Electronic old-age card data closed-loop processing method and system based on intelligent card

Abstract

The invention provides an electronic old-age card data closed-loop processing method and system based on an intelligent card. According to the method, biological characteristic information of a user is collected through a mobile terminal application, identity information is submitted, a government affair data platform interface is called to carry out remote identity verification, and encrypted identity element data of old people is generated; an APDU instruction stream is dynamically generated based on the JavaCard specification, and encrypted identity element data is written into a secure storage area of the smart card through a machine-card communication channel; reading encrypted data of the smart card in a business scene through NFC card reading equipment, generating a triple verification record in combination with a merchant identifier and a transaction timestamp, and feeding back a verification result to a merchant terminal; and synchronizing the triple verification record to a government affair data platform to form a traceable subsidy data chain for the government to approve subsidy issuing. According to the invention, remote safe writing and non-contact automatic verification of the identity information of the old people are realized, and the service convenience and the data credibility are improved.

Description

Technical Field

[0001] This invention relates to the field of smart card technology, and in particular to a method and system for closed-loop data processing of electronic senior citizen cards based on smart cards. Background Technology

[0002] As society ages and the elderly population continues to grow, the government is constantly strengthening and optimizing its attention and care for the elderly. The government has introduced numerous preferential and subsidy policies for the elderly, but they need to apply in person at designated locations. However, due to differences in subsidy methods across regions, many scenarios, such as parks, public transportation, and community breakfast centers, rely on estimated data for subsidy applications, making accurate data collection difficult.

[0003] Currently, senior citizens applying for senior citizen cards need to bring their ID cards and other information to designated locations for manual verification, or apply for electronic senior citizen cards through local apps. However, these apps can only display the cards for manual review, making them extremely inconvenient to use. Summary of the Invention

[0004] The present invention aims to at least partially solve one of the technical problems in the related art.

[0005] Therefore, the first objective of this invention is to propose a closed-loop data processing method for electronic senior citizen cards based on smart cards.

[0006] The second objective of this invention is to propose a data closed-loop processing device for electronic senior citizen cards based on smart cards.

[0007] To achieve the above objectives, a first aspect of the present invention proposes a method for closed-loop data processing of electronic senior citizen cards based on smart cards, comprising: S1 collects users' biometric information and submits their identity information through a mobile application, calls the government data platform interface to perform remote identity verification, and generates encrypted elderly identity element data. S2 dynamically generates APDU instruction streams based on the JavaCard specification and writes encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel. S3 reads the encrypted data of the smart card in the business scenario through the NFC card reader, generates a triplet verification record by combining the merchant identifier and the transaction timestamp, and feeds back the verification result to the merchant terminal. S4 synchronizes the triplet verification records to the government data platform, forming a traceable subsidy data chain for government approval and subsidy disbursement.

[0008] In one embodiment of the present invention, the step of collecting user biometric information and submitting identity information through a mobile application, calling the government data platform interface for remote identity verification, and generating encrypted elderly person identity data includes: S11 uses HTTPS protocol with TLS / SSL encryption to transmit biometric and identity information, ensuring data security during transmission. S12 uses the national cryptographic SM4 algorithm to encrypt the elderly identity data returned by the government data platform, generating an encrypted data format that conforms to the JavaCard specification.

[0009] In one embodiment of the present invention, the step of dynamically generating APDU instruction streams based on the JavaCard specification and writing encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel includes: S21 generates INSTALL instructions conforming to the GlobalPlatform specification for creating the senior citizen card application, LOAD instructions for writing encrypted data blocks, and SETSTATUS instructions for activating the application, and transmits the instructions to the smart card through the Android OMAPI interface; S22 uses the system's private key to digitally sign the APDU instruction packet, ensuring that the instruction is tamper-proof and forgery-proof during transmission.

[0010] In one embodiment of the present invention, the step of reading encrypted data from a smart card in a business scenario using an NFC card reader, generating a triplet verification record by combining the merchant identifier and transaction timestamp, and feeding back the verification result to the merchant terminal further includes: S31, the card reader sends a SELECT APDU command to select the application in the card through the application identifier AID of the electronic senior citizen card, and sends a GETDATA command to read the encrypted identity information; S32, after the system decrypts the card data using the corresponding key, it verifies whether the identity is on the blacklist or has been cancelled, and generates an immutable record containing the elderly person's unique identifier, verification timestamp, merchant ID, and verification result.

[0011] In one embodiment of the present invention, the step of synchronizing the triplet verification records to the government data platform to form a traceable subsidy data chain for government approval and subsidy disbursement further includes: S41 uses a RESTful API interface to aggregate verification records from the industry usage record table daily and generate standardized statistical reports. S42 synchronizes statistical reports to the National Elderly Information Data Platform of the Government Affairs Office via HTTPS protocol, ensuring the integrity and tamper-proof nature of data transmission.

[0012] In one embodiment of the present invention, it further includes: S5, after receiving encrypted data uploaded by the NFC card reader, the electronic senior citizen card application system decrypts it based on the national cryptographic SM4 algorithm and verifies the integrity of the senior citizen identity data stored in the smart card through the JavaCard specification. S6 The system will synchronize the decrypted identity data with the government data platform in real time and update the blacklist status or cancellation status in the smart card to ensure the real-time effectiveness of subsequent verification operations.

[0013] To achieve the above objectives, a second aspect of the present invention provides a data closed-loop processing device for electronic senior citizen cards based on smart cards, comprising: The biometrics collection and identity verification module is used to collect users’ biometrics information and submit their identity information through a mobile application, call the government data platform interface for remote identity verification, and generate encrypted elderly identity data. The APDU instruction generation and data writing module is used to dynamically generate APDU instruction streams based on the JavaCard specification and write encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel. The NFC data reading and verification record generation module is used to read the encrypted data of the smart card in the business scenario through the NFC card reader, generate a triplet verification record by combining the merchant identifier and the transaction timestamp, and feed the verification result back to the merchant terminal. The data synchronization and subsidy chain generation module is used to synchronize the triplet verification records to the government data platform to form a traceable subsidy data chain for government approval and subsidy disbursement.

[0014] The methods and systems of this invention enable remote and secure writing and contactless automatic verification of elderly people's identity information, construct an accurate and traceable closed-loop system for subsidy data, and improve service convenience and data credibility.

[0015] Additional aspects and advantages of the invention will be set forth in part in the description which follows, and in part will be obvious from the description, or may be learned by practice of the invention. Attached Figure Description

[0016] The above and / or additional aspects and advantages of the present invention will become apparent and readily understood from the following description of the embodiments taken in conjunction with the accompanying drawings, wherein: Figure 1 A flowchart illustrating a data closed-loop processing method for an electronic senior citizen card based on a smart card, provided in an embodiment of this application; Figure 2 The main business process diagram provided for the embodiments of this application; Figure 3This application provides a diagram illustrating the activation services of an electronic senior citizen card. Figure 4 This is a flowchart of offline NFC verification data processing provided in an embodiment of this application; Figure 5 The electronic senior citizen card application system and its core functions are illustrated in the embodiments of this application. Figure 6 This is a structural diagram of a smart card-based electronic senior citizen card data closed-loop processing device provided in an embodiment of this application. Detailed Implementation

[0017] It should be noted that, unless otherwise specified, the embodiments and features described in the present invention can be combined with each other. The present invention will now be described in detail with reference to the accompanying drawings and embodiments.

