Shield card, communication method for shield card, and terminal device

Abstract

Provided in the present invention are a shield card, a communication method for a shield card, and a terminal device. The shield card comprises: a communication processing module, which receives and parses a data packet sent by a terminal device, identifies an instruction from the data packet, and analyzes, upon identifying that the instruction is a first instruction, an algorithm type for responding to and processing the first instruction, wherein the first instruction includes digital certificate read / write, signature verification, and encryption and decryption; and an algorithm processing module, which is connected to the communication processing module, calls and runs, on the basis of the algorithm type, a corresponding algorithm in the algorithm processing module, and then feeds back first response data to the communication processing module, wherein the communication processing module returns the first response data to the terminal device. The present invention implements a communication connection between a shield card and both a smart card and a terminal device, thereby improving the security of using a digital certificate on the terminal device, thus improving the data protection capability, and mitigating the risk of information leakage.

Description

SIM card with screen protector, communication method and terminal equipment for SIM card with screen protector Technical Field

[0001] This invention relates to the field of secure communication, and more particularly to a film-covered card, a communication method for the film-covered card, and a terminal device. Background Technology

[0002] With the increasing prevalence of mobile devices such as smartphones in personal and commercial applications, protecting sensitive information stored on these devices has become increasingly important. Applications such as online transactions and remote access require more secure digital certificate signature verification mechanisms. Currently, there are several ways to use digital certificates on mobile terminals such as smartphones: using a SIM-type password card instead of a traditional SIM card, a TF-type password card, or an external USB security token. However, using a SIM-type password card instead of a traditional SIM card requires customization with the operator, and not all operators offer SIM-type password card replacement services; TF-type password cards require the mobile terminal to have a TF card slot, and the slower transfer speed of TF cards can affect the performance of encryption algorithms; carrying an external USB security token is less convenient than a built-in card solution, and Bluetooth USB security tokens may face security risks in wireless communication, such as interception or interference.

[0003] Summary of the Invention

[0004] The purpose of this invention is to provide a screen protector card, a communication method for the screen protector card, and a terminal device, which enables communication between the screen protector card and the SIM card, reduces the cost for users to replace SIM cards, ensures plug-and-play compatibility with the built-in SIM card slot of mobile devices, allows users to enjoy value-added security services, and improves user experience and convenience.

[0005] The technical solution provided by this invention is as follows:

[0006] This invention provides a film-applied card, comprising:

[0007] The communication processing module receives and parses data packets sent by the terminal device, and identifies the instructions in the data packets. When the instruction is identified as the first instruction, the module analyzes the algorithm type for responding to and processing the first instruction. The first instruction includes digital certificate reading and writing, signature verification, and encryption / decryption.

[0008] The algorithm processing module is connected to the communication processing module. After calling and running the corresponding algorithm in the algorithm processing module according to the algorithm type, it feeds back the first response data to the communication processing module, and the communication processing module returns the first response data to the terminal device.

[0009] Furthermore, the communication processing module is also used to transmit the second instruction to the smart card when the instruction is identified as a second instruction; the smart card includes a SIM card.

[0010] The system receives the second response data after the smart card responds to and executes the operation corresponding to the second instruction; and sends the second response data back to the terminal device; the second instruction includes requesting a call channel and closing a call channel.

[0011] Furthermore, it also includes a reset response processing module, which parses the smart card's sequence information when it receives a reset signal sent by the terminal device.

[0012] The reset response processing module also negotiates the communication frequency with the terminal device.

[0013] Furthermore, it also includes a contact module, which, after connecting to the contact corresponding to the smart card, establishes a communication connection with a standard communication protocol.

[0014] Furthermore, when the communication processing module establishes a communication connection with the terminal device, it communicates using the first communication frequency;

[0015] When the communication processing module establishes a communication connection with the smart card, it communicates at the second communication frequency.

[0016] The present invention also provides a communication method for a film-covered card, comprising the following steps:

[0017] Receive and parse data packets sent by terminal devices, and identify the instructions in the data packets.

[0018] When the instruction is the first instruction, the algorithm type of the first instruction is analyzed and processed. After calling and running the corresponding algorithm according to the algorithm type, the first response data is fed back to the terminal device. The first instruction includes digital certificate reading and writing, signature verification, and encryption / decryption.

[0019] Furthermore, it also includes:

[0020] When the instruction is the second instruction, the second instruction is transmitted to the smart card, and the second response data is received from the smart card after the operation corresponding to the second instruction is executed; and the second response data is fed back to the terminal device; the second instruction includes requesting a call channel and closing a call channel.

