processes do not imply a sequential order of execution; the execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of this application. The sequence numbers of the above-described embodiments are merely descriptive and do not represent the superiority or inferiority of the embodiments.

[0065] Unless otherwise specified, any step in the embodiments of this application performed by the electronic device may be executed by the processor of the electronic device. It is also worth noting that the embodiments of this application do not limit the order in which the electronic device performs the following steps. Furthermore, the methods used to process data in different embodiments may be the same or different methods. It should also be noted that any step in the embodiments of this application can be executed independently by the electronic device; that is, when the electronic device performs any step in the following embodiments, it may not depend on the execution of other steps.

[0066] It should be understood that the specific embodiments described herein are for illustrative purposes only and are not intended to limit the scope of this application.

[0067] This application provides a data transmission method, which can be applied to a terminal, as shown below. Figure 1 As shown, the method may include the following steps:

[0068] Step 101: Based on the target bearer independent protocol BIP, the data to be transmitted is processed through the user identification card to obtain the first data.

[0069] The target BIP defines security information for the data.

[0070] Specifically, the target BIP is a lightweight BIP protocol, that is, a new type of BIP protocol, and the target BIP protocol defines security information about the data to be transmitted; the user identification card is a mobile user identification card; in one feasible implementation, the user identification card may include a SIM card, UICC, eUICC, etc. It should be noted that the layering position of the lightweight BIP protocol in this application can be as follows: Figure 2 As shown in the image.

[0071] In this embodiment of the application, the data to be transmitted may be the data to be transmitted in the user identification card of the terminal; the first data may be obtained by the user identification card encapsulating the data to be transmitted based on the target BIP protocol.

[0072] Step 102: Send the first data to the first server corresponding to the user identification card through the target data channel.

[0073] The first data includes channel data that represents the security information of the data.

[0074] Specifically, the target data channel is the data transmission channel between the user identification card in the terminal and the first server; the first server can refer to the BIP platform corresponding to the user identification card.

[0075] It should be noted that the user identification card can encapsulate channel data in the first data and send the first data to the terminal's baseband chip through the Send Data command. Then, the terminal's baseband chip sends the encapsulated first data to the BIP platform through the target data channel.

[0076] Step 103: Receive the second data sent by the first server through the target data channel, and process the second data based on the target BIP protocol through the user identification card.

[0077] The second data is obtained by the first server encapsulating the return result of the first data based on the target BIP protocol. Specifically, the return result of the first data is sent from the second server to the first server; and this return result is obtained by the second server after processing the business data in the first data. The second server can refer to a business platform that needs to process business data and communicates with the BIP platform.

[0078] It should be noted that after the BIP platform receives the return result sent by the business platform, it can encapsulate the return result based on the target BIP protocol to obtain the second data, and send the second data to the terminal through the target data channel; then, the terminal transmits the received second data to the user identification card through the RECEIVE DATA command.

[0079] In other embodiments of this application, the method may further include:

[0080] Receive the establishment request sent by the first server to establish a communication channel;

[0081] In response to the establishment request, a target data channel is established between the first server and the user identification card based on the target BIP protocol.

[0082] Specifically, the BIP platform can directly send an establishment request to the terminal, and the terminal responds to the establishment request to establish a target data channel between the BIP platform and the user identification card based on the target BIP protocol. This target data channel can be an IP data link. It should be noted that the user identification card can send an open channel command to the terminal baseband chip, and the terminal baseband chip then establishes the target data channel with the BIP platform. The open channel command can carry parameters such as the BIP platform's protocol type, IP address, and port number.

[0083] In other embodiments of this application, the channel data includes one or more of the following:

[0084] User identification card identification information;

[0085] Security message data.

[0086] The user identification card's identification information refers to information used to uniquely identify the user identification card; specifically, as shown in Table 1 below, the identification information may include card identifier, empty card serial number, or Integrated Circuit Card Identifier (ICCID). Furthermore, the bytes and length of the user identification card's identification information, as well as the bytes and length of the security message data, can be as shown in Table 1.