[0018] To enable those skilled in the art to better understand the present invention, the technical solutions of the present invention will be clearly and completely described below with reference to the accompanying drawings of the embodiments. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those skilled in the art without creative effort should fall within the scope of protection of the present invention.

[0019] The following describes, with reference to the accompanying drawings, a data closed-loop processing method and apparatus for electronic senior citizen cards based on smart cards, according to an embodiment of the present invention.

[0020] Example 1 Figure 1 This is a flowchart of a data closed-loop processing method for electronic senior citizen cards based on smart cards according to an embodiment of the present invention, as shown below. Figure 1 As shown, it includes: S1 collects users' biometric information and submits their identity information through a mobile application, calls the government data platform interface for remote identity verification, and generates encrypted elderly person identity data.

[0021] Specifically, in some implementations, collecting users' biometric information and submitting their identity information via mobile applications, then calling the government data platform interface for remote identity verification to generate encrypted elderly person identity data, is a key step in enabling remote activation and secure card writing of electronic senior citizen cards in this system. This step, based on a multimodal identity authentication mechanism and combined with national cryptographic algorithms and smart card security standards, ensures the authenticity of user identity and the security of data transmission.

[0022] Users complete liveness detection and facial image capture via a mobile application (APP). The collected biometric data (such as facial feature points and depth information) is bound to the user's submitted identity information (such as name and the last 6 digits of their ID card) and transmitted to the electronic senior citizen card application system via HTTPS protocol (with TLS / SSL encryption). This system then calls the national senior citizen information data platform of the government affairs office through a RESTful API interface for identity verification. The response returned by the government affairs platform includes authoritative senior citizen identity elements, such as name, cardholder code, standardized senior citizen card number, and administrative division code of permanent residence.

[0023] Biometric acquisition must meet the performance requirements for liveness detection in the ISO / IEC 30107-3 standard, ensuring a false acceptance rate (FAR) of less than [percentage missing]. The false rejection rate (FRR) is controlled at... Within 500ms. HTTPS communication uses the TLS 1.3 protocol and supports the national cryptographic algorithms SM2 / SM4 to ensure the confidentiality and integrity of data during transmission. The response time of the identity verification interface should be controlled within 500ms to improve user experience.

[0024] This procedure is applicable to scenarios where seniors apply for electronic senior citizen cards remotely, such as opening a card at home or at a community service point. Users can complete identity verification and card data writing without going to a physical window, which is especially suitable for seniors with limited mobility or living in remote areas.

[0025] This step automates and remotely verifies identity, avoiding the inefficiency and security risks of traditional manual verification. Identity elements are encrypted using the national cryptographic algorithm SM4, ensuring secure data storage on the smart card. This provides a reliable data foundation for subsequent NFC verification and data collection, thereby supporting the government's accurate distribution and supervision of subsidies for the elderly.

[0026] Furthermore, S1 includes: S11 uses HTTPS protocol with TLS / SSL encryption to transmit biometric and identity information, ensuring data security during transmission.

[0027] Specifically, in some implementations, using TLS / SSL encryption with HTTPS to transmit biometric and identity information is a crucial step in ensuring data security during transmission. This step leverages the encryption mechanisms of Transport Layer Security (TLS) or Secure Sockets Layer (SSL), combined with the end-to-end encryption of HTTPS, to encrypt the transmission of sensitive user information (such as liveness detection images, facial data, and the last six digits of an ID card). In essence, HTTPS operates between the application and transport layers in the TCP / IP protocol stack. Its core function is to encrypt HTTP communication using TLS / SSL, ensuring that data is not eavesdropped on, tampered with, or forged during transmission between the client and server.

[0028] This step first establishes a secure connection between the client (e.g., a mobile app) and the server (the electronic senior citizen card application system). After the client initiates an HTTPS request, the server returns its digital certificate. The client verifies the certificate's validity (including the issuing authority, validity period, and domain name matching) and negotiates a session key based on an asymmetric encryption algorithm (e.g., RSA or ECDHE). Subsequently, all transmitted data is symmetrically encrypted using this session key (e.g., AES-256) to improve encryption efficiency and ensure data integrity. The TLS protocol version typically uses TLS 1.2 or higher (e.g., TLS 1.3) to comply with current mainstream security standards (e.g., RFC 8446).

[0029] Key parameters involved in HTTPS communication include: Cipher Suite selection, certificate chain verification depth, and session timeout. For example, high-strength cipher suites such as `TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384` can be optionally used to ensure forward confidentiality and data integrity. During certificate verification, the system must support at least three levels of certificate chain verification to ensure the trustworthiness of the root certificate. Furthermore, to prevent man-in-the-middle attacks, the system should enforce a certificate fingerprint verification mechanism.

[0030] This step is widely used in the remote activation process of electronic senior citizen cards. After users complete liveness detection and facial image capture via a mobile app, the system packages the collected biometric features and identity information and uploads it to the electronic senior citizen card application system via an HTTPS encrypted channel. During this process, the data must meet the requirements for personal information transmission security in the "Information Security Technology - Personal Information Security Specification" (GB / T35273-2020) to ensure the confidentiality and integrity of the data during transmission.

[0031] By using HTTPS in conjunction with TLS / SSL, the theft or tampering of data during transmission is effectively prevented, thus ensuring the security of the elderly's identity information and biometric data. Furthermore, this mechanism provides a reliable data foundation for subsequent smart card writing, NFC verification, and data collection, and is an important prerequisite for realizing a closed-loop "card-device-cloud" system.

[0032] S12 uses the national cryptographic SM4 algorithm to encrypt the elderly identity data returned by the government data platform, generating an encrypted data format that conforms to the JavaCard specification.

[0033] Specifically, in some implementations, the national cryptographic algorithm SM4 is used to encrypt the elderly identity data returned by the government data platform. The SM4 algorithm is a commercial cryptographic algorithm standard (GB / T37033-2018) issued by the State Cryptography Administration of China. It belongs to the symmetric block cipher algorithm, with a block length of 128 bits and a key length of 128 bits. It has high encryption strength and good hardware implementation efficiency, and is suitable for resource-constrained embedded environments such as smart cards.

[0034] In its specific implementation, after receiving identity element data (such as name, cardholder code, standardized senior citizen card number, and administrative division code of permanent residence) from the National Senior Citizen Information Data Platform of the Government Affairs Office, the electronic senior citizen card application system first encapsulates this data according to a predefined data structure to form a data block to be encrypted. Subsequently, the system calls the SM4 encryption module, using a pre-set 128-bit encryption key. The data block is encrypted. The encryption process follows either the SM4 ECB or CBC operating mode, with CBC mode being preferred to enhance the data's resistance to replay attacks. The encrypted data is output in binary form and, as part of the APDU instruction, is securely transmitted to the user terminal APP via the HTTPS protocol.

[0035] Furthermore, to ensure the integrity and tamper-proof nature of the instructions, the system uses a private key after encryption. The APDU instruction packets are digitally signed. This signing mechanism is based on the SM2 algorithm (GB / T 32918-2016) to ensure that the instructions are not tampered with by third parties during transmission. The terminal APP sends the encrypted and signed APDU instructions to the smart card through a card-to-device communication interface (such as Android's OMAPI). After receiving the instructions, the smart card parses and executes them according to the JavaCard specification, writing the encrypted data into a secure file within the card to ensure the confidentiality and immutability of the data stored on the card.

