Intelligent card reader capable of switching information sources and used for safety analysis

Abstract

The utility model provides an intelligent card reader capable of switching information sources and used for safety analysis. The intelligent card reader is composed of a substrate, an injection mode selection switch, a monitoring port, an injection port and a card seat, wherein the injection mode selection switch, the monitoring port, the injection port and the card seat are arranged on the substrate. When the CLK injection mode selection switch is switched to the internal source access, the card reader and the switching node A form an access through the switching end of the CLK injection mode selection switch, and the CLK injection port and the card reader are both communicated with the card seat; and when the CLK injection mode selection switch is switched to an external source access, the CLK injection port is directly connected with the intelligent card in the card seat through the switching node A, and the card reader is communicated with the grounding point through the switching node B, so that a CLK signal in the card reader is physically isolated from a CLK signal injected into the intelligent card. The system has the advantages of having a safety analysis interface and improving the efficiency of an analysis process and the accuracy of an evaluation result. The device has a function of switching information sources, and can fully ensure that analysis signals injected by the analysis instrument do not influence analysis results and do not damage the card reader.

Description

Technical Field

[0001] The utility model relates to the field of integrated circuits and information security, and in particular to a smart card reader capable of switching signal sources and used for security analysis. Background Art

[0002] Smart cards are common cards with integrated circuits encapsulated within them. They comply with ISO 7816 and are commonly used in bank cards, embedded systems, mobile terminals, and other applications, often serving as a carrier for identity authentication and encryption / decryption operations. To ensure the security of identity and password data, security analysis can be performed by manipulating and monitoring the smart card's interface signals (RST, VCC, CLK, IO, and GND) during interaction between the smart card and the reader. However, this presents the following challenges:

[0003] 1. Traditional card readers do not have a security analysis interface, resulting in low security analysis efficiency and inaccurate analysis results.

[0004] 2. It is impossible to isolate the input analysis signal from the card reader's internal signal during testing. As a result, during fault analysis, the card reader's internal signal not only affects the magnitude of the currently input analysis signal, but is also affected by the input analysis signal. As a result, the affected signal is input to the smart card under test, resulting in inaccurate analysis results.

[0005] 3. The interaction between the smart card and the card reader is an internal signal. If an external analysis signal is injected, the interaction between the card reader and the smart card may fail, causing damage to the card reader and making security analysis impossible.

[0006] Therefore, a card reader capable of switching signal sources and isolating the internal source signal of the card reader is needed to solve the above problems. Utility Model Content

[0007] The utility model provides a smart card reader with switchable signal sources for security analysis, which is used to solve the problems that the analysis results of traditional card readers are inaccurate and the internal source signal of the card reader cannot be isolated from the injected signal.

[0008] To achieve the above objectives, the present invention provides a smart card reader with switchable signal sources for security analysis. The smart card reader comprises a substrate, an injection mode selector switch, a monitoring port, an injection port, and a card holder. Each injection mode selector switch includes a CLK injection mode selector switch and a VCC injection mode selector switch. Each monitoring port includes a CLK monitoring port and a VCC monitoring port. Each injection port includes a CLK injection port and a VCC injection port. When the CLK injection mode selector switch is switched to an internal source path, the card reader communicates with the card holder via a path formed by the switching end of the CLK injection mode selector switch and switch node A, with both the CLK injection port and the card reader connected to the card holder. When the CLK injection mode selector switch is switched to an external source path, the CLK injection port is directly connected to the smart card in the card holder via switch node A, and the card reader is connected to a ground point via switch node B, thereby physically isolating the CLK signal within the card reader from the CLK signal injected into the smart card.

[0009] When the VCC injection mode selection switch is switched to the internal source path, the card reader is connected to the card holder through the path formed by the switching end of the VCC injection mode selection switch and the switching node C, and the VCC injection port and the card reader are both connected to the card holder; when the VCC injection mode selection switch is switched to the external source path, the VCC injection port is directly connected to the smart card in the card holder via the switching node C, and the card reader is connected to the ground point via the switching node D, thereby physically isolating the VCC signal inside the card reader from the VCC signal injected into the smart card.

[0010] As a preferred embodiment of the above technical solution, preferably, there is a first virtual load between the switching node B and the grounding point.

[0011] As a preferred embodiment of the above technical solution, preferably, the first virtual load is a pure resistive load or a combined load of resistors and capacitors in parallel.

