Key determination method and apparatus, electronic device, and readable storage medium

Abstract

The present application relates to the technical field of electronic products, and discloses a key determination method and apparatus, an electronic device, and a readable storage medium. The key determination method provided in embodiments of the present application comprises: acquiring first verification data sent by a card reading device, the first verification data being data obtained by performing first verification on a third sector among at least one first sector by the card reading device; determining at least one candidate key on the basis of the first verification data; acquiring second verification data sent by the card reading device, the second verification data being data obtained by performing second verification on the third sector by the card reading device; and determining a target key from among the at least one candidate key on the basis of the second verification data, the target key being used for reading sector data in a fourth sector, and the fourth sector being: a sector, corresponding to the third sector, among at least one second sector.

Description

Key determination method, device, electronic device and readable storage medium

[0001] CROSS-REFERENCE TO RELATED APPLICATIONS

[0002] This application claims priority to the Chinese patent application filed with the China Patent Office on November 16, 2023, with application number 202311529859.7 and invention name “Key determination method, device, electronic device and readable storage medium”. The entire contents of the Chinese patent application are incorporated herein by reference. Technical Field

[0003] The present application belongs to the technical field of electronic products, and specifically relates to a key determination method, device, electronic device and readable storage medium. Background Art

[0004] Currently, electronic devices can use Near Field Communication (NFC) technology to read sector data from each of the multiple sectors of a physical card, and copy the read sector data to the corresponding sectors in the virtual card of the electronic device. In this way, when the user needs to use the physical card, he can directly use the virtual card of the electronic device to interact with the card reader to realize the corresponding functions of the physical card.

[0005] However, since some of the multiple sectors of the physical card may be encrypted sectors, the electronic device may not be able to read the sector data from the certain sectors because it is uncertain about the keys of the certain sectors. Therefore, the electronic device may be unable to copy the sector data in certain sectors to the corresponding sectors in the virtual card of the electronic device. As a result, the user cannot use the virtual card of the electronic device to interact with the card reading device.

[0006] Summary of the Invention

[0007] The purpose of the embodiments of the present application is to provide a key determination method, device, electronic device and readable storage medium, which can solve the problem of being unable to use a virtual card of an electronic device to interact with a card reading device.

[0008] In a first aspect, an embodiment of the present application provides a key determination method, wherein a virtual card is provided in an electronic device, the virtual card including at least one first sector, each first sector being used to store sector data in a second sector of a physical card, the method comprising: obtaining first verification data sent by a card reading device, the first verification data being data obtained by the card reading device performing a first verification on a third sector of at least one first sector; determining at least one candidate key based on the first verification data; obtaining second verification data sent by the card reading device, the second verification data being data obtained by the card reading device performing a second verification on the third sector; determining a target key from at least one candidate key based on the second verification data, the target key being used to read sector data in a fourth sector, the fourth sector being: a sector corresponding to the third sector in at least one second sector.

[0009] In a second aspect, embodiments of the present application provide a key determination device, comprising a virtual card, the virtual card comprising at least one first sector, each first sector being used to store sector data from a second sector of a physical card. The key determination device comprises: an acquisition module configured to acquire first verification data sent by a card reader, the first verification data being data obtained by the card reader performing a first verification on a third sector of the at least one first sector; a processing module configured to determine at least one candidate key based on the first verification data acquired by the acquisition module; the acquisition module further configured to acquire second verification data sent by the card reader, the second verification data being data obtained by the card reader performing a second verification on the third sector; and the processing module further configured to determine a target key from the at least one candidate key based on the second verification data acquired by the acquisition module. The target key is used to read sector data from a fourth sector, the fourth sector being the sector of the at least one second sector corresponding to the third sector. The second verification data is data obtained by the card reader performing another verification on the third sector.

[0010] In a third aspect, an embodiment of the present application provides an electronic device comprising a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps of the method described in the first aspect are implemented.

[0011] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.

[0012] In a fifth aspect, an embodiment of the present application provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the steps of the method described in the first aspect.

[0013] In a sixth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the steps of the method described in the first aspect.

[0014] In an embodiment of the present application, a virtual card is provided in an electronic device, which includes at least one first sector for storing sector data in at least one second sector of a physical card, and the electronic device can first obtain first verification data sent by the card reader device, obtained by the card reader device performing a first verification on a third sector of the at least one first sector, and determine at least one candidate key based on the first verification data, and then obtain second verification data sent by the card reader device, obtained by the card reader device performing a second verification on the third sector, so that the electronic device can determine a target key from the at least one candidate key based on the second verification data, and the target key is used to read the sector data in the fourth sector corresponding to the third sector in the at least one second sector. Since the fourth sector of the physical card (i.e., the sector corresponding to the third sector of the virtual card) is an encrypted sector, the electronic device can first determine at least one candidate key based on the first verification data obtained by the card reader for the first verification of the third sector, and then directly determine the target key of the fourth sector from the at least one candidate key based on the second verification data obtained by the card reader for the second verification of the third sector. In this way, the electronic device can directly use the target key to read the sector data from the fourth sector, and will not be unable to read the sector data from the fourth sector due to uncertainty about the key of the fourth sector. Therefore, the situation where the electronic device cannot copy the sector data in the fourth sector to the third sector can be avoided. In this way, the problem that the user cannot use the virtual card to interact with the card reader is solved. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] FIG1 is a flow chart of a key determination method according to an embodiment of the present invention;

[0016] FIG2 is a second flow chart of a key determination method according to an embodiment of the present application;

[0017] FIG3 is a third flow chart of a key determination method according to an embodiment of the present application;

[0018] FIG4 is a fourth flow chart of a key determination method according to an embodiment of the present application;

[0019] FIG5 is a fifth flow chart of a key determination method according to an embodiment of the present application;

[0020] FIG6 is a schematic diagram of the structure of a key determination device provided in an embodiment of the present application;

[0021] FIG7 is a schematic diagram of a hardware structure of a key determination device according to an embodiment of the present application;

[0022] FIG8 is a second schematic diagram of the hardware structure of the key determination device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0023] The following will be combined with the accompanying drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the embodiments described are part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field are within the scope of protection of this application.