[0087] Bytes Description Length 1 Card identification, blank card serial number or ICCID 10 11 Secure message data L

[0088] Table 1

[0089] In other embodiments of this application, the security message data includes one or more of the following:

[0090] Secure application data for data security;

[0091] Command data.

[0092] Specifically, the user identification card's identification information refers to information used to uniquely identify the user identification card; regarding data security, security application data refers to security application data related to data security, used to ensure data security and data association; and command data refers to data related to commands. It should be noted that security message data can include message data corresponding to uplink transmission (i.e., data transmitted from the user identification card to the BIP platform) and message data corresponding to downlink transmission (i.e., data transmitted from the BIP platform to the user identification card).

[0093]

[0094] Table 2

[0095]

[0096] Table 3

[0097] Specifically, Table 2 shows the secure message data encoding for downlink transmissions, and Table 3 shows the secure message data encoding for uplink transmissions. Furthermore, Tables 2 and 3 show the length and reference values ​​for command data.

[0098] In other embodiments of this application, the security application data includes one or more of the following:

[0099] Security information used to protect data;

[0100] Cascading information used to indicate the relationships between data.

[0101] Security information refers to information that ensures data security; concatenation information refers to information that indicates the correlation between data. Specifically, as shown in Table 2, security information for downlink transmission includes security header identifier, security header length, security indicator, encryption algorithm index, counter, integrity check algorithm index, and integrity check code; as shown in Table 3, security information for uplink transmission includes security header identifier, counter, and integrity check code. Furthermore, as shown in Table 2, concatenation information may include concatenation identifier and concatenation information length. Of course, secure application data may also include other information shown in Tables 2 and 3.

[0102] It should be noted that encryption algorithm indexes can ensure data confidentiality, for example, by using symmetric key pairs to encrypt data; by using a counter mechanism to prevent replay attacks; and by using message authentication codes to ensure data integrity. Security indicators are used to indicate message security configurations, such as whether one or more of confidentiality, integrity, and replay protection are used, and the algorithm employed.

[0103] In other embodiments of this application, if it is necessary to close the target data channel, the user identification card sends a channel closure command (i.e., CLOSE CHANNEL command) to the baseband chip of the terminal, and then the terminal closes the target data channel.

[0104] The data transmission method provided in the embodiments of this application allows a regular user identification card in a terminal to transmit its own data to a corresponding first server (i.e., a BIP platform) based on a target BIP that defines security information for the data. It can also transmit business data within the data to a corresponding second server (i.e., a business platform) and transmit the processing result of the business data processed by the second server back to the regular user identification card. This enables data transmission between the business platform, the BIP platform, and the regular user identification card in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use a secure data channel to interact with the BIP platform, thus ensuring the normal operation of services.

[0105] Based on the foregoing embodiments, this application provides a data transmission method, which can be applied to a first server, as described above. Figure 3 As shown, the method may include the following steps:

[0106] Step 201: Receive the first data sent by the user identification card through the terminal.

[0107] The first data includes channel data that represents the security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol.

[0108] Specifically, the user identification card can send the first data to the terminal's baseband chip via the Send Data command, and then the terminal's baseband chip sends the encapsulated first data to the BIP platform through the target data channel.

[0109] Step 202: Parse the first data to obtain the business data, and send the business data to the second server.

[0110] Here, business data can be data related to business; the second server can refer to the business platform.

[0111] Step 203: Receive the processing results of the business data sent by the second server.

[0112] The processing result can be obtained by the business platform after processing the received business data. Specifically, after obtaining the processing result, the business platform can send the processing result to the BIP platform.

[0113] Step 204: Process the processing results and other data based on the target BIP protocol to obtain the second data, and send the second data to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card.

[0114] Other data refers to the data in the first set of data excluding business data.

[0115] Specifically, the BIP platform can encapsulate the received processing results and other data to obtain second data, and send the second data to the terminal's baseband chip through the target data channel; then, the baseband chip can transmit the second data to the user identification card.