[0012] As a preferred embodiment of the above technical solution, preferably, there is a second virtual load between the switching node D and the grounding point.

[0013] As a preferred embodiment of the above technical solution, preferably, the second virtual load is a pure resistive load.

[0014] As a preferred embodiment of the above technical solution, preferably, the CLK monitoring port and the VCC monitoring port are connected to an external monitor.

[0015] As a preferred embodiment of the above technical solution, preferably, the monitoring port further includes an RST monitoring port and an IO monitoring port.

[0016] As a preferred embodiment of the above technical solution, preferably, an auxiliary port group is further provided on the substrate.

[0017] As a preferred embodiment of the above technical solution, preferably, a communication interface for power supply is provided on the substrate.

[0018] The present invention provides a smart card reader with switchable signal sources for security analysis. The smart card reader comprises a baseboard, an injection mode selector switch, a monitoring port, an injection port, and a card holder. Each injection mode selector switch includes a CLK injection mode selector switch and a VCC injection mode selector switch. Each monitoring port includes a CLK monitoring port and a VCC monitoring port. Each injection port includes a CLK injection port and a VCC injection port. When the CLK injection mode selector switch is switched to the internal source path, the card reader communicates with the card holder via the path formed by the switching end of the CLK injection mode selector switch and switching node A, with both the CLK injection port and the card reader connected to the card holder. When the CLK injection mode selector switch is switched to the external source path, the CLK injection port is directly connected to the smart card in the card holder via switching node A, and the card reader is connected to a ground point via switching node B, thereby physically isolating the CLK signal within the card reader from the CLK signal injected into the smart card.

[0019] The advantages of this utility model are that it has a secure analysis interface, which can improve the efficiency of the analysis process and the accuracy of the evaluation results. It has the function of switching the signal source, which can fully ensure that the analysis signal injected by the analysis instrument does not affect the analysis results and will not damage the card reader. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief introduction will be given below to the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0021] Figure 1 Shown is a structural diagram of the present utility model.

[0022] Figure 2 The schematic diagram of CLK source switching is shown.

[0023] Figure 3 The schematic diagram of VCC signal source switching is shown. DETAILED DESCRIPTION

[0024] To make the purpose, technical solutions, and advantages of the embodiments of the present invention more clear, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings of the embodiments of the present invention. Obviously, the embodiments described are only part of the embodiments of the present invention, not all of them. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without making creative efforts shall fall within the scope of protection of the present invention.

[0025] The present invention provides a smart card reader with switchable signal sources for security analysis, comprising a substrate 101, an injection mode selection switch, a monitoring port, an injection port, a card holder 113, an auxiliary port group, and a communication interface 102. The auxiliary port group includes a GATE port 116, an EGY port 117, and a BP port 118.

[0026] First, let's describe the appearance of the card reader:

[0027] like Figure 1 As shown, an integrated circuit window is provided on one side of the upper surface of the substrate 101 , a card seat 113 is provided on the lower surface corresponding thereto, and the indicator light group and the card seat 113 are correspondingly provided on the upper surface.

[0028] The remaining sides of the upper surface of the substrate 101 are provided with an auxiliary port group (GATE port 116, EGY port 117, BP port 118), a multi-purpose port, a clock port, a communication interface 102, a communication mode selection switch 103, a CLK injection mode selection switch 104, a VCC injection mode selection switch 105, a VCC injection port 106, a CLK injection port 107, an RST monitoring port 108, an IO monitoring port 109, a VCC monitoring port 110, a CLK monitoring port 111 and a SPA port 112.

[0029] Furthermore, for the CLK switching circuit, the CLK injection mode selection switch 104 includes a switching terminal, a switching node A, and a switching node B. When the switching terminal S1 of the CLK injection mode selection switch 104 is switched to switching node A, the card reader, CLK injection port 107, card holder 113, and the smart card in the card holder 113 form an internal test path. When the switching terminal S1 of the CLK injection mode selection switch 104 is switched to switching node B, the CLK injection port 107, card holder 113, and the smart card in the card holder 113 form an external test path, and the card reader and the first dummy load form a standby path via switching node B. The first dummy load is a pure resistive load or a combination of a resistor and a capacitor in parallel.