[0024] The terms "first," "second," and the like in the specification and claims of this application are used to distinguish similar objects, and are not used to describe a specific order or precedence. It should be understood that the terms used in this manner are interchangeable where appropriate, so that the embodiments of this application can be implemented in an order other than that illustrated or described herein, and that the objects distinguished by "first," "second," and the like are generally of the same type, and do not limit the number of objects; for example, the first object can be one or more. In addition, the term "and / or" in the specification and claims refers to at least one of the connected objects, and the character " / " generally indicates that the objects connected are in an "or" relationship.

[0025] The terms "at least one" and "at least one of" in the specification and claims of this application refer to any one, any two, or a combination of more than two of the objects included. For example, at least one of a, b, and c can be represented by: "a", "b", "c", "a and b", "a and c", "b and c", and "a, b, and c", where a, b, and c can be single or multiple. Similarly, "at least two" means two or more, and its meaning is similar to "at least one".

[0026] The key determination method, device, electronic device, and readable storage medium provided in the embodiments of the present application are described in detail below with reference to the accompanying drawings through specific embodiments and their application scenarios.

[0027] The key determination method provided in the embodiment of the present application can be executed by a key determination device, an electronic device, or a functional module or entity in an electronic device. In the embodiment of the present application, the key determination method provided in the embodiment of the present application is illustrated by taking an electronic device executing the key determination method as an example.

[0028] Figure 1 shows a schematic flow chart of a key determination method provided in an embodiment of the present application. The electronic device is provided with a virtual card, which includes at least one first sector, each of which is used to store sector data from a second sector of a physical card. As shown in Figure 1, the key determination method provided in an embodiment of the present application may include the following steps 101 to 104.

[0029] Step 101: The electronic device obtains first verification data sent by a card reader.

[0030] In an embodiment of the present application, the above-mentioned virtual card can be an NFC chip set in an electronic device, which is connected to the NFC coil of the electronic device, and the sector data of the physical card can be stored in the NFC chip, so that the NFC chip can use the sector data of the physical card through the NFC coil to interact with the card reading device.

[0031] In some embodiments of the present application, the physical card may be any one of the following: an access card, a public transportation card, a shopping card, a payment card, etc.

[0032] In some embodiments of the present application, the card reading device may be any one of the following: a mobile phone, a point of sales (POS) machine.

[0033] For example, assuming that the physical card is an access control card, the card reading device may be an access control POS machine.

[0034] In the embodiment of the present application, the first verification data is data obtained by the card reader performing a first verification on the third sector in the at least one first sector.

[0035] In some embodiments of the present application, the above-mentioned third sector can be: any sector in at least one first sector that does not store sector data, and the third sector corresponds to the encrypted sector in at least one second sector (for example, the fourth sector in the following embodiment), that is, the third sector is used to store the sector data in the encrypted sector (for example, the fourth sector in the following embodiment).

[0036] It can be understood that since the electronic device is not sure of the key of the encrypted sector in at least one second sector at this time, the electronic device cannot read the sector data in the encrypted sector, and thus the electronic device cannot copy the sector data in the encrypted sector to the third sector. As a result, no sector data is stored in the third sector.

[0037] In some embodiments of the present application, an electronic device may first create a virtual card in the electronic device, and then, based on a user's operation, establish an NFC connection with the physical card through the virtual card, read sector data in at least one second sector of the physical card through the NFC connection, and copy the sector data in a portion of the second sector (i.e., the unencrypted sector) of the physical card read to a corresponding portion of the first sector. Thus, the electronic device may establish an NFC connection with a card reader through the virtual card based on the user's operation, and receive a first verification request message from the card reader through the NFC connection, the first verification request message being used to request verification of a key for another portion of the first sector. At this point, the electronic device may, based on the first verification request message, send a random number (e.g., the second random number in the following embodiments) to the card reader through the NFC connection, so that the card reader can send first verification data to the electronic device through the NFC connection based on the random number, and the electronic device can then receive the first verification data.

[0038] Optionally, after the electronic device copies the sector data in the portion of the second sector of the physical card read to the corresponding portion of the first sector, the electronic device may fill the other portion of the first sector with preset data, wherein the preset data may be binary data, such as binary data "0".

[0039] Optionally, when the electronic device receives the first verification request message, the electronic device may use a linear feedback shift register to generate the above-mentioned random number in multiple clock cycles, or the electronic device may determine a preset random number as the above-mentioned random number.

[0040] The electronic device can control the linear feedback shift register to shift left by one bit in each clock cycle to output a number, and so on, to output multiple numbers in multiple clock cycles, thereby obtaining the above-mentioned random number. It is understood that the above-mentioned random number includes the multiple numbers.

[0041] Optionally, the electronic device may send the random number mentioned above to the card reader in plain text.

[0042] Step 102: The electronic device determines at least one candidate key based on the first verification data.

[0043] In an embodiment of the present application, the at least one candidate key includes a key of a second sector (eg, the fourth sector in the following embodiment) corresponding to the third sector.

[0044] In some embodiments of the present application, the electronic device may use the first verification data to reversely deduce at least one candidate key.

[0045] In some embodiments of the present application, the first verification data includes first encrypted data, which is data obtained by encrypting a first random number using a first key stream, where the first key stream is derived based on a target key. Optionally, as shown in FIG. 1 , step 102 can be implemented as follows, as shown in FIG. 2 .