[0036] In practical applications, this step primarily serves the remote activation of electronic senior citizen cards, suitable for scenarios where seniors can complete the card writing process without on-site processing. Through SM4 encryption, the system meets the security requirements for sensitive data storage and transmission in the "Information Security Technology - Smart Card Security Technical Requirements" (GB / T 25061-2010), and also complies with the JavaCard 3.0.3 specification's definition of encrypted application data writing procedures.

[0037] This encryption process effectively enhances the security of elderly people's identity information during transmission and storage, prevents data leakage and forgery, and provides a reliable data foundation for subsequent NFC verification and data collection. This safeguards the legitimate rights and interests of the elderly in various service scenarios and provides credible data support for the government to accurately distribute subsidies.

[0038] S2 dynamically generates APDU instruction streams based on the JavaCard specification and writes encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel.

[0039] Specifically, in some implementations, APDU instruction streams are dynamically generated based on the JavaCard specification, and encrypted identity element data is written to the secure storage area of ​​the smart card through the card-machine communication channel. This step ensures the confidentiality and integrity of data during transmission and storage by adhering to the security mechanisms of the JavaCard platform and the Global Platform (GP) specification.

[0040] This step begins by constructing an APDU command sequence conforming to the JavaCard instruction set specification within the electronic senior citizen card application system, based on the user's identity verification results. APDU instructions typically include CLA (class byte), INS (instruction byte), P1 / P2 (parameter bytes), and optional data fields and LRC or CRC checksums. For example, the `INSTALL` instruction is used to create an electronic senior citizen card application instance on the smart card, the `LOAD` instruction is used to write encrypted identity data blocks into the card, and the `SETSTATUS` instruction is used to activate the application. During data writing, the system employs the national cryptographic SM4 algorithm to encrypt key identity elements (such as name, cardholder code, senior citizen card number, etc.) to ensure that the data is not leaked or tampered with during transmission.

[0041] The SM4 encryption algorithm uses a 128-bit key length, and the encryption mode can be selected from ECB, CBC, or GCM, with GCM mode recommended for simultaneous encryption and authentication. APDU instructions must conform to the ISO / IEC 7816-4 standard, with a maximum data field length of 255 bytes per instruction. If the data volume exceeds this limit, a chunked transmission mechanism must be used. Furthermore, the secure file structure within the smart card must be organized according to the EF (Elementary File) and DF (Dedicated File) hierarchy to ensure data isolation and access control.

[0042] This step is primarily used when users are activating their electronic senior citizen cards for the first time or updating existing card information. After submitting their identity information via a mobile app, the system verifies the user's identity with the government service platform. It then dynamically generates an APDU command stream and sends the command to the embedded smart card via the card-to-device communication interface provided by the mobile operating system (such as Android's OMAPI interface). Upon receiving the command, the smart card, following the execution logic of the JavaCard application, writes encrypted data to its secure storage area, completing the card activation or update operation.

[0043] This step enables the remote and secure writing of elderly people's identity information, avoiding the inconvenience of traditional offline processing methods. Furthermore, the combination of national cryptographic algorithms and the JavaCard platform significantly enhances data security. In addition, due to the dynamic generation mechanism of APDU instructions, the system possesses excellent flexibility and scalability, adapting to different smart card models and diverse business needs, providing a reliable data foundation for subsequent NFC verification and data collection.

[0044] Furthermore, S2 includes: S21 generates INSTALL instructions conforming to the GlobalPlatform specification for creating the senior citizen card application, LOAD instructions for writing encrypted data blocks, and SETSTATUS instructions for activating the application, and transmits the instructions to the smart card through the Android OMAPI interface.

[0045] Specifically, in some implementations, this step involves generating and transmitting APDU instructions conforming to the JavaCard standard based on the GlobalPlatform (GP) specification to complete the installation, data loading, and activation of the electronic senior citizen card application. Specifically, the system first completes identity verification by calling the National Senior Citizen Information Data Platform of the Government Affairs Office, and then generates an INSTALL instruction to create the senior citizen card application on the smart card. This instruction follows the APDU command format defined in the GP specification, including CLA (instruction class), INS (instruction code), P1 / P2 (parameter 1 / parameter 2), and optional data fields and LRC (vertical redundancy check code). The CLA field is typically set to `0x80`, indicating security-related operations; the INS field is `0xE6`, corresponding to the GP INSTALL instruction; the P1 / P2 fields are used to specify the application installation mode and parameters, such as `0x01 0x00` indicating the installation of a new application.

[0046] Furthermore, the system generates a LOAD instruction to write the encrypted identity data block into the smart card. This instruction contains the encrypted data block and verification information. The data block size typically does not exceed the maximum load unit supported by JavaCard (generally within 256 bytes) and is encrypted using the national cryptographic algorithm SM4 to ensure the confidentiality and integrity of the data during transmission and storage. The SETSTATUS instruction is used to activate the installed senior citizen card application. Its INS field is `0x20`, and the P1 / P2 fields are used to specify the application status, such as `0x01 0x00` indicating an activation operation.

[0047] The aforementioned instructions are transmitted to the smart card via the Android platform's OMAPI (Open Mobile API) interface. The OMAPI interface supports secure communication between the SE (Secure Element) and the application, ensuring that APDU instructions are not tampered with during transmission between the terminal and the card. In practical applications, such as parks and community breakfast shops, this step lays the foundation for subsequent NFC verification and data recording, realizing a complete process from remote identity verification to local secure card writing, thereby ensuring the security and ease of use of the elderly's identity information.

[0048] S22 uses the system's private key to digitally sign the APDU instruction packet, ensuring that the instruction is tamper-proof and forgery-proof during transmission.

[0049] Specifically, in some implementations, digitally signing the APDU instruction packet using the system's private key is a key technical step in this invention to ensure the security and integrity of electronic senior citizen card data transmission. This step is based on an asymmetric encryption algorithm, combined with national cryptographic standards and the Global Platform (GP) specification, to achieve tamper-proof and anti-counterfeiting protection for the instruction packet.

[0050] This step begins with the electronic senior citizen card application system receiving identity information from the national senior citizen information data platform of the government affairs office. Based on the JavaCard specification and GP instruction set, it constructs a standard-compliant APDU instruction package. This package typically contains multiple operation instructions, such as `INSTALL`, `LOAD`, and `SETSTATUS`, used to create applications, load encrypted data, and activate applications on the smart card. After construction, the system digitally signs the entire instruction package using its pre-set asymmetric encryption private key (such as a private key based on the SM2 algorithm). The signing process usually involves using a hash algorithm (such as SM3) to calculate a digest of the instruction content, then encrypting the digest value using the private key to generate a signature value, which is then appended to the instruction package.

[0051] The signature operation must meet the requirements of the national cryptographic standard (GB / T 37033-2018 SM2 digital signature algorithm), with a signature length of 64 bytes and a hash digest length of 32 bytes. Simultaneously, the signature verification process must be performed on the smart card using the corresponding public key to ensure the accuracy and efficiency of signature verification. During transmission, the signed APDU instruction packet is sent back to the user terminal APP via HTTPS protocol (TLS 1.2 and above), and then forwarded to the smart card chip unchanged via OMAPI and other card-machine communication interfaces.