[0021] Furthermore, including:

[0022] Analyze the application type involved in the instructions in the data packet. When the application type is a Class 1 application, pass the data packet through to the smart card.

[0023] When the application type is a second type of application, the following steps are performed: Identify the instructions in the data packet.

[0024] The present invention also provides a terminal device, including: a central processing unit (CPU) and a screen protector card installed on the terminal device. The CPU sends data packets.

[0025] The card receives and parses data packets, identifying the instructions within them. When an instruction is identified as a first instruction, the card analyzes the algorithm type for processing that first instruction. Based on the algorithm type, the card calls and runs the corresponding algorithm, then feeds back the first response data to the central processing unit. The first instruction includes digital certificate reading / writing, signature verification, and encryption / decryption.

[0026] Furthermore, this also includes smart cards installed on terminal devices.

[0027] When the card is identified as having a second instruction, it transmits the second instruction to the smart card.

[0028] After the smart card responds to and executes the operation corresponding to the second instruction, it sends back the second response data to the screen protector card; the screen protector card sends the second response data back to the central processing unit; the second instruction includes requesting a call channel and closing a call channel.

[0029] The present invention provides a screen protector card, a communication method for the screen protector card, and a terminal device, which enhances the security of mobile terminals using digital certificates, improves data protection capabilities, reduces the risk of information leakage and the cost of users replacing SIM cards, and ensures plug-and-play compatibility with the built-in SIM card slot of mobile devices. Attached Figure Description

[0030] The preferred embodiments will now be described in a clear and easy-to-understand manner, with reference to the accompanying drawings, to further explain the above-mentioned characteristics, technical features, advantages, and implementation methods of a film-mounted card, a communication method for the film-mounted card, and a terminal device.

[0031] Figure 1 is a structural schematic diagram of an embodiment of a terminal device according to the present invention;

[0032] Figure 2 is a structural diagram of an embodiment of a film-adhesive card according to the present invention;

[0033] Figure 3 is a structural diagram of another embodiment of the film-adhesive card of the present invention;

[0034] Figure 4 is a flowchart of an embodiment of the communication method of the film-covered card according to the present invention;

[0035] Figure 5 is a flowchart of an embodiment of a terminal device of the present invention. Detailed Implementation

[0036] In the following description, specific details such as particular system architectures and techniques are set forth for illustrative purposes and not for limitation, in order to provide a thorough understanding of the embodiments of this application. However, those skilled in the art will understand that this application can also be implemented in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, apparatuses, circuits, and methods have been omitted so as not to obscure the description of this application with unnecessary detail.

[0037] It should be understood that, when used in this specification and the appended claims, the term "comprising" indicates the presence of the described features, integrals, steps, operations, elements and / or components, but does not exclude the presence or addition of one or more other features, integrals, steps, operations, elements, components and / or sets.

[0038] It should also be further understood that the term “and / or” as used in this application specification and the appended claims means any combination of one or more of the associated listed items and all possible combinations, and includes such combinations.

[0039] Furthermore, in the description of this application, the terms "first," "second," etc., are used only to distinguish descriptions and should not be construed as indicating or implying relative importance.

[0040] To more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the specific implementation methods of the present invention will be described below with reference to the accompanying drawings. Obviously, the drawings described below are merely some embodiments of the present invention. For those skilled in the art, other drawings and other implementation methods can be obtained based on these drawings without any creative effort.

[0041] With the increasing prevalence of mobile devices such as smartphones in personal and commercial applications, protecting sensitive information stored on these devices has become increasingly important. Applications such as online transactions and remote access require more secure digital certificate signature verification mechanisms. To address the security issues of using digital certificates on mobile terminals, existing technologies include: using SIM-type cryptographic cards instead of traditional SIM cards. SIM-type cryptographic cards, as dedicated SIM cards, have built-in telecommunications chips and national cryptographic security chips, providing functions such as digital certificate management and use, data encryption / decryption, and signature verification; using TF-type cryptographic cards, which can store sensitive information such as user certificates and private keys; and using external USB tokens to access digital certificates.

[0042] However, existing solutions have a series of problems. When using a SIM-type password card instead of a traditional SIM card, it is necessary to go to the operator to customize the SIM card, and the telecom operator may not necessarily have a SIM-type password card replacement service. When using a TF-type password card, not all mobile terminals have a TF card slot, and the TF card is an external storage device with a slower transmission speed, which will affect the performance of the encryption algorithm. When using an external USB key, carrying the USB key device is not as convenient as a built-in solution, and some mobile terminals may not have an audio port or a USB port of the corresponding specification, so they cannot connect to an external USB key. Although Bluetooth USB keys provide the convenience of wireless connection, they may also face the security risks of wireless communication, such as being intercepted or interfered with.