[0046] Step 102a: The electronic device calculates at least one candidate key based on the first encrypted data and the first random number.

[0047] In the embodiment of the present application, the first random number is determined based on the second random number sent by the electronic device.

[0048] In some embodiments of the present application, the electronic device may first send a second random number to the card reading device, so that the card reading device can use the first algorithm to calculate the first random number based on the second random number, and use the second algorithm to generate a first key stream based on the target key, and use the third algorithm to encrypt the first random number using the first key stream to obtain first encrypted data, and send the first encrypted data to the electronic device. Then the electronic device can receive the first encrypted data and use the first algorithm to calculate the first random number based on the second random number. Then the electronic device can calculate at least one candidate key based on the first encrypted data and the first random number.

[0049] Optionally, the first algorithm may be a shift algorithm, wherein the card reader may employ the first algorithm to shift the second random number N times to obtain the first random number, and the electronic device may employ the first algorithm to shift the second random number N times to obtain the first random number, where N is a positive integer.

[0050] It should be noted that for the description of the key stream generation algorithm, reference can be made to the specific description in the relevant technology, and the embodiments of the present application will not be repeated here.

[0051] Exemplarily, N may be 64. That is, the card reader may use the first algorithm to shift the second random number 64 times to obtain the first random number, and the electronic device may use the first algorithm to shift the second random number 64 times to obtain the first random number.

[0052] It should be noted that for the description of the shift algorithm, reference can be made to the specific description in the relevant technology, and the embodiments of the present application will not be described in detail here.

[0053] Optionally, the second algorithm may specifically be a key stream generation algorithm.

[0054] It should be noted that for the description of the key stream generation algorithm, reference can be made to the specific description in the relevant technology, and the embodiments of the present application will not be repeated here.

[0055] Optionally, the third algorithm may be an XOR encryption algorithm. Of course, the third algorithm may also be other algorithms, which are not limited in the present embodiment.

[0056] It should be noted that for the description of the XOR encryption algorithm, reference can be made to the specific description in the relevant technology, and the embodiments of the present application will not be repeated here.

[0057] In some embodiments of the present application, the electronic device can reversely deduce a candidate key stream corresponding to the first key stream based on the first encrypted data and the first random number, and reversely deduce at least one candidate key based on the candidate key stream.

[0058] It can be understood that since the first encrypted data is obtained by encrypting the first random number using the first key stream, and the first key stream is obtained based on the target key, when the electronic device determines the first encrypted data and the first random number, it can reversely deduce the candidate key stream corresponding to the first key stream, and based on the candidate key stream, reversely deduce at least one candidate key.

[0059] It can be seen that since the electronic device can derive at least one smaller number of candidate keys based on the first encrypted data obtained by encrypting the first random number using the first key stream by the card reader and the first random number, the electronic device can determine the target key from the smaller number of at least one candidate key in the subsequent steps without having to determine the target key from a larger number of all keys, thereby reducing the time spent in determining the target key.

[0060] In some embodiments of the present application, the first verification data further includes second encrypted data, the second encrypted data being data derived from a second key stream, the second key stream being generated based on a target key and a second random number, and the first key stream being generated based on the second key stream and the second encrypted data. Optionally, in conjunction with FIG. 2 , as shown in FIG. 3 , step 102a can be implemented specifically through steps 102a1 to 102a3 described below.

[0061] Step 102a1: The electronic device calculates at least one first candidate key stream corresponding to the first key stream based on the first encrypted data and the first random number.

[0062] In some embodiments of the present application, the second encrypted data is data obtained by encrypting a third random number using a second key stream.

[0063] It should be noted that, for the description of how the card reader generates the third random number, reference can be made to the specific description of how the electronic device generates the above-mentioned random number, which will not be repeated herein in the embodiment of the present application.

[0064] In some embodiments of the present application, after the electronic device sends the second random number to the card reader, the card reader can first use the first algorithm to calculate the first random number based on the second random number, and use the second algorithm to calculate the second key stream based on the target key, the second random number and the first identifier, where the first identifier can specifically be the user identification (UID) of the physical card, and generate a third random number, and use the third algorithm to encrypt the third random number using the second key stream to obtain the second encrypted data, and use the second algorithm to calculate the first key stream based on the second key stream and the second encrypted data, so that the card reader can use the third algorithm to encrypt the first random number using the first key stream to obtain the first encrypted data, and then the card reader can send the first encrypted data and the second encrypted data to the electronic device, so that the electronic device can calculate at least one first candidate key stream corresponding to the first key stream based on the first encrypted data and the first random number.

[0065] In the embodiment of the present application, the at least one first candidate key stream includes the first key stream.

[0066] It can be understood that since the electronic device is not sure of the target key at this time, the electronic device is also not sure of the first key stream. Therefore, the electronic device needs to determine at least one first candidate key stream including the first key stream based on the first encrypted data and the first random number, so as to determine at least one candidate key including the target key based on the at least one first candidate key stream in subsequent steps.

[0067] In some embodiments of the present application, the electronic device may reversely deduce at least one first candidate key stream based on the first encrypted data, the first random number, and the third algorithm.

[0068] It can be understood that since the first encrypted data is obtained by encrypting the first random number using the third algorithm and the first key stream, the electronic device can reversely deduce at least one first candidate key stream based on the first encrypted data, the first random number and the third algorithm.

[0069] Step 102a2: The electronic device calculates at least one second candidate key stream corresponding to the second key stream based on each first candidate key stream and the second encrypted data.

[0070] In the embodiment of the present application, the at least one second candidate key stream includes the second key stream.