[0030] For the VCC switching circuit, the VCC injection mode selector switch includes a switching terminal, a switching node C, and a switching node D. When the switching terminal S2 of the VCC injection mode selector switch is switched to switching node C, the card reader, VCC injection port 106, card holder 113, and the smart card inside card holder 113 form an internal test path. When the switching terminal S2 of the VCC injection mode selector switch is switched to switching node D, the VCC injection port 106, card holder 113, and the smart card inside card holder 113 form an external test path, and the card reader and the second dummy load form a standby path via switching node B. The second dummy load is a purely resistive load.

[0031] The arrangement of the remaining interfaces on the substrate is the same as that in the prior art and will not be described in detail here.

[0032] The present invention will now be described in conjunction with the specific implementation process:

[0033] Communication interface 102 is the interface for communication between the present invention and the application end, and uses a USB power supply to power each port on the baseboard. Communication interface 102 supports the communication protocol of USB or UART. The communication protocol can be switched between USB and UART by switching the communication mode selector switch 103 (model DS-13C1A3QN). The model of communication interface 102 can be: 670689000.

[0034] The card holder 113 is used to support the smart card. After the smart card is inserted into the card holder 113, the smart card can be fixed inside for subsequent analysis.

[0035] After the staff connects the security analysis instrument to the CLK injection port 107 (model SMB-JWE), the staff switches the CLK injection mode selection switch 104 according to the needs to select the source of the smart card interface signal CLK during security analysis, thereby switching between the internal source and the external source to achieve the purpose of switching the internal and external signal sources, such as Figure 2 shown.

[0036] When the injection mode selection switch 104 is switched to the internal source (the connection path of the CLK injection mode selection switch 104 is the switch end S1-switch node A), the smart card interface signal CLK comes from the internal and external security analysis instruments of the card reader. At this time, the analysis signal injected by the security analysis instrument will affect both the smart card and the card reader. Specifically, during the actual injection process, the external CLK signal will also be transmitted to the card reader through the switch node A and the switch end S1. After receiving the external CLK signal, the CLK signal inside the card reader will be superimposed with the external CLK signal and then input into the smart card.

[0037] When the staff switches the CLK injection mode selector switch 104 to an external source as needed (the connection path of the CLK injection mode selector switch 104 is switch terminal S1 - switch node A), the smart card interface signal CLK originates solely from the externally installed security analyzer. At this point, the analysis signal injected by the security analyzer is isolated from the card reader via a circuit and does not affect the card reader. The card reader is connected to a first dummy load via S1 - switch node B to maintain normal operation of the card reader. The first dummy load can be set as a purely resistive load (consisting solely of resistors), with an optimal resistance range of 10k to 100k ohms. For EMC considerations, the first dummy load can also be set as a parallel resistor-capacitor combination (resistors and capacitors in parallel), with an optimal resistance range of 1k to 10k ohms and an optimal capacitance range of 0.01uF to 0.22uF.

[0038] The CLK injection port 107 is an interface for a security analysis instrument to inject an analysis signal into the smart card, so that staff can analyze the security of the smart card.

[0039] For using VCC injection mode:

[0040] After the staff connects the security analysis instrument used for VCC injection test to the VCC injection port 106 (model SMB-JWE), they flip the VCC injection mode selection switch 105 according to the needs to select the VCC injection mode, so that the source of the smart card interface signal VCC can be switched between internal and external sources, such as Figure 3 shown.

[0041] When the VCC injection mode selection switch 105 selects internal source (the connection path of the VCC injection mode selection switch is switch terminal S2-switch node C), the smart card interface signal VCC comes from the internal card reader and the external security analysis instrument. At this time, the analysis signal injected by the security analysis instrument will affect both the smart card and the card reader. Specifically, during the actual injection process, the external VCC signal will also be transmitted to the card reader through switch node C and switch terminal S2. After receiving the external VCC signal, the VCC signal inside the card reader will be superimposed with the external VCC signal and then input into the smart card.

[0042] When the VCC injection mode selector switch 105 is set to an external source (the VCC injection mode selector switch path is from switch terminal S2 to switch node C), the smart card interface signal VCC originates solely from the external security analyzer. The analysis signal injected by the security analyzer is isolated from the card reader via a circuit, thus having no impact on the card reader. The card reader and the second dummy load maintain normal operation and can be set as a purely resistive load, with an optimal resistance range of 1k to 10k ohms.