[0043] An encrypted SIM card sticker is a SIM card accessory that integrates security features. It's attached to the phone's SIM card to add extra security. These stickers typically contain a built-in smart chip with encrypted data for verifying user legitimacy and enabling security functions such as data encryption / decryption, digital signatures, and key certificate management. In the fields of mobile payments and cybersecurity, encrypted SIM cards play a crucial role, similar to a USB security token in online banking, providing an additional layer of security.

[0044] The encrypted sticker card is suitable for smart electronic devices such as mobile phones, PADs, and law enforcement recorders. It can be used as a dedicated cryptographic tool for scenarios such as mobile office, e-government, mobile policing, mobile law enforcement, and digital copyright protection. It is widely used in government, taxation, finance, market supervision, finance and other industries.

[0045] Therefore, this invention provides a screen protector card whose operating system includes three parts: an ATR (Automatic Test Response) module, an APDU (Advanced Processing Unit) module, and an algorithm processing module. These three modules enable the screen protector card to communicate with the SIM card or perform encryption operations. When the mobile terminal needs to communicate with the SIM card, data first arrives at the screen protector card, and the APDU processing module parses the received data packet. If the instruction parsed from the data packet is related to security algorithms such as digital certificate reading / writing, signature verification, encryption / decryption, etc., the screen protector card calls the algorithm processing module to execute the instruction and returns data to the terminal. If it is another instruction requiring communication with the SIM card, the screen protector card transmits the data transparently to the SIM card. After processing, the SIM card returns the data to the screen protector card through the same path, and then the screen protector card sends the data back to the mobile terminal.

[0046] The design of the film card of this invention fully complies with the standard size and interface specifications of smart cards (such as SIM cards). After the film card is pasted onto the smart card, it can be used immediately on terminal devices (such as mobile phones).

[0047] The following description is in conjunction with the accompanying drawings:

[0048] In one embodiment of the present invention, as shown in FIG1, a terminal device 100 includes:

[0049] Central processing unit 110 sends data packets.

[0050] The card 120 receives and parses the data packet, and identifies the instructions in the data packet; when the instruction is identified as a first instruction, it analyzes the algorithm type for responding to and processing the first instruction; after calling and running the corresponding algorithm according to the algorithm type, it feeds back the first response data to the central processing unit; the first instruction includes digital certificate reading and writing, signature verification, encryption and decryption; when the instruction is identified as a second instruction, it transmits the second instruction to the smart card.

[0051] After responding to and executing the operation corresponding to the second instruction, the smart card 130 sends back the second response data to the film-mounted card; the film-mounted card sends the second response data back to the central processing unit; the second instruction includes requesting a call channel and closing a call channel.

[0052] Specifically, when the terminal device needs to communicate, the data packet is sent by the central processing unit 110. The data first arrives at the screen protector card 120, which receives and parses the data packet sent by the central processing unit 110 and identifies the instructions in the data packet.

[0053] If the instruction parsed from the data packet by the screen protector card 120 is the first instruction related to security algorithms such as digital certificate reading and writing, signature verification, encryption and decryption, the corresponding module inside the screen protector card 120 analyzes and processes the algorithm type of the first instruction. After calling and running the corresponding algorithm, the screen protector card 120 feeds back the first response data to the central processing unit 110.

[0054] If the instruction parsed from the data packet by the screen protector card 120 is a second instruction related to requesting or closing a call channel, the instruction parsed from the data packet is passed through to the smart card 130 to execute the corresponding operation in response to the second instruction. After the smart card 130 responds to the operation, the second response data is fed back to the screen protector card 120. Finally, the screen protector card 120 feeds back the second response data to the central processing unit 110.

[0055] In this embodiment, the sticker card 120 and the smart card 130 communicate via a handshake. The sticker card 120 first determines whether there is an encrypted message in the transmitted information. If not, it is transparently transmitted to the smart card 130. If it is, the internal module of the sticker card 120 executes the instruction and feeds back the result to the upper-level central processing unit 110. The design of the sticker card allows it to be seamlessly integrated into existing mobile terminals without requiring significant hardware modifications. As a communication bridge between the smart card 130 and the mobile terminal, the sticker card 120 greatly improves user experience and data protection capabilities.

[0056] The specific structure of the film-applied card is described below with reference to the attached diagram.

[0057] In one embodiment of the present invention, as shown in FIG2, a film-adhesive card includes:

[0058] The communication processing module 10 receives and parses data packets sent by the terminal device and identifies the instructions in the data packets. When the instruction is identified as a first instruction, the module analyzes the algorithm type for responding to and processing the first instruction. The first instruction includes digital certificate reading and writing, signature verification, and encryption / decryption.