[0071] It can be understood that since the electronic device is not sure of the target key at this time, the electronic device is also not sure of the second key stream. Therefore, the electronic device needs to determine at least one second candidate key stream including the second key stream based on each first candidate key stream and the second encrypted data, so as to determine at least one candidate key including the target key based on the at least one second candidate key stream in a subsequent step.

[0072] In some embodiments of the present application, the electronic device may reversely deduce at least one second candidate key stream from each first candidate key stream, the second encrypted data, and the third algorithm.

[0073] It can be understood that since the first key stream is calculated based on the second key stream and the second encrypted data using the third algorithm, the electronic device can reversely deduce at least one second candidate key stream based on each first candidate key stream (i.e., a candidate key stream that may be the second key stream), the second encrypted data and the third algorithm.

[0074] Step 102a3: The electronic device calculates and obtains at least one candidate key according to each second candidate key stream and the second random number.

[0075] In some embodiments of the present application, the electronic device may reversely deduce at least one of the candidate keys based on each second candidate key stream, the second random number, and the second algorithm.

[0076] It can be understood that since the second key stream is generated using the second algorithm, the target key and the second random number, the electronic device can reversely deduce at least one of the candidate keys based on each second candidate key stream, the second random number and the second algorithm.

[0077] Thus, it can be seen that the electronic device can first accurately calculate at least one first candidate key stream corresponding to the first key stream based on the first encrypted data and the first random number, and accurately calculate at least one second candidate key stream corresponding to the second key stream based on each first candidate key stream and the second encrypted data, so that the electronic device can accurately calculate at least one candidate key including the target key based on each second candidate key stream and the second random number.

[0078] Step 103: The electronic device obtains the second verification data sent by the card reader.

[0079] In the embodiment of the present application, the second verification data is data obtained by the card reader performing a second verification on the third sector.

[0080] In some embodiments of the present application, when an electronic device establishes an NFC connection with a card reader device through a virtual card, the electronic device can receive a second verification request message from the card reader device through the NFC connection. The second verification request message is used to request verification of the key of another part of the first sector. At this time, the electronic device can send another random number to the card reader device through the NFC connection based on the second verification request message. The other random number is different from the above-mentioned random number, so that the card reader device can send second verification data to the electronic device through the NFC connection based on the other random number, and then the electronic device can receive the second verification data.

[0081] It should be noted that, for the description of the electronic device sending another random number to the card reader, reference can be made to the specific description of the electronic device sending a random number to the card reader in the above embodiment, which will not be repeated here in the embodiment of the present application.

[0082] Step 104: The electronic device determines a target key from at least one candidate key based on the second verification data.

[0083] It can be understood that since the target key is fixed, the key determined by the first verification data and the second verification data is unique. Therefore, the electronic device can determine the unique key, i.e., the target key, from at least one candidate key based on the second verification data.

[0084] In the embodiment of the present application, the target key is used to read sector data in a fourth sector, where the fourth sector is a sector in at least one second sector that corresponds to the third sector.

[0085] In some embodiments of the present application, the fourth sector may be a sector corresponding to the third sector in the encrypted sector in the at least one second sector.

[0086] The following is an example of how the electronic device determines the target key.

[0087] In some embodiments of the present application, the second verification data includes third encrypted data, which is data obtained by encrypting the fourth random number using a third key stream, where the third key stream is derived based on the target key. Optionally, in conjunction with Figure 1 , as shown in Figure 4 , after step 103 and before step 104, the key determination method provided in embodiments of the present application may further include steps 201 and 202, and step 104 may be specifically implemented via step 104a.

[0088] Step 201: The electronic device generates a fourth key stream based on a first candidate key among at least one candidate key.

[0089] In some embodiments of the present application, the first candidate key may be any one of at least one candidate key.

[0090] In some embodiments of the present application, the electronic device may use the second algorithm to generate a fourth key stream based on the first candidate key.

[0091] In some embodiments of the present application, the second verification data further includes fifth encrypted data, which is data obtained by encrypting the sixth random number using a fifth key stream, the fifth key stream being generated based on the target key and the fifth random number, and the third key stream being generated based on the fifth key stream and the sixth random number. Optionally, as shown in FIG. 4 and FIG. 5 , step 201 can be implemented specifically through steps 201a and 201b described below.

[0092] Step 201a: The electronic device generates a sixth key stream according to the first candidate key and the fifth random number.

[0093] In some embodiments of the present application, the electronic device may use the second algorithm to calculate the sixth key stream according to the first candidate key, the fifth random number sent by the electronic device, and the above-mentioned first identifier.

[0094] Step 201b: The electronic device calculates a fourth key stream based on the sixth key stream and the fifth encrypted data.

[0095] In some embodiments of the present application, the electronic device may use a third algorithm to calculate a fourth key stream according to the sixth key stream and the fifth encrypted data.

[0096] It can be seen that since the electronic device can calculate the sixth key stream corresponding to the fifth key stream based on the first candidate key and the fifth random number, and calculate the fourth key stream corresponding to the third key stream based on the sixth key stream and the fifth encrypted data, the electronic device can accurately determine whether the first candidate key is the target key based on whether the third encrypted data and the fourth encrypted data match, that is, whether the third key stream and the fourth key stream match, that is, whether the fifth key stream and the sixth key stream match in subsequent steps. Therefore, the accuracy of the target key determined by the electronic device can be improved.

[0097] Step 202: The electronic device encrypts the fourth random number using the fourth key stream to obtain fourth encrypted data.

[0098] In the embodiment of the present application, the fourth random number is determined based on the fifth random number sent by the electronic device.

[0099] It can be understood that the fifth random number is another random number in the above embodiment.

[0100] In some embodiments of the present application, the electronic device may use the third algorithm and adopt the fourth key stream to encrypt the fourth random number to obtain fourth encrypted data.