[0052] This step is primarily applied to the remote activation process of electronic senior citizen cards. After the user submits their identity information via the app, the system generates and signs an APDU instruction packet, which is then written into the smart card through a secure channel. During subsequent NFC verification, even if the communication link is intercepted, the instruction packet is protected by a digital signature, preventing attackers from tampering with or forging the instruction content, thus ensuring data trustworthiness. The digital signature mechanism effectively prevents APDU instructions from being tampered with or forged by a man-in-the-middle during transmission, enhancing the overall security level of the system during the identity information writing stage. Furthermore, this mechanism complies with national cryptographic standards and GP specifications, ensuring the system's compliance and interoperability in government scenarios, providing a solid guarantee for the remote management and secure application of electronic senior citizen cards.

[0053] S3 uses an NFC card reader to read the encrypted data of a smart card in a business scenario, combines the merchant identifier and transaction timestamp to generate a triplet verification record, and then sends the verification result back to the merchant terminal. Specifically, in some implementations, reading the encrypted data of the smart card through an NFC card reader in a business scenario and generating a triplet verification record by combining the merchant identifier and transaction timestamp is a key step in this system to achieve accurate collection of elderly person identity verification and usage data. This step is based on the ISO / IEC 14443 Type A / B protocol to ensure a stable and secure contactless communication link between the card reader and the smart card. The card reader first sends a SELECT APDU command to select the electronic senior citizen card application on the card using the specified application identifier (AID), and then sends commands such as GETDATA or READBINARY to read the encrypted identity information stored on the card. Because the smart card uses the national cryptographic SM4 algorithm to encrypt the data during the card writing stage and uses the system's private key for digital signature, even if the data is transmitted in plaintext during NFC communication, its content cannot be illegally parsed or tampered with.

[0054] Merchant identifiers are typically 16-digit hexadecimal strings used to uniquely identify the merchant terminal devices participating in the service; transaction timestamps adopt the ISO 8601 standard format (e.g., `YYYY-MM-DDTHH:MM:SSZ`) to ensure time synchronization accuracy at the millisecond level; the verification record's triple structure includes encrypted identity data, merchant ID, and timestamp. Data packets are uploaded to the electronic senior citizen card application system via HTTPS protocol, and TLS 1.3 encryption is used during transmission to ensure data integrity and confidentiality.

[0055] This process is widely used at offline service points such as breakfast shops, park entrances, and senior citizen activity centers. After the merchant's terminal device reads the data in the card via NFC, the system can automatically determine whether the user is eligible to use the service, such as whether it is within the validity period or whether it is on a blacklist, and thus decide whether to generate a valid usage record.

[0056] Furthermore, this step automates identity verification and ensures the immutability of data records, providing accurate and traceable business data support for government subsidy disbursement. Through the structured storage of triple records, the system can support multi-dimensional data analysis and statistics, improving the intelligent management level of public services.

[0057] Furthermore, S3 includes: S31, the card reader sends a SELECT APDU command to select the application on the card using the application identifier AID of the electronic senior citizen card, and sends a GETDATA command to read the encrypted identity information.

[0058] Specifically, in some implementations, the card reader sends a SELECT APDU command to select the electronic senior citizen card application and reads the encrypted identity information via a GETDATA command. This is a crucial step in achieving contactless identity verification in this system. This step, based on the ISO / IEC 14443 Type A / B protocol standard, ensures a secure and reliable communication link between the card reader and the smart card.

[0059] The SELECT APDU command is used to activate and select a specific application on the card, and its command format conforms to the ISO / IEC 7816-4 standard. Specifically, the SELECT command is matched using an Application Identifier (AID), which is typically a 5- to 16-byte hexadecimal string, such as `A000000003000000`, used to uniquely identify the application on the electronic senior citizen card. When the card reader sends the SELECT command, the smart card will return a status word (SW1-SW2), such as `61 08`, indicating that the application has been successfully selected and 8 bytes of data are waiting to be read.

[0060] Furthermore, the GETDATA command is used to read encrypted identity information from the secure file on the card. This command typically includes a command header (CLA, INS, P1, P2) and data parameters; for example, `FF B0 00 00 08` indicates reading 8 bytes of data from offset address 0x0000. Since the identity information is encrypted and written to the card using the national cryptographic algorithm SM4 during the card activation process, the data returned by the GETDATA command is encrypted and needs to be decrypted by the electronic senior citizen card application system using the corresponding SM4 key.

[0061] In application scenarios, this step typically occurs in locations requiring identity verification, such as breakfast shops, park entrances, and senior citizen activity centers. The card reader device must support NFC functionality and be capable of APDU communication with the smart card. The communication distance is generally controlled within 10 cm to ensure the stability and security of the ISO / IEC 14443 protocol. The encrypted data read will be uploaded to the electronic senior citizen card application system along with the merchant ID and transaction timestamp for identity verification and usage record generation.

[0062] The technical advantage of this step lies in its ability to enable rapid, contactless reading of encrypted identity information through standardized APDU commands and NFC communication mechanisms, effectively preventing data leakage and tampering during transmission. Simultaneously, by combining national cryptographic algorithms with smart card secure storage mechanisms, the confidentiality and integrity of the elderly person's identity information are ensured, providing accurate and traceable data support for subsequent subsidy approval.

[0063] S32, after the system decrypts the card data using the corresponding key, it verifies whether the identity is on the blacklist or has been cancelled, and generates an immutable record containing the elderly person's unique identifier, verification timestamp, merchant ID, and verification result.

[0064] Specifically, in some implementations, after receiving encrypted card data uploaded by an NFC card reader, the system first transmits the data packet to the electronic senior citizen card application system via the HTTPS protocol. According to a preset key management mechanism, the system extracts the SM4 symmetric key matching the smart card application from the key store and decrypts the card data. The SM4 algorithm is a commercial cryptographic algorithm standard (GB / T 37033-2018) issued by the State Cryptography Administration. It has a 128-bit block length and a 128-bit key length, exhibiting good resistance to differential and linear attacks, and is suitable for data encryption and decryption in resource-constrained environments such as smart cards.

[0065] After decryption, the system calls the identity verification interface provided by the National Elderly Information Data Platform of the Government Affairs Office to compare the decrypted identity information (such as name, certificate holder code, standardized elderly certificate number, etc.) with the blacklist and cancellation status in the platform's database. This verification process is usually based on a RESTful API interface, using JSON format for data exchange, and the request response time is generally controlled within 200ms to meet real-time verification requirements. If the identity information is in the blacklist or has been cancelled, the system will return a "verification failed" status; otherwise, it will return a "verification successful" status.

[0066] Furthermore, the system will generate an immutable verification record, the structure of which includes the elderly person's unique identifier (such as a certificate holder code), a verification timestamp (using the ISO 8601 standard format, such as `2025-11-05T09:30:45+08:00`), a merchant ID (a 16-digit hexadecimal identifier assigned by the system), and a verification result (enumerated values: `0x00` indicates success, `0x01` indicates failure). This record is written to the "Industry Usage Record" table through a database transaction mechanism to ensure data consistency and integrity.

[0067] This process is widely deployed in offline service scenarios such as community breakfast shops, parks, and senior activity centers. It achieves fast and secure identity verification through contactless communication between NFC card readers and smart cards. Its technological value lies not only in improving verification efficiency and security but also in providing traceable and tamper-proof accurate data support for government subsidy disbursements, thereby realizing the digital and intelligent management of elderly welfare.