[0116] In other embodiments of this application, the "sending second data to the terminal through the target data channel" in step 204 above can be implemented in the following ways:

[0117] A1. Send each second data to the terminal through the target data channel.

[0118] Each of the second data includes cascading information used to indicate the relationship between multiple second data.

[0119] Specifically, concatenation information is used to indicate index information for multiple second data items, which in turn indicates the relationship between each second data item. Specifically, multiple second data items can correspond to a single set of data, and the header of each second data item includes concatenation information. Furthermore, multiple second data items can be sent sequentially using the index indicated by the concatenation information.

[0120] In other embodiments of this application, the channel data includes one or more of the following:

[0121] User identification card identification information;

[0122] Security message data.

[0123] In other embodiments of this application, the security message data includes one or more of the following:

[0124] Secure application data for data security;

[0125] Command data.

[0126] In other embodiments of this application, the security application data includes one or more of the following:

[0127] Security information used to protect data;

[0128] Cascading information used to indicate the relationships between data.

[0129] It should be noted that the descriptions of the same steps and contents as in other embodiments in this embodiment can be found in the descriptions in other embodiments, and will not be repeated here.

[0130] The data transmission method provided in the embodiments of this application allows a regular user identification card in a terminal to transmit its own data to a corresponding first server (i.e., a BIP platform) based on a target BIP that defines security information for the data. It can also transmit business data within the data to a corresponding second server (i.e., a business platform) and transmit the processing result of the business data processed by the second server back to the regular user identification card. This enables data transmission between the business platform, the BIP platform, and the regular user identification card in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use a secure data channel to interact with the BIP platform, thus ensuring the normal operation of services.

[0131] Based on the foregoing embodiments, embodiments of this application provide a first data transmission device, which can be applied to... Figure 1 In the data transmission method provided in the corresponding embodiment, refer to Figure 4 As shown, the first data transmission device 3 may include: a first processing unit 31, a first transmitting unit 32, and a first receiving unit 33, wherein:

[0132] The first processing unit 31 is used to process the data to be transmitted through the user identification card based on the target independent transmission protocol BIP to obtain the first data; wherein, the target BIP defines security information for the data;

[0133] The first transmitting unit 32 is used to transmit first data to a server corresponding to the user identification card through a target data channel; wherein the first data includes channel data representing security information of the data;

[0134] The first receiving unit 33 is used to receive the second data sent by the server through the target data channel, and process the second data based on the target BIP protocol through the user identification card; wherein, the second data is obtained by the server encapsulating the return result of the first data based on the target BIP protocol.

[0135] In other embodiments of this application, the first receiving unit 33 is further configured to receive an establishment request for establishing a communication channel sent by the first server;

[0136] The first processing unit 31 is also used to respond to the establishment request and establish a target data channel between the first server and the user identification card based on the target BIP protocol.

[0137] In other embodiments of this application, the channel data includes one or more of the following:

[0138] User identification card identification information;

[0139] Security message data.

[0140] In other embodiments of this application, the security message data includes one or more of the following:

[0141] Secure application data for data security;

[0142] Command data.

[0143] In other embodiments of this application, the security application data includes one or more of the following:

[0144] Security information used to protect data;

[0145] Cascading information used to indicate the relationships between data.

[0146] It should be noted that a detailed explanation of the steps performed by each unit can be found in [reference needed]. Figure 1 The data transmission method provided in the corresponding embodiments will not be described in detail here.

[0147] The first data transmission device provided in the embodiments of this application allows a regular user identification card in a terminal to transmit its own data to a corresponding first server (i.e., a BIP platform) based on a target BIP that defines security information for the data. It can also transmit business data within the data to a corresponding second server (i.e., a business platform) and transmit the processing result of the business data processed by the second server back to the regular user identification card. This enables data transmission between the business platform, the BIP platform, and the regular user identification card in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use a secure data channel to interact with the BIP platform, thus ensuring the normal operation of services.