[0101] Step 104a: When the third encrypted data and the fourth encrypted data match, the electronic device determines the first candidate key as the target key.

[0102] It should be noted that the above matching can be understood as being identical.

[0103] In the embodiment of the present application, if the third encrypted data and the fourth encrypted data match, it can be considered that the fourth key stream and the third key stream match, and therefore, it can be considered that the first candidate key is the target key.

[0104] In some embodiments of the present application, when the third encrypted data and the fourth encrypted data do not match, the electronic device may re-execute the above steps 201, 202 and 104a based on the second candidate key among at least one candidate key to determine whether to determine the second candidate key as the target key.

[0105] It can be seen that since the electronic device can generate the fourth key stream based on the first candidate key, and determine whether to determine the first candidate key as the target key based on whether the fourth encrypted data obtained by encrypting the fourth random number using the fourth key stream matches the third data obtained by encrypting the fourth random number using the third key stream, that is, based on whether the fourth key stream and the third key stream match, the electronic device determines whether to determine the first candidate key as the target key based on the result obtained by its own calculation, rather than using the result obtained by interacting with the card reading device to determine whether to determine the first candidate key as the target key, and the time consumed by the electronic device itself to obtain the result is less than the time consumed by interacting with the card reading device to obtain the result, therefore, the time consumed in determining whether the first candidate key is determined as the target key can be reduced, thus reducing the time consumed in determining the target key.

[0106] In an embodiment of the present application, when there are multiple encryption sectors in at least one second sector of the above-mentioned physical card, after determining the target key of the fourth sector, the electronic device can also execute the above steps 101 to 104 multiple times to determine the key of each sector in other encryption sectors (that is, the encryption sectors other than the fourth sector in the multiple encryption sectors).

[0107] An embodiment of the present application provides a key determination method, in which a virtual card is provided in an electronic device, the virtual card including at least one first sector for storing sector data in at least one second sector of a physical card, and the electronic device can first obtain first verification data sent by a card reader device, obtained by the card reader performing a first verification on a third sector of the at least one first sector, and determine at least one candidate key based on the first verification data, and then obtain second verification data sent by the card reader device, obtained by the card reader performing a second verification on the third sector, so that the electronic device can determine a target key from the at least one candidate key based on the second verification data, and the target key is used to read sector data in a fourth sector corresponding to the third sector in the at least one second sector. Since the fourth sector of the physical card (i.e., the sector corresponding to the third sector of the virtual card) is an encrypted sector, the electronic device can first determine at least one candidate key based on the first verification data obtained by the card reader for the first verification of the third sector, and then directly determine the target key of the fourth sector from the at least one candidate key based on the second verification data obtained by the card reader for the second verification of the third sector. In this way, the electronic device can directly use the target key to read the sector data from the fourth sector, and will not be unable to read the sector data from the fourth sector due to uncertainty about the key of the fourth sector. Therefore, the situation where the electronic device cannot copy the sector data in the fourth sector to the third sector can be avoided. In this way, the problem that the user cannot use the virtual card to interact with the card reader is solved.

[0108] Of course, after determining the target key, the electronic device can also read the sector data in the fourth sector from the physical card again. Optionally, after the above step 104, the key determination method provided in the embodiment of the present application can also include the following steps 301 and 302.

[0109] Step 301: The electronic device obtains target sector data corresponding to the fourth sector based on the target key.

[0110] In the embodiment of the present application, the above-mentioned target sector data can be understood as: sector data stored in the fourth sector, that is, sector data in the fourth sector.

[0111] In some embodiments of the present application, the electronic device may establish an NFC connection with the physical card through a virtual card, and read the target sector data from the fourth sector using the target key through the NFC connection.

[0112] Step 302: The electronic device copies the target sector data to the third sector.

[0113] In an embodiment of the present application, if there are multiple encrypted sectors in at least one second sector of the physical card, after copying the target sector data in the fourth sector to the third sector, the electronic device may further perform steps 301 and 302 multiple times to read the sector data in each of the other encrypted sectors using the key of each of the other encrypted sectors, and copy the read sector data to the corresponding first sector. It will be understood that after the sector data in all encrypted sectors is copied to the corresponding first sector, the sector data stored in at least one first sector of the virtual card is identical to the sector data stored in at least one second sector of the physical card, and the user can now interact directly with the reader / writer device through the virtual card.

[0114] It can be seen that since the electronic device can use the target key to copy the target sector data in the fourth sector to the third sector of the virtual card, the sector data stored in at least one first sector of the virtual card can be the same as the sector data stored in at least one second sector of the physical card. Therefore, the problem that the user cannot use the virtual card to interact with the card reading device can be solved.

[0115] The key determination method provided in the embodiment of the present application can be executed by a key determination device. In the embodiment of the present application, the key determination device provided in the embodiment of the present application is described by taking the key determination method executed by the key determination device as an example.

[0116] FIG6 illustrates a possible structural diagram of a key determination device involved in an embodiment of the present application. The key determination device includes a virtual card, the virtual card comprising at least one first sector, each first sector being used to store sector data from a second sector of a physical card. As shown in FIG6 , the key determination device 50 provided in an embodiment of the present application may include: an acquisition module 51 for acquiring first verification data sent by a card reader device, the first verification data being data obtained by the card reader device performing a first verification on a third sector of the at least one first sector; a processing module 52 for determining at least one candidate key based on the first verification data acquired by the acquisition module 51; the acquisition module 51 further for acquiring second verification data sent by the card reader device, the second verification data being data obtained by the card reader device performing a second verification on the third sector; and the processing module 52 further for determining a target key from the at least one candidate key based on the second verification data acquired by the acquisition module 51. The target key is used to read sector data from a fourth sector, the fourth sector being the sector of the at least one second sector corresponding to the third sector.