[0068] S4 synchronizes the triplet verification records to the government data platform, forming a traceable subsidy data chain for government approval and subsidy disbursement.

[0069] Specifically, this step involves synchronizing the triplet verification records to the government data platform to form a traceable subsidy data chain, providing accurate and secure data support for government approval and subsidy disbursement. In some implementations, this synchronization process is based on a RESTful API interface and uses the HTTPS protocol for data transmission to ensure the confidentiality and integrity of the data during transmission. The triplet verification record typically includes the following fields: the elderly person's unique identifier (e.g., certificate holder code), the verification timestamp (ISO 8601 standard format, such as `2025-11-05T09:30:00+08:00`), the verification merchant ID (uniformly registered and assigned by the government platform, in the format `Mxxxxxx`, where `x` is a number), and the verification result (e.g., `01` indicates success, `02` indicates failure, and `03` indicates identity abnormality).

[0070] After receiving verification data uploaded by the NFC card reader, the electronic senior citizen card application system first performs data parsing and identity decryption to verify its legality and validity. Then, the system combines the verification results with the original transaction data to form a structured record and writes it to the "Industry Usage Record" table in the local database. This table is designed according to the relational database paradigm, including primary key fields, foreign key relationships, and time indexes to support efficient querying and data aggregation. During the data aggregation phase, the system can aggregate data by time period (such as daily or weekly) to generate standardized statistical reports, such as the "XX Charity Breakfast Shop November 2025 Senior Citizen Service Statistical Report".

[0071] Furthermore, the system uses the API interface provided by the National Elderly Information Data Platform of the Government Affairs Office to encapsulate the original verification records or statistical reports in JSON or XML format and upload them to the government affairs platform via HTTPS protocol. The uploaded data packet must contain a digital signature to prevent data tampering during transmission. The signature algorithm can adopt the national cryptographic standard SM2 to ensure the credibility and non-repudiation of the data source. On the government affairs platform side, the system interface module verifies, parses, and stores the uploaded data, forming a traceable subsidy data chain.

[0072] This step is widely used in practical applications in government-subsidized public service scenarios such as community breakfast shops, senior activity centers, and parks. Through contactless NFC verification and a backend data synchronization mechanism, the system accurately records the usage behavior of the elderly, providing authentic and verifiable data for government subsidy disbursement. Its technological value lies in improving the transparency and accuracy of subsidy disbursement, reducing errors from manual statistics, and enhancing data security and system auditability, thus providing crucial support for the construction of a smart elderly care system.

[0073] Furthermore, S4 includes: S41 uses a RESTful API interface to aggregate verification records from the industry usage record table daily and generate standardized statistical reports.

[0074] Specifically, in some implementations, this step uses a RESTful API interface to periodically aggregate verification records in the "Industry Usage Records" table and generate standardized statistical reports. This step is a crucial link in the entire electronic senior citizen card system for data collection and government subsidy approval, and its technical implementation is based on the collaborative work of a scheduled task mechanism and a data processing engine.

[0075] The system uses a scheduled task (such as Quartz, Spring Scheduler, or Apache Airflow) deployed in the background to trigger a data aggregation process at a fixed time period (e.g., 2:00 AM daily). This process first reads all records matching the time range from the "Industry Usage Records" table in the database. Each record contains immutable fields: a unique identifier for the elderly person (e.g., certificate holder code), a verification timestamp, the verification merchant ID, and the verification result (success / failure). The system uses ISO 8601 standards to uniformly format the timestamps, ensuring cross-platform data consistency.

[0076] During data aggregation, the system employs distributed computing frameworks such as MapReduce or Spark to categorize and statistically analyze records. For example, it can count the number of users served on a given day by merchant ID or the frequency of use within a region by administrative division code. The statistical results are structured and encapsulated in a predefined XML or JSON Schema format to ensure data standardization and parsability.

[0077] The system supports configuring aggregation granularity (e.g., by day, by week), data retention period (e.g., retaining records from the most recent 90 days), and a merchant ID whitelist. After the statistical report is generated, it is transmitted to the National Elderly Information Data Platform of the Government Affairs Office via a RESTful API interface using the HTTPS protocol. The interface request header includes an OAuth 2.0 Bearer Token to ensure the security and legitimacy of the access permissions.

[0078] In application scenarios, this step is primarily used by relevant government departments to accurately collect statistics and approve subsidies for services used by the elderly in places such as community breakfast shops, parks, and senior activity centers. Through automated data aggregation and report generation mechanisms, the errors and inefficiencies of manual statistics are avoided, improving data reliability and processing efficiency. This step achieves automated collection and structured output of elderly usage behavior, providing traceable and tamper-proof data support for government subsidy disbursement, while also enhancing the system's overall data management capabilities and business closed-loop level.

[0079] S42 synchronizes statistical reports to the National Elderly Information Data Platform of the Government Affairs Office via HTTPS protocol, ensuring the integrity and tamper-proof nature of data transmission.

[0080] Specifically, in some implementations, synchronizing statistical reports to the National Elderly Information Data Platform of the Government Affairs Office via HTTPS is a crucial step in achieving secure data collection and government subsidy approval for this system. This step is based on HTTPS, a secure extension of the HTTP protocol, combined with Transport Layer Security (TLS) or Secure Sockets Layer (SSL) to achieve end-to-end encrypted communication, ensuring data integrity and tamper-proofing during transmission. The HTTPS protocol, by overlaying SSL / TLS on top of HTTP, uses asymmetric encryption algorithms (such as RSA or ECC) for authentication and key exchange, followed by symmetric encryption algorithms (such as AES or SM4) for encrypted data transmission, effectively preventing man-in-the-middle attacks and data leakage.

[0081] In its implementation, the electronic senior citizen card application system generates a structured data report that conforms to the interface specifications of the government affairs platform after aggregating and statistically analyzing industry usage records. This report typically includes fields such as timestamp, usage location (e.g., merchant ID), and unique identifiers for senior citizens (e.g., certificate holder code), and is encapsulated in JSON or XML format via a RESTful API interface. Before sending the report, the system uses a digital certificate issued by the government affairs platform for authentication and encrypts the data packet for transmission to the target platform via HTTPS. To ensure data tamper-proofing, the system can also digitally sign the report content. The signature algorithm can adopt the Chinese national cryptographic standard SM2 or the international standard RSA-2048. The signature result is appended to the request header or data body and verified by the government affairs platform at the receiving end.

[0082] In application scenarios, this step is typically deployed in the backend service module of the electronic senior citizen card application system, interfacing with the API gateway of the government affairs platform. The system needs to be configured with an HTTPS client, supporting TLS 1.2 and above, to ensure compatibility and security with the government affairs platform. Furthermore, to meet the requirements of high-concurrency data synchronization, the system can use asynchronous message queues (such as Kafka or RabbitMQ) for task distribution, and set up retry mechanisms and breakpoint resume functions to cope with network fluctuations or platform interface anomalies.

[0083] The technical effect of this step is that, through standardized, encrypted, and signed data synchronization mechanisms, the confidentiality and integrity of data used by the elderly are ensured during transmission, providing relevant government departments with accurate and reliable basis for subsidy approval, thereby improving policy implementation efficiency and data governance capabilities.