[0148] Based on the foregoing embodiments, embodiments of this application provide a second data transmission device, which can be applied to... Figure 3 In the data transmission method provided in the corresponding embodiment, refer to Figure 5 As shown, the second data transmission device 4 may include: a second receiving unit 41, a second transmitting unit 42, and a second processing unit 43, wherein:

[0149] The second receiving unit 41 is used to receive first data sent by the user identification card through the terminal; wherein, the first data includes channel data representing the security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol;

[0150] The second sending unit 42 is used to parse the first data to obtain service data and send the service data to the second server;

[0151] The second receiving unit 41 is also used to receive the processing results of the business data sent by the second server;

[0152] The second processing unit 43 is used to process the processing result and other data based on the target BIP protocol to obtain the second data, and send the second data to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card; wherein, the other data is the data in the first data excluding the business data.

[0153] In other embodiments of this application, the second processing unit 43 is further configured to send each second data to the terminal through the target data channel; wherein each second data includes cascading information for indicating the association relationship of multiple second data.

[0154] In other embodiments of this application, the channel data includes one or more of the following:

[0155] User identification card identification information;

[0156] Security message data.

[0157] In other embodiments of this application, the security message data includes one or more of the following:

[0158] Secure application data for data security;

[0159] Command data.

[0160] In other embodiments of this application, the security application data includes one or more of the following:

[0161] Security information used to protect data;

[0162] Cascading information used to indicate the relationships between data.

[0163] It should be noted that a detailed explanation of the steps performed by each unit can be found in [reference needed]. Figure 3 The data transmission method provided in the corresponding embodiments will not be described in detail here.

[0164] The second data transmission device provided in the embodiments of this application allows a regular user identification card in a terminal to transmit its own data to a corresponding first server (i.e., a BIP platform) based on a target BIP that defines security information for the data. It can also transmit business data within the data to a corresponding second server (i.e., a business platform) and transmit the processing result of the business data processed by the second server back to the regular user identification card. This enables data transmission between the business platform, the BIP platform, and the regular user identification card in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use a secure data channel to interact with the BIP platform, thus ensuring the normal operation of services.

[0165] Based on the foregoing embodiments, embodiments of this application provide a terminal that can be applied to... Figure 1 In the data transmission method provided in the corresponding embodiment, refer to Figure 6 As shown, the terminal 5 may include: a first processor 51, a first memory 52, and a first communication bus 53, wherein:

[0166] The first communication bus 53 is used to realize the communication connection between the first processor 51 and the first memory 52;

[0167] The first processor 51 is used to execute the data transfer program in the first memory 52 to perform the following steps:

[0168] Based on the Target Independent Transport Protocol (BIP), the data to be transmitted is processed through the user identification card to obtain the first data; wherein, the Target BIP defines the security information for the data;

[0169] First data is sent to the server corresponding to the user identification card through the target data channel; wherein, the first data includes channel data representing the security information of the data;

[0170] The system receives the second data sent by the server through the target data channel and processes the second data based on the target BIP protocol through the user identification card; wherein, the second data is obtained by the server encapsulating the return result of the first data based on the target BIP protocol.

[0171] In other embodiments of this application, the first processor 51 is used to execute a data transfer program in the first memory 52, and may also implement the following steps:

[0172] Receive the establishment request sent by the first server to establish a communication channel;

[0173] In response to the establishment request, a target data channel is established between the first server and the user identification card based on the target BIP protocol.

[0174] In other embodiments of this application, the channel data includes one or more of the following:

[0175] User identification card identification information;

[0176] Security message data.

[0177] In other embodiments of this application, the security message data includes one or more of the following:

[0178] Secure application data for data security;

[0179] Command data.

[0180] In other embodiments of this application, the security application data includes one or more of the following:

[0181] Security information used to protect data;

[0182] Cascading information used to indicate the relationships between data.

[0183] It should be noted that a detailed description of the steps performed by the first processor can be found in [reference needed]. Figure 1 The data transmission method provided in the corresponding embodiments will not be described in detail here.