[0117] An embodiment of the present application provides a key determination device. Since the fourth sector of the physical card (i.e., the sector corresponding to the third sector of the virtual card) is an encrypted sector, the key determination device can first determine at least one candidate key based on the first verification data obtained by the card reader device performing a first verification on the third sector, and then directly determine the target key of the fourth sector from the at least one candidate key based on the second verification data obtained by the card reader device performing a second verification on the third sector. In this way, the key determination device can directly use the target key to read the sector data from the fourth sector, and will not be unable to read the sector data from the fourth sector due to uncertainty about the key of the fourth sector. Therefore, it can avoid the situation where the key determination device cannot copy the sector data in the fourth sector to the third sector. In this way, the problem that the user cannot use the virtual card to interact with the card reader device is solved.

[0118] In one possible implementation, the first verification data includes first encrypted data, where the first encrypted data is obtained by encrypting a first random number using a first key stream, where the first key stream is derived based on the target key. The processing module 52 is specifically configured to calculate at least one candidate key based on the first encrypted data and the first random number, where the first random number is determined based on the second random number sent by the key determination device 50.

[0119] In one possible implementation, the first verification data further includes second encrypted data, the second encrypted data being data derived from a second key stream, the second key stream being generated based on a target key and a second random number, and the first key stream being generated based on the second key stream and the second encrypted data. The processing module 52 is specifically configured to calculate at least one first candidate key stream corresponding to the first key stream based on the first encrypted data and the first random number; calculate at least one second candidate key stream corresponding to the second key stream based on each first candidate key stream and the second encrypted data; and calculate at least one candidate key based on each second candidate key stream and the second random number.

[0120] In one possible implementation, the second verification data includes third encrypted data, which is obtained by encrypting a fourth random number using a third key stream, where the third key stream is derived based on the target key. The processing module 52 is further configured to generate a fourth key stream based on a first candidate key from the at least one candidate key, before determining the target key from the at least one candidate key based on the second verification data; and to encrypt a fourth random number using the fourth key stream to obtain fourth encrypted data, where the fourth random number is determined based on a fifth random number sent by the key determination device 50. The processing module 52 is specifically configured to determine the first candidate key as the target key if the third encrypted data and the fourth encrypted data match.

[0121] In one possible implementation, the second verification data further includes fifth encrypted data, which is obtained by encrypting the sixth random number using a fifth key stream. The fifth key stream is generated based on the target key and the fifth random number, and the third key stream is generated based on the fifth key stream and the sixth random number. The processing module 52 is specifically configured to generate a sixth key stream based on the first candidate key and the fifth random number, and to calculate a fourth key stream based on the sixth key stream and the fifth encrypted data.

[0122] In one possible implementation, the processing module 52 is further configured to, after determining the target key from at least one candidate key based on the second verification data, obtain target sector data corresponding to the fourth sector based on the target key; and copy the target sector data to the third sector.

[0123] The key determination device in the embodiment of the present application can be an electronic device or a component in the electronic device, such as an integrated circuit or chip. The electronic device can be a terminal or other device other than a terminal. For example, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, an in-vehicle electronic device, a mobile internet device (MID), an augmented reality (AR) / virtual reality (VR) device, a robot, a wearable device, an ultra-mobile personal computer (UMPC), a netbook or a personal digital assistant (PDA), etc. It can also be a server, a network attached storage (NAS), a personal computer (PC), a television (TV), a teller machine or a self-service machine, etc., and the embodiment of the present application does not specifically limit it.

[0124] The key determination device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0125] The key determination device provided in the embodiment of the present application can implement each process implemented in the method embodiments of Figures 1 to 5. To avoid repetition, they will not be described here.

[0126] In some embodiments of the present application, as shown in Figure 7, the embodiment of the present application also provides an electronic device 60, in which a virtual card is provided, and the virtual card includes at least one first sector, each first sector is used to store sector data in a second sector of the physical card, and the electronic device 60 also includes a processor 61 and a memory 62, and the memory 62 stores a program or instruction that can be run on the processor 61. When the program or instruction is executed by the processor 61, the various process steps of the above-mentioned key determination method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0127] It should be noted that the electronic devices in the embodiments of the present application include the mobile electronic devices and non-mobile electronic devices mentioned above.

[0128] Figure 8 is a schematic diagram of the hardware structure of an electronic device implementing an embodiment of the present application. A virtual card is provided in the electronic device, and the virtual card includes at least one first sector, each of which is used to store sector data in a second sector of the physical card.

[0129] The electronic device 100 includes but is not limited to components such as a radio frequency unit 101 , a network module 102 , an audio output unit 103 , an input unit 104 , a sensor 105 , a display unit 106 , a user input unit 107 , an interface unit 108 , a memory 109 , and a processor 110 .

[0130] Those skilled in the art will appreciate that the electronic device 100 may further include a power source (such as a battery) for powering various components. The power source may be logically connected to the processor 110 via a power management system, thereby enabling the power management system to manage charging, discharging, and power consumption. The electronic device structure shown in FIG8 does not limit the electronic device. The electronic device may include more or fewer components than shown, or may combine certain components or arrange the components differently, which will not be described in detail here.

[0131] The radio frequency unit 101 is configured to obtain first verification data sent by a card reader, where the first verification data is data obtained by the card reader performing a first verification on a third sector in the at least one first sector.

[0132] The processor 110 is configured to determine at least one candidate key based on the first verification data.

[0133] The radio frequency unit 101 is further configured to obtain second verification data sent by the card reader, where the second verification data is data obtained by the card reader performing a second verification on the third sector.

[0134] The processor 110 is further configured to determine a target key from at least one candidate key based on the second verification data, where the target key is used to read sector data in a fourth sector, where the fourth sector is a sector in the at least one second sector corresponding to the third sector.