[0084] Furthermore, it also includes: S5, after receiving encrypted data uploaded by the NFC card reader, the electronic senior citizen card application system decrypts it based on the national cryptographic SM4 algorithm and verifies the integrity of the senior citizen identity data stored in the smart card according to the JavaCard specification.

[0085] Specifically, after the electronic senior citizen card application system receives encrypted data uploaded by the NFC card reader, the system decrypts it based on the national cryptographic algorithm SM4 and verifies the integrity of the senior citizen's identity data stored in the smart card according to the JavaCard specification. This step is a crucial link in the entire system's security verification process, ensuring the confidentiality and immutability of the senior citizen's identity information during transmission and storage.

[0086] NFC card readers establish a communication link with smart cards according to the ISO / IEC 14443 Type A / B protocol and select the electronic senior citizen card application by sending a SELECT APDU command. Subsequently, the device sends a GETDATA or READBINARY command to read the encrypted identity data within the card. Since NFC communication itself is a plaintext transmission, the SM4 algorithm is used to encrypt the data during the card writing stage to prevent eavesdropping or tampering during transmission. SM4 is a symmetric block cipher algorithm with a block length of 128 bits and a key length of 128 bits, conforming to the GB / T 37033-2018 standard, and possesses high encryption strength and good compatibility with domestic applications.

[0087] After receiving encrypted data uploaded by the card reader, the electronic senior citizen card application system first decrypts the data using the same SM4 key as the smart card, restoring the original senior citizen's identity information, such as name, cardholder code, and standardized senior citizen card number. Subsequently, the system verifies the card's data structure according to the JavaCard specification, ensuring that data fields are complete, correctly formatted, and have not been illegally modified. The JavaCard platform supports running Java Applets on smart cards, and its security mechanisms include access control, security domain isolation, and APDU instruction verification, thereby ensuring the security and consistency of the card's data.

[0088] The SM4 algorithm provides 128-bit encryption, and the key update cycle is recommended to be no more than 72 hours to enhance the system's resistance to attacks. The JavaCard specification requires applications to be deployed within the card as CAP (Converted Applet) files, supporting multi-application coexistence and secure isolation to ensure that senior citizen card applications do not interfere with other applications.

[0089] This process is widely used in offline service scenarios such as breakfast shops, parks, and senior activity centers. It achieves rapid and secure identity verification through contactless card reading and synchronizes usage records to the government platform, providing accurate data support for government subsidy disbursement. Its technological value lies in constructing a complete closed loop from data collection, encrypted transmission, secure storage to integrity verification, thereby improving the intelligence and security of services for the elderly.

[0090] S6 The system will synchronize the decrypted identity data with the government data platform in real time and update the blacklist status or cancellation status in the smart card to ensure the real-time effectiveness of subsequent verification operations.

[0091] Specifically, this step involves the system synchronizing the decrypted identity data with the government data platform in real time and updating the blacklist or cancellation status within the smart card to ensure the real-time effectiveness of subsequent verification operations. This process is a crucial link in ensuring data consistency and security throughout the entire electronic senior citizen card system.

[0092] In some implementations, after receiving encrypted card data uploaded by an NFC reader, the system first transmits the data to the electronic senior citizen card application system via HTTPS. The system uses the same national cryptographic algorithm (SM4) as the smart card to decrypt the data, restoring the senior citizen's identity information, such as the cardholder code and standardized senior citizen card number. Subsequently, the system calls the RESTful API provided by the National Senior Citizen Information Data Platform of the Government Affairs Office to query the senior citizen's current status in real time, including whether they are blacklisted or have had their card revoked. This interface supports standard JSON data format interaction and has an authentication mechanism (such as OAuth 2.0) to ensure the security and legitimacy of data access.

[0093] Optionally, after receiving the status update information from the government service platform, the system generates a corresponding APDU command, such as `SETSTATUS`, to update the application status within the smart card. This command is also encrypted using the SM4 algorithm before being sent and digitally signed with the system's private key to prevent data tampering or forgery during transmission. On the smart card, this command is parsed and executed by the JavaCard application running on the card, updating the corresponding security file status flag to ensure that the card's validity can be immediately identified during subsequent NFC verification.

[0094] Furthermore, the key technical indicators involved in this step include: the SM4 encryption algorithm has a block size of 128 bits and a key length of 128 bits, conforming to the GB / T 37033-2018 standard; HTTPS communication must support TLS 1.2 or higher to ensure the security of the transmission channel; the RESTful API interface response time should be controlled within 200ms to meet the requirements of real-time synchronization. In addition, blacklist status updates must have transactional consistency to ensure the atomicity and reliability of data during concurrent access from multiple terminals.

[0095] This step is widely used in practical applications such as community breakfast shops, parks, and senior activity centers to ensure that seniors' identity information is always up-to-date and legal when enjoying policy services. Through real-time updates of the blacklist and cancellation status, the system effectively prevents the risk of identity information being misused or abused, improving the overall security and credibility of the service.

[0096] In summary, this step, through encrypted communication, standard API interfaces, and smart card instruction mechanisms, enables dynamic updates and synchronization of identity status, providing real-time and accurate evidence for subsequent NFC verification. It is an important component in ensuring the secure closed-loop operation of the electronic senior citizen card system.

[0097] The closed-loop data processing method for electronic senior citizen cards based on smart cards in this invention employs the national cryptographic SM4 algorithm to decrypt NFC card reading data and combines it with the JavaCard specification to verify the integrity of senior citizen identity data within the smart card. This effectively prevents data tampering and forgery. Simultaneously, it synchronizes blacklist or cancellation status with the government data platform in real time, further ensuring the real-time nature and authority of the verification operation, and significantly improving the security level and management efficiency of electronic senior citizen card applications.

[0098] Example 2 This invention proposes an electronic senior citizen card and its application system based on smart cards, enabling seniors to open and update cards remotely without needing to be physically present. In various application scenarios, card verification can be performed via contactless NFC. The system records user usage frequency and reports it to the electronic senior citizen card application system for data collection, which can later be used as a basis for approving senior citizen subsidies. After user identity verification through the electronic senior citizen card application system and the national senior citizen information data platform of the government affairs office, the system encrypts and writes key identity elements such as the senior citizen's name, senior citizen card number, and cardholder code into the smart card. In application scenarios such as community restaurants, senior citizen activity centers, and community parks, data verification and recording via NFC protect the rights of senior citizens, improve convenience, and provide data for the government to distribute senior citizen subsidies.

[0099] Specifically, the main business processes of the system are as follows: Figure 2 As shown: After a user completes liveness detection and facial image capture via a mobile app, they can initiate a request to activate the electronic senior citizen card to the electronic senior citizen card application system. The electronic senior citizen card application system verifies senior citizen information and returns identity information by accessing the national senior citizen information data platform of the government affairs office. The electronic senior citizen card application system is based on the national cryptographic algorithm, generates an encrypted command stream, sends it back to the user terminal APP, and writes the senior citizen's identity information into the electronic senior citizen card application through the card-machine channel; When used in parks / charitable breakfast shops, data can be read via NFC and uploaded to the electronic senior citizen card application system for identity verification and usage records; The electronic senior citizen card application system retains verification results and usage records for relevant government departments to collect and approve subsidies for senior citizens from relevant units / venues.