[0184] The terminal provided in the embodiments of this application allows a regular user identification card in the terminal to transmit its own data to a corresponding first server (i.e., a BIP platform) based on a target BIP that defines security information for the data. It can also transmit business data within the data to a corresponding second server (i.e., a business platform) and transmit the processing result of the business data processed by the second server back to the regular user identification card. This enables data transmission between the business platform, the BIP platform, and the regular user identification card in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use a secure data channel to interact with the BIP platform, thus ensuring the normal operation of services.

[0185] Based on the foregoing embodiments, embodiments of this application provide a first server, which can be applied to... Figure 3 In the data transmission method provided in the corresponding embodiment, refer to Figure 7 As shown, the first server 6 may include: a second processor 61, a second memory 62, and a second communication bus 63, wherein:

[0186] The second communication bus 63 is used to realize the communication connection between the second processor 61 and the second memory 62;

[0187] The second processor 61 is used to execute the data transfer program in the second memory 62 to perform the following steps:

[0188] The system receives first data sent by the user identification card through the terminal; wherein the first data includes channel data representing security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol;

[0189] The first data is parsed to obtain the business data, and then the business data is sent to the second server;

[0190] Receive the processing results of the business data sent by the second server;

[0191] The second data is obtained by processing the processing results and other data based on the target BIP protocol, and then sent to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card; wherein, the other data is the data in the first data excluding the business data.

[0192] In other embodiments of this application, the second processor 61 is used to execute the data transmission program in the second memory 62 to send second data to the terminal through the target data channel, in order to achieve the following steps:

[0193] Each second data point is sent to the terminal via the target data channel; wherein each second data point includes cascading information indicating the association relationship between multiple second data points.

[0194] In other embodiments of this application, the channel data includes one or more of the following:

[0195] User identification card identification information;

[0196] Security message data.

[0197] In other embodiments of this application, the security message data includes one or more of the following:

[0198] Secure application data for data security;

[0199] Command data.

[0200] In other embodiments of this application, the security application data includes one or more of the following:

[0201] Security information used to protect data;

[0202] Cascading information used to indicate the relationships between data.

[0203] It should be noted that a detailed description of the steps performed by the second processor can be found in [reference needed]. Figure 3 The data transmission method provided in the corresponding embodiments will not be described in detail here.

[0204] The first server provided in the embodiments of this application allows a regular user identification card in the terminal to transmit its own data to the corresponding first server (i.e., the BIP platform) based on a target BIP that defines security information for the data. It can also transmit business data from the data to the corresponding second server (i.e., the business platform) and transmit the processing result of the business data processed by the second server back to the regular user identification card. This enables data transmission between the business platform, the BIP platform, and the regular user identification card in the terminal via a secure data channel, solving the problem in related technologies where regular cards cannot use a secure data channel to interact with the BIP platform, thus ensuring the normal operation of services.

[0205] Based on the foregoing embodiments, embodiments of this application provide a computer-readable storage medium storing one or more programs, which can be executed by one or more processors to implement... Figure 1 and Figure 3 The corresponding implementation provides the steps of the data transmission method.

[0206] Based on the foregoing embodiments, embodiments of this application provide a computer program product, including a computer program that can be executed by a first processor 51 and a second processor 61 to perform... Figure 1 and Figure 3 The corresponding implementation provides the steps of the data transmission method.

[0207] Those skilled in the art will understand that embodiments of this application can be provided as methods, systems, or computer program products. Therefore, this application can take the form of hardware embodiments, software embodiments, or embodiments combining software and hardware aspects. Furthermore, this application can take the form of a computer program product implemented on one or more computer-usable storage media (including, but not limited to, disk storage and optical storage) containing computer-usable program code.