[0135] An embodiment of the present application provides an electronic device. Since the fourth sector of the physical card (i.e., the sector corresponding to the third sector of the virtual card) is an encrypted sector, the electronic device can first determine at least one candidate key based on the first verification data obtained by the card reader performing a first verification on the third sector, and then directly determine the target key of the fourth sector from the at least one candidate key based on the second verification data obtained by the card reader performing a second verification on the third sector. In this way, the electronic device can directly use the target key to read the sector data from the fourth sector, and will not be unable to read the sector data from the fourth sector due to uncertainty of the key of the fourth sector. Therefore, it can avoid the situation where the electronic device cannot copy the sector data in the fourth sector to the third sector. In this way, the problem that the user cannot use the virtual card to interact with the card reader is solved.

[0136] In some embodiments of the present application, the first verification data includes first encrypted data, where the first encrypted data is data obtained by encrypting a first random number using a first key stream, and the first key stream is obtained based on a target key.

[0137] The processor 110 is specifically configured to calculate and obtain at least one candidate key based on the first encrypted data and a first random number, where the first random number is determined based on a second random number sent by the electronic device.

[0138] In some embodiments of the present application, the above-mentioned first verification data also includes second encrypted data, which is data obtained based on a second key stream, the second key stream is generated based on the target key and the second random number, and the first key stream is generated based on the second key stream and the second encrypted data.

[0139] The processor 110 is specifically configured to calculate, based on the first encrypted data and the first random number, at least one first candidate key stream corresponding to the first key stream; and to calculate, based on each first candidate key stream and the second encrypted data, at least one second candidate key stream corresponding to the second key stream; and, based on each second candidate key stream and the second random number, to calculate at least one candidate key.

[0140] In some embodiments of the present application, the second verification data includes third encrypted data, where the third encrypted data is data obtained by encrypting the fourth random number using a third key stream, and the third key stream is obtained based on the target key.

[0141] The above-mentioned processor 110 is also used to generate a fourth key stream based on a first candidate key among at least one candidate key; and use the fourth key stream to encrypt a fourth random number to obtain fourth encrypted data, where the fourth random number is determined based on a fifth random number sent by the electronic device.

[0142] The processor 110 is specifically configured to determine the first candidate key as the target key when the third encrypted data and the fourth encrypted data match.

[0143] In some embodiments of the present application, the above-mentioned second verification data also includes fifth encrypted data, which is data obtained by encrypting the sixth random number using the fifth key stream. The fifth key stream is generated based on the target key and the fifth random number, and the above-mentioned third key stream is generated based on the fifth key stream and the sixth random number.

[0144] The processor 110 is specifically configured to generate a sixth key stream according to the first candidate key and the fifth random number; and calculate a fourth key stream according to the sixth key stream and the fifth encrypted data.

[0145] In some embodiments of the present application, the radio frequency unit 101 is further configured to obtain target sector data corresponding to the fourth sector based on the target key.

[0146] The processor 110 is further configured to copy the target sector data to the third sector.

[0147] It should be understood that in an embodiment of the present application, the input unit 104 may include a graphics processing unit (GPU) 1041 and a microphone 1042, and the graphics processor 1041 processes image data of a static picture or video obtained by an image capture device (such as a camera) in a video capture mode or an image capture mode. The display unit 106 may include a display panel 1061, and the display panel 1061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 107 includes a touch panel 1071 and at least one of other input devices 1072. The touch panel 1071 is also called a touch screen. The touch panel 1071 may include two parts: a touch detection device and a touch controller. Other input devices 1072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0148] The memory 109 can be used to store software programs and various data. The memory 109 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, applications or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory 109 may include a volatile memory or a non-volatile memory, or the memory 109 may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM), and a direct rambus RAM (DRRAM). The memory 109 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0149] Processor 110 may include one or more processing units. Optionally, processor 110 integrates an application processor and a modem processor. The application processor primarily handles operations related to the operating system, user interface, and application programs, while the modem processor primarily processes wireless communication signals, such as a baseband processor. It is understood that the modem processor may not be integrated into processor 110.

[0150] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned key determination method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0151] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk.

[0152] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned key determination method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0153] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0154] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned key determination method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0155] It should be noted that, in this article, the terms "comprise", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, an element defined by the statement "comprises a ..." does not exclude the presence of other identical elements in the process, method, article or device comprising the element. In addition, it should be noted that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in the opposite order according to the functions involved. For example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0156] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus the necessary general hardware platform, and of course can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk), including a number of instructions for enabling a terminal (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in each embodiment of the present application.

[0157] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of this application, ordinary technicians in this field can also make many forms without departing from the purpose of this application and the scope of protection of the claims, all of which are within the protection of this application.

Claims

1. A key determination method, wherein an electronic device is provided with a virtual card, wherein the virtual card comprises at least one first sector, each of the first sectors being respectively used to store sector data in a second sector of a physical card, the method comprising: Acquire first verification data sent by a card reader, where the first verification data is data obtained by the card reader performing a first verification on a third sector of at least one of the first sectors; Based on the first verification data, determining at least one candidate key; Acquire second verification data sent by the card reading device, where the second verification data is data obtained by the card reading device performing a second verification on the third sector; Based on the second verification data, a target key is determined from at least one of the candidate keys, wherein the target key is used to read sector data in a fourth sector, wherein the fourth sector is: a sector in at least one of the second sectors corresponding to the third sector.

2. The method according to claim 1, wherein: The first verification data includes first encrypted data, the first encrypted data is data obtained by encrypting a first random number using a first key stream, and the first key stream is obtained based on the target key; The step of determining at least one candidate key based on the first verification data comprises: At least one candidate key is calculated based on the first encrypted data and the first random number, where the first random number is determined based on a second random number sent by the electronic device.