[0100] Furthermore, the key data processing flow is as follows: 1) Activation of electronic senior citizen cards, such as Figure 3 The business process diagram shown below: The mobile app uses the camera to perform liveness detection and image capture, packages the captured biometric information along with the user's submitted identity information (such as name and the last 6 digits of their ID card), and transmits it to the electronic senior citizen card application system via HTTPS protocol (with TLS / SSL encryption). This ensures data security during transmission. After receiving the data, the electronic senior citizen card system calls the national senior citizen information data platform of the government affairs office through a secure API interface (such as a RESTful API) for verification. The government affairs platform returns the verification results and authoritative senior citizen identity elements (such as name, cardholder code, standardized senior citizen card number, and administrative division code of permanent residence). The electronic senior citizen card system generates a series of standard APDU (Application Protocol Data Unit) instructions based on the GlobalPlatform (GP) specification and the JavaCard specification, such as INSTALL [used to create an application on the card], LOAD [used to write encrypted data blocks such as name and ID to the card], and SET STATUS [used to activate the application], and distributes data with encryption according to the JavaCard specification; At the same time, the identity elements of the elderly are encrypted with the national cryptographic algorithm (using the national cryptographic SM4 algorithm), the card application and the system key are consistent, and the system's private key is used for digital signature to prevent the instructions from being tampered with or forged during transmission. The encrypted and signed APDU instruction packet is returned to the mobile app via HTTPS. The app then transmits the APDU instruction to the smart card in the phone as is through the SIM card communication interface provided by the phone's operating system (such as Android's OMAPI). After receiving the instruction, the smart card executes the APDU instructions sequentially, securely writing the senior citizen's identity information into the secure file area allocated for senior citizen card applications within the card. The execution result (success or failure status word) is returned via the original path.

[0101] 2) Offline NFC verification data process as follows Figure 4 As shown: In consumption scenarios (such as charity breakfast shops), the merchant's NFC card reader (or NFC-enabled POS machine) is brought close to the elderly person's mobile phone or smart card. After establishing communication according to the ISO / IEC 14443 protocol, the card reader will send a SELECT APDU command to select the senior citizen card application within the card using the electronic senior citizen card's application identifier (AID). Once a smart card is selected, the card reader sends commands such as GET DATA or READ BINARY to read the encrypted identity information stored on the card. The entire NFC communication process is in plaintext, but the core data is encrypted during card writing; therefore, even if the communication is eavesdropped on, attackers cannot obtain plaintext personal information. The card reader will package the encrypted card data it reads, the merchant ID of this device, and the timestamp of the current transaction, and send them to the electronic senior citizen card application system via the Internet (HTTPS); After receiving the data, the electronic senior citizen card system uses the corresponding key to decrypt the card data, restore the senior citizen's identity, and verify the validity of that identity (whether they are on a blacklist, whether their account has been cancelled, etc.), generating a structured verification record. This record typically contains the following immutable fields (senior citizen's unique identifier, verification timestamp, verification merchant ID, verification result), and is stored in the "Industry Usage Records" table in the database. The system returns the verification result (success / failure) to the card reader, and the merchant uses this result to provide services to the elderly.

[0102] 3) The data collection and application business processes are as follows: The electronic senior citizen card application system periodically (e.g., daily or weekly) aggregates and statistically analyzes the data in the "Industry Usage Records" table. The system can generate standardized data reports, such as: "Statistical Report on the Number of Services Served by Elderly People at XX Charity Breakfast Shop in November 2025". The data in the report all originate from the original verification records generated in Phase Two, which include time, location, and identity identifiers, ensuring the authenticity and traceability of the data. The system synchronizes statistical reports or original verification records to the National Elderly Information Data Platform of the Government Affairs Office via data interfaces (such as RESTful APIs). Relevant government departments can then use this accurate and tamper-proof data to approve and distribute subsidies to the corresponding merchants.

[0103] Furthermore, the electronic senior citizen card application and system are as follows: 1) Smart card pre-installed electronic senior citizen card application: developed based on JavaCard specifications, using national cryptographic algorithms to securely store senior citizen information, for senior citizens to open and verify cards; 2) Electronic senior citizen card application system and core functions, such as Figure 5 As shown: Information element management: The identity element information of the elderly (name, certificate holder code, standardized elderly certificate number, and administrative division code of permanent residence) is encrypted and stored using the national cryptographic standard SM4, and the data is verified and synchronized with the elderly information data platform of the government affairs office.

[0104] Smart card management and card access: Based on the JavaCard specification, generate a card writing data stream to perform card writing operations for identity information and data encryption / decryption verification.

[0105] Industry Application Store: Connects with industry applications, such as charity restaurants, charity parks, and senior activity centers, to enable seniors to verify their identities.

[0106] Industry Usage Records: Save industry application usage records and synchronize the data with the government affairs office's elderly information data platform for relevant government departments to collect and verify elderly subsidies for relevant units / venues.

[0107] In summary, this invention stores senior citizen card information via smart cards, ensuring data security and enabling remote card issuance and verification for seniors. In application scenarios such as community meal services and senior activity centers, data can be read via NFC, verified in the background, and usage recorded. This data is synchronized with the government's senior citizen information data platform, used by relevant government departments to collect and approve subsidies for seniors from relevant units and venues, ensuring senior welfare and achieving a closed-loop function for the entire process from card issuance, verification, and use. The secure electronic senior citizen card application based on JavaCard and national cryptographic algorithms: An independent senior citizen card application is built within the smart card's security chip, using national cryptographic algorithms to encrypt and store core identity data, achieving a higher level of security than ordinary QR codes or software certificates. Remote card issuance and dynamic instruction generation mechanism: Online identity verification is achieved through integration with the government platform, and APDU instruction streams are dynamically generated based on smart card specifications. Remote and secure writing of senior citizen information is achieved through the machine-card channel, replacing the offline processing mode. NFC Verification and Precise Data Recording System: In application scenarios, NFC technology enables contactless and automated identity verification, and simultaneously generates a triplet verification record containing time, location, and user in the background system, providing precise data support for subsidy disbursement that is impossible to achieve with traditional methods. "Card-Terminal-Cloud" Closed-Loop System: Seamlessly connects smart cards, mobile terminals, business platforms, and government data platforms, realizing a complete business closed loop from identity authentication and card management to scenario verification and data empowerment.

[0108] Example 3 To achieve the above embodiments, such as Figure 6 As shown, this embodiment also provides a smart card-based electronic senior citizen card data closed-loop processing device 10, including: The biometrics collection and identity verification module 100 is used to collect users’ biometrics information and submit their identity information through a mobile application, call the government data platform interface for remote identity verification, and generate encrypted elderly identity element data. The APDU instruction generation and data writing module 200 is used to dynamically generate APDU instruction streams based on the JavaCard specification and write encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel. The NFC data reading and verification record generation module 300 is used to read the encrypted data of the smart card in the business scenario through the NFC card reader, generate a triplet verification record by combining the merchant identifier and the transaction timestamp, and feed the verification result back to the merchant terminal. The data synchronization and subsidy chain generation module 400 is used to synchronize the triplet verification records to the government data platform to form a traceable subsidy data chain for government approval and subsidy disbursement.

[0109] Furthermore, the biometric data collection and identity verification module is also used for: Biometric and identity information is transmitted via HTTPS with TLS / SSL encryption to ensure data security during transmission. The national cryptographic algorithm SM4 is used to encrypt the elderly identity data returned by the government data platform, generating an encrypted data format that conforms to the JavaCard specification.