[0043] Among them, the VCC injection port 106106 is an interface for the security analysis instrument to inject analysis signals into the smart card, so that the staff can analyze the security of the smart card.

[0044] During the CLK / VCC test, RST monitoring port 108, IO monitoring port 109, VCC monitoring port 110, and CLK monitoring port 111 monitor the smart card's RST, IO, VCC, and CLK interface signals, respectively. Connected monitoring devices can monitor the status of each interface signal in real time. SPA port 112 can monitor the smart card's operating current and power consumption through its corresponding monitoring ports, enabling side-channel security analysis.

[0045] The VCC status indicator light 114 is an LED for indicating the status of the smart card interface signal VCC; the IO status indicator light 115 is an LED for indicating the status of the smart card interface signal IO.

[0046] In the auxiliary port group: GATE port 116 is used to generate a gating signal (model SMB-JWE), EGY port 117 is used to generate an energy level signal (model SMB-JWE), and BP port 118 is used to generate a pulse signal (model SMB-JWE). All three are used to assist the safety analysis instrument in its operation. The actual model is selected by the staff to match the base chip.

[0047] Multipurpose port 119 is used for synchronization, input, and output, and its model may be SMB-JWE. Clock port 120 is used for clock output. The interaction between multipurpose port 119 and clock port 120 enables multiple card readers of the present invention to work together, improving the efficiency and convenience of the security analysis process.

[0048] Among them, the RF connector model SMB-JWE can be configured by staff to connect to ports for different purposes according to actual needs.

[0049] The card reader provided by the utility model integrates smart card communication, fault injection security analysis, side channel security analysis, observation and other functions into one, which can improve the efficiency of the analysis process and the accuracy of the evaluation results. The switchable signal source function ensures that the analysis signal injected by the analysis instrument will not damage the card reader.

[0050] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the above embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the above embodiments, or replace some or all of the technical features therein with equivalents. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the scope of the technical solutions of the embodiments of the present invention.

Claims

1. A smart card reader capable of switching signal sources and used for security analysis, characterized in that: The smart card reader is composed of a substrate and an injection mode selection switch, a monitoring port, an injection port and a card holder arranged on the substrate; Each of the injection mode selection switches includes a CLK injection mode selection switch and a VCC injection mode selection switch; Each of the monitoring ports includes a CLK monitoring port and a VCC monitoring port; Each of the injection ports includes a CLK injection port and a VCC injection port; When the CLK injection mode selection switch is switched to the internal source path, the card reader is connected to the card holder through the path formed by the switch end of the CLK injection mode selection switch and the switch node A, and the CLK injection port and the card reader are both connected to the card holder; when the CLK injection mode selection switch is switched to the external source path, the CLK injection port is directly connected to the smart card in the card holder via the switch node A, and the card reader is connected to the ground point via the switch node B, thereby physically isolating the CLK signal inside the card reader from the CLK signal injected into the smart card; When the VCC injection mode selection switch is switched to the internal source path, the card reader is connected to the card holder through the path formed by the switching end of the VCC injection mode selection switch and the switching node C, and the VCC injection port and the card reader are both connected to the card holder; when the VCC injection mode selection switch is switched to the external source path, the VCC injection port is directly connected to the smart card in the card holder via the switching node C, and the card reader is connected to the ground point via the switching node D, thereby physically isolating the VCC signal inside the card reader from the VCC signal injected into the smart card.

2. The smart card reader according to claim 1, wherein: There is a first virtual load between the switching node B and the grounding point.

3. The smart card reader according to claim 2, wherein: The first virtual load is a pure resistive load or a combined load of resistors and capacitors in parallel.

4. The smart card reader according to claim 1, wherein: There is a second virtual load between the switching node D and the grounding point.

5. The smart card reader according to claim 4, wherein: The second virtual load is a pure resistive load.

6. The smart card reader according to claim 1, wherein: The CLK monitoring port and the VCC monitoring port are connected to an external monitor.

7. The smart card reader according to claim 1, wherein: The monitoring port also includes an RST monitoring port and an IO monitoring port.

8. The smart card reader according to claim 1, wherein: An auxiliary port group is also provided on the substrate.

9. The smart card reader according to claim 1, wherein: A communication interface for power supply is provided on the substrate.

Images