3. The method according to claim 2, wherein: The first verification data further includes second encrypted data, the second encrypted data is data obtained based on a second key stream, the second key stream is generated according to the target key and the second random number, and the first key stream is generated according to the second key stream and the second encrypted data; The step of calculating at least one candidate key according to the first encrypted data and the first random number includes: Calculate and obtain at least one first candidate key stream corresponding to the first key stream according to the first encrypted data and the first random number; Calculate at least one second candidate key stream corresponding to the second key stream according to each of the first candidate key streams and the second encrypted data; At least one candidate key is calculated based on each of the second candidate key streams and the second random number.

4. The method according to claim 1, wherein: The second verification data includes third encrypted data, the third encrypted data is data obtained by encrypting a fourth random number using a third key stream, and the third key stream is obtained based on the target key; Before determining the target key from at least one of the candidate keys based on the second verification data, the method further includes: generating a fourth key stream based on a first candidate key of at least one of the candidate keys; The fourth random number is encrypted using the fourth key stream to obtain fourth encrypted data, wherein the fourth random number is Determined based on a fifth random number sent by the electronic device; The step of determining a target key from at least one of the candidate keys based on the second verification data comprises: In a case where the third encrypted data and the fourth encrypted data match, the first candidate key is determined as the target key.

5. The method according to claim 4, wherein: The second verification data further includes fifth encrypted data, the fifth encrypted data is data obtained by encrypting a sixth random number using a fifth key stream, the fifth key stream is generated according to the target key and the fifth random number, and the third key stream is generated according to the fifth key stream and the sixth random number; The step of generating a fourth key stream based on a first candidate key among at least one of the candidate keys comprises: generating a sixth key stream according to the first candidate key and the fifth random number; The fourth key stream is calculated based on the sixth key stream and the fifth encrypted data.

6. The method according to claim 1, wherein: After determining the target key from at least one of the candidate keys based on the second verification data, the method further includes: Based on the target key, acquiring target sector data corresponding to the fourth sector; The target sector data is copied to the third sector.

7. A key determination device, wherein a virtual card is provided in the key determination device, wherein the virtual card comprises at least one first sector, each of the first sectors is used to store sector data in a second sector of a physical card, the key determination device comprising: An acquisition module, configured to acquire first verification data sent by a card reader, wherein the first verification data is data obtained by the card reader performing a first verification on a third sector of at least one of the first sectors; a processing module, configured to determine at least one candidate key based on the first verification data acquired by the acquisition module; The acquisition module is further used to acquire second verification data sent by the card reading device, where the second verification data is data obtained by the card reading device performing a second verification on the third sector; The processing module is also used to determine a target key from at least one of the candidate keys based on the second verification data obtained by the acquisition module, and the target key is used to read sector data in a fourth sector, and the fourth sector is: a sector in at least one of the second sectors corresponding to the third sector.

8. The key determination device according to claim 7, wherein: The first verification data includes first encrypted data, the first encrypted data is data obtained by encrypting a first random number using a first key stream, and the first key stream is obtained based on the target key; The processing module is specifically configured to calculate at least one candidate key according to the first encrypted data and the first random number, where the first random number is determined based on a second random number sent by the key determination device.

9. The key determination device according to claim 8, wherein: The first verification data further includes second encrypted data, the second encrypted data is data obtained based on a second key stream, the second key stream is generated according to the target key and the second random number, and the first key stream is generated according to the second key stream and the second encrypted data; The processing module is specifically configured to calculate at least one first candidate key stream corresponding to the first key stream according to the first encrypted data and the first random number; Calculate at least one second candidate key stream corresponding to the second key stream according to each of the first candidate key streams and the second encrypted data; At least one candidate key is calculated based on each of the second candidate key streams and the second random number.

10. The key determination device according to claim 7, wherein: The second verification data includes third encrypted data, the third encrypted data is data obtained by encrypting a fourth random number using a third key stream, and the third key stream is obtained based on the target key; The processing module is further configured to generate a fourth key stream based on a first candidate key among at least one of the candidate keys before determining the target key from at least one of the candidate keys based on the second verification data; and encrypt the fourth random number using the fourth key stream to obtain fourth encrypted data, wherein the fourth random number is determined based on a fifth random number sent by the key determination device; The processing module is specifically configured to determine the first candidate key as the target key when the third encrypted data matches the fourth encrypted data.

11. The key determination device according to claim 10, wherein: The second verification data further includes fifth encrypted data, the fifth encrypted data is data obtained by encrypting a sixth random number using a fifth key stream, the fifth key stream is generated according to the target key and the fifth random number, and the third key stream is generated according to the fifth key stream and the sixth random number; The processing module is specifically configured to generate a sixth key stream according to the first candidate key and the fifth random number; and calculate the fourth key stream according to the sixth key stream and the fifth encrypted data.

12. The key determination device according to claim 7, wherein: The processing module is further configured to obtain target sector data corresponding to the fourth sector based on the target key after determining the target key from at least one of the candidate keys based on the second verification data; And the target sector data is copied to the third sector.

13. An electronic device comprising a processor and a memory, wherein the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, the steps of the key determination method according to any one of claims 1 to 6 are implemented.

14. A readable storage medium storing a program or an instruction, wherein the program or the instruction, when executed by a processor, implements the steps of the key determination method according to any one of claims 1 to 6.

15. A chip, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the steps of the key determination method according to any one of claims 1 to 6.

16. A computer program product, wherein the computer program product is executed by at least one processor to implement the steps of the key determination method according to any one of claims 1 to 6.

17. An electronic device, configured to execute the steps of the key determination method according to any one of claims 1 to 6.

Images