[0110] Furthermore, the APDU instruction generation and data writing module is also used for: Generate INSTALL instructions conforming to the GlobalPlatform specification to create the senior card application, LOAD instructions to write encrypted data blocks, and SETSTATUS instructions to activate the application, and transmit the instructions to the smart card through the Android OMAPI interface; The system's private key is used to digitally sign the APDU instruction packet to ensure that the instruction is tamper-proof and forgery-proof during transmission.

[0111] Furthermore, the NFC data reading and verification record generation module is also used for: The card reader sends a SELECT APDU command to select the application on the electronic senior citizen card using the application identifier AID, and sends a GETDATA command to read the encrypted identity information. After the system decrypts the card data using the corresponding key, it verifies whether the identity is on a blacklist or has been cancelled, and generates an immutable record containing the elderly person's unique identifier, verification timestamp, merchant ID, and verification result.

[0112] The smart card-based electronic senior citizen card data closed-loop processing device of this invention realizes remote secure writing and contactless automatic verification of senior citizens' identity information, constructs an accurate and traceable subsidy data closed-loop system, and effectively improves service convenience and data credibility.

[0113] In the description of this specification, the references to "one embodiment," "some embodiments," "example," "specific example," or "some examples" refer to a specific feature, structure, material, or characteristic described in connection with that embodiment or example, which is included in at least one embodiment or example of the invention. In this specification, the illustrative expressions of the above terms do not necessarily refer to the same embodiment or example. Furthermore, the specific features, structures, materials, or characteristics described may be combined in any suitable manner in one or more embodiments or examples. Moreover, without contradiction, those skilled in the art can combine and integrate the different embodiments or examples described in this specification, as well as the features of different embodiments or examples.

[0114] Furthermore, the terms "first" and "second" are used for descriptive purposes only and should not be construed as indicating or implying relative importance or implicitly specifying the number of indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include at least one of that feature. In the description of this invention, "a plurality of" means at least two, such as two or three, unless otherwise explicitly specified.

Claims

1. A closed-loop data processing method for electronic senior citizen cards based on smart cards, characterized in that, include: S1 collects users' biometric information and submits their identity information through a mobile application, calls the government data platform interface to perform remote identity verification, and generates encrypted elderly identity element data. S2 dynamically generates APDU instruction streams based on the JavaCard specification and writes encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel. S3 reads the encrypted data of the smart card in the business scenario through the NFC card reader, generates a triplet verification record by combining the merchant identifier and the transaction timestamp, and feeds back the verification result to the merchant terminal. S4 synchronizes the triplet verification records to the government data platform, forming a traceable subsidy data chain for government approval and subsidy disbursement.

2. The method as described in claim 1, characterized in that, The process involves collecting user biometric information and submitting identity information via a mobile application, then remotely verifying identity by calling the government data platform interface, and generating encrypted elderly person identity data, including: S11 uses HTTPS protocol with TLS / SSL encryption to transmit biometric and identity information, ensuring data security during transmission. S12 uses the national cryptographic SM4 algorithm to encrypt the elderly identity data returned by the government data platform, generating an encrypted data format that conforms to the JavaCard specification.

3. The method as described in claim 1, characterized in that, The method of dynamically generating APDU instruction streams based on the JavaCard specification and writing encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel includes: S21 generates INSTALL instructions conforming to the GlobalPlatform specification for creating the senior citizen card application, LOAD instructions for writing encrypted data blocks, and SETSTATUS instructions for activating the application, and transmits the instructions to the smart card through the Android OMAPI interface; S22 uses the system's private key to digitally sign the APDU instruction packet, ensuring that the instruction is tamper-proof and forgery-proof during transmission.

4. The method as described in claim 1, characterized in that, The method of reading encrypted data from a smart card using an NFC card reader in a business scenario, generating a triplet verification record by combining the merchant identifier and transaction timestamp, and feeding the verification result back to the merchant terminal also includes: S31, the card reader sends a SELECT APDU command to select the application in the card through the application identifier AID of the electronic senior citizen card, and sends a GETDATA command to read the encrypted identity information; S32, after the system decrypts the card data using the corresponding key, it verifies whether the identity is on the blacklist or has been cancelled, and generates an immutable record containing the elderly person's unique identifier, verification timestamp, merchant ID, and verification result.

5. The method as described in claim 1, characterized in that, The process of synchronizing the triplet verification records to the government data platform to form a traceable subsidy data chain for government approval and subsidy disbursement also includes: S41 uses a RESTful API interface to aggregate verification records from the industry usage record table daily and generate standardized statistical reports. S42 synchronizes statistical reports to the National Elderly Information Data Platform of the Government Affairs Office via HTTPS protocol, ensuring the integrity and tamper-proof nature of data transmission.

6. The method as described in claim 1, characterized in that, Also includes: S5, after receiving encrypted data uploaded by the NFC card reader, the electronic senior citizen card application system decrypts it based on the national cryptographic SM4 algorithm and verifies the integrity of the senior citizen identity data stored in the smart card through the JavaCard specification. S6 The system will synchronize the decrypted identity data with the government data platform in real time and update the blacklist status or cancellation status in the smart card to ensure the real-time effectiveness of subsequent verification operations.

7. A data closed-loop processing device for electronic senior citizen cards based on smart cards, characterized in that, include: The biometrics collection and identity verification module is used to collect users’ biometrics information and submit their identity information through a mobile application, call the government data platform interface for remote identity verification, and generate encrypted elderly identity data. The APDU instruction generation and data writing module is used to dynamically generate APDU instruction streams based on the JavaCard specification and write encrypted identity element data into the secure storage area of ​​the smart card through the card-machine communication channel. The NFC data reading and verification record generation module is used to read the encrypted data of the smart card in the business scenario through the NFC card reader, generate a triplet verification record by combining the merchant identifier and the transaction timestamp, and feed the verification result back to the merchant terminal. The data synchronization and subsidy chain generation module is used to synchronize the triplet verification records to the government data platform to form a traceable subsidy data chain for government approval and subsidy disbursement.

8. The apparatus as claimed in claim 7, characterized in that, The biometric data collection and identity verification module is also used for: Biometric and identity information is transmitted via HTTPS with TLS / SSL encryption to ensure data security during transmission. The national cryptographic algorithm SM4 is used to encrypt the elderly identity data returned by the government data platform, generating an encrypted data format that conforms to the JavaCard specification.

9. The apparatus as claimed in claim 7, characterized in that, The APDU instruction generation and data writing module is also used for: Generate INSTALL instructions conforming to the GlobalPlatform specification to create the senior card application, LOAD instructions to write encrypted data blocks, and SETSTATUS instructions to activate the application, and transmit the instructions to the smart card through the Android OMAPI interface; The system's private key is used to digitally sign the APDU instruction packet to ensure that the instruction is tamper-proof and forgery-proof during transmission.

10. The apparatus as claimed in claim 7, characterized in that, The NFC data reading and verification record generation module is also used for: The card reader sends a SELECT APDU command to select the application on the electronic senior citizen card using the application identifier AID, and sends a GETDATA command to read the encrypted identity information. After the system decrypts the card data using the corresponding key, it verifies whether the identity is on a blacklist or has been cancelled, and generates an immutable record containing the elderly person's unique identifier, verification timestamp, merchant ID, and verification result.

Images