[0208] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0209] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0210] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0211] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

1. A data transmission method, characterized in that, The method includes: Based on the target bearer independent protocol BIP, the data to be transmitted is processed through the user identification card to obtain the first data; wherein, the target BIP defines the security information for the data; The first data is sent to a first server corresponding to the user identification card via a target data channel; wherein the first data includes channel data representing security information of the data; The second data sent by the first server is received through the target data channel, and the second data is processed by the user identification card based on the target BIP protocol; wherein, the second data is obtained by the first server encapsulating the return result of the first data based on the target BIP protocol.

2. The method according to claim 1, characterized in that, The method further includes: Receive the establishment request sent by the first server to establish a communication channel; In response to the establishment request, a target data channel is established between the first server and the user identification card based on the target BIP protocol.

3. The method according to claim 1, characterized in that, The channel data includes one or more of the following: The identification information of the user identification card; Security message data.

4. The method according to claim 3, characterized in that, The security message data includes one or more of the following: Secure application data for data security; Command data.

5. The method according to claim 4, characterized in that, The security application data includes one or more of the following: Security information used to protect data; Cascading information used to indicate the relationships between data.

6. A data transmission method, characterized in that, The method includes: The system receives first data sent by a user identification card through a terminal; wherein the first data includes channel data representing security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol; The first data is parsed to obtain business data, and the business data is sent to the second server; Receive the processing result of the business data sent by the second server; The processing result and other data are processed based on the target BIP protocol to obtain second data, and the second data is sent to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card; wherein, the other data is the data in the first data other than the service data.

7. The method according to claim 6, characterized in that, Sending the second data to the terminal via the target data channel includes: Each of the second data is sent to the terminal through the target data channel; wherein each of the second data includes cascading information for indicating the association relationship of multiple second data.

8. The method according to claim 6, characterized in that, The channel data includes one or more of the following: The identification information of the user identification card; Security message data.

9. The method according to claim 8, characterized in that, The security message data includes one or more of the following: Secure application data for data security; Command data.

10. The method according to claim 9, characterized in that, The security application data includes one or more of the following: Security information used to protect data; Cascading information used to indicate the relationships between data.

11. A first data transmission device, characterized in that, include: The first processing unit is used to process the data to be transmitted through the user identification card based on the target independent transport protocol BIP to obtain the first data; wherein, the target BIP defines security information for the data; The first transmitting unit is configured to transmit the first data to a server corresponding to the user identification card via a target data channel; wherein the first data includes channel data representing security information of the data; The first receiving unit is configured to receive second data sent by the server through the target data channel, and process the second data based on the target BIP protocol through the user identification card; wherein, the second data is obtained by the server encapsulating the return result of the first data based on the target BIP protocol.

12. A second data transmission device, characterized in that, include: The second receiving unit is used to receive first data sent by the user identification card through the terminal; wherein, the first data includes channel data representing the security information of the data; the first data is obtained by the user identification card after processing the data to be transmitted based on the target BIP protocol; The second sending unit is used to parse the first data to obtain service data and send the service data to the second server; The second receiving unit is further configured to receive the processing result of the business data sent by the second server; The second processing unit is configured to process the processing result and other data based on the target BIP protocol to obtain second data, and send the second data to the terminal through the target data channel so that the terminal can transmit the second data to the user identification card; wherein, the other data is the data in the first data other than the service data.

13. A terminal, characterized in that, The terminal includes: a first processor, a first memory, and a first communication bus; The first communication bus is used to establish a communication connection between the first processor and the first memory; The first processor is configured to execute a data transfer program in the first memory to implement the steps of the data transfer method as described in any one of claims 1 to 5.

14. A first server, characterized in that, The first server includes: a second processor, a second memory, and a second communication bus; The second communication bus is used to establish a communication connection between the second processor and the second memory; The second processor is used to execute a data transfer program in the second memory to implement the steps of the data transfer method as described in any one of claims 6 to 10.

15. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores one or more programs, which can be executed by one or more processors to implement the steps of the data transmission method as described in any one of claims 1 to 5 or 6 to 10.

16. A computer program product, the computer program product comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the method according to any one of claims 1 to 5 or claims 6 to 10.

Images