[0059] The algorithm processing module 20 is connected to the communication processing module. After calling and running the corresponding algorithm in the algorithm processing module according to the algorithm type, it feeds back the first response data to the communication processing module, and the communication processing module returns the first response data to the terminal device.

[0060] Specifically, the communication processing module 10 (APDU) encapsulates the commands sent to the SIM card and the responses returned from the SIM card. When the terminal needs to communicate with the SIM card, the data first arrives at the SIM card's I / O port. The SIM card's communication processing module 10 analyzes the received data packets and parses the instructions in the data packets to determine whether to process them directly or pass them through to the SIM card.

[0061] When the instruction parsed by the communication processing module 10 is the first instruction, the first instruction may be related to security algorithm operations such as digital certificate reading and writing, signature verification, encryption and decryption. The communication processing module 10 calls the algorithm processing module 20. After the algorithm processing module 20 executes the instruction operation, it feeds back the response data to the communication processing module 10, and then the communication processing module 10 sends the response data to the upper-layer terminal device.

[0062] The algorithm processing module 20 is connected to the communication processing module 10. When the communication processing module 10 identifies the instruction as the first instruction, it analyzes the algorithm type for processing the first instruction, calls and runs the corresponding algorithm in the algorithm processing module 20 according to the algorithm type, and then the algorithm processing module 20 sends the first response data back to the communication processing module 10. The communication processing module 10 then returns the first response data to the terminal device.

[0063] The algorithm processing module 20 can perform encryption, decryption, and hash operations. The algorithm processing module 20 includes a PKE coprocessor, a DES coprocessor, an AES coprocessor, an SM1 coprocessor, an SM3 coprocessor, and an SM4 coprocessor to handle security operations related to digital certificates.

[0064] The PKE coprocessor is specifically designed for handling asymmetric key encryption and decryption operations such as RSA signatures, public-key encryption, and decryption; the DES coprocessor supports symmetric key encryption algorithms and is responsible for lower-level symmetric encryption and decryption operations; the AES coprocessor conforms to the FIPS-197 AES algorithm specification and is specifically designed for performing high-level encryption and decryption, handling high-level symmetric encryption and decryption; the SM1 coprocessor supports Chinese national commercial cryptographic algorithms and is mainly used to implement key expansion and encryption / decryption round functions, aiming to improve the efficiency and security of encryption and decryption operations while reducing the consumption of main processor resources; the SM3 coprocessor supports Chinese national commercial cryptographic algorithms and is mainly used for data hashing operations; the SM4 coprocessor also supports Chinese national commercial cryptographic algorithms and is used for data encryption and decryption.

[0065] Through the intelligent processing mechanism of the built-in algorithm and communication processing modules of this invention, high-security operations such as encryption, decryption, and signature verification can be handled directly without relying on external devices, significantly enhancing the security level of mobile communication. This built-in security function is of great significance for mobile payments, identity authentication, enterprise applications, and personal privacy protection, theoretically improving data protection capabilities and reducing the risk of information leakage.

[0066] In this embodiment, the communication processing module 10 may also identify the instruction as a second instruction. This situation will now be described in detail:

[0067] When the instruction parsed by the communication processing module 10 is the second instruction, which can be requesting a call channel or closing a call channel, the communication processing module 10 transmits the second instruction to the smart card, which can be a SIM card. After the smart card responds and executes the operation corresponding to the second instruction, it sends back second response data to the card sticker, which then sends the second response data back to the terminal device.

[0068] The instruction parsing capability of the communication processing module 10 of this invention is crucial to the stability and reliability of the film card application. The communication processing module 10 needs to be able to process various instructions accurately and efficiently, adapt to different types of cards and communication protocols, and ensure that all communication throughout the process complies with security standards to prevent data leakage or unauthorized access.

[0069] To ensure that the communication processing module 10 can adapt to different types of cards and communication protocols, the sticker card also includes:

[0070] When the reset response processing module 30 receives a reset signal sent by the terminal device, the reset response processing module 30 parses the sequence information of the smart card; the reset response processing module 30 also negotiates the communication frequency with the terminal device.

[0071] Specifically, the reset response processing module 30 (ATR) mainly involves the initialization communication between the sticker card and the smart card and the identification of basic information of the smart card. The reset response processing module 30 enables the card reader to correctly configure itself to communicate with the smart card and load the corresponding software driver or application to process the smart card.

[0072] When the sticker card and smart card are inserted into the card reader and reset, it sends an ATR string to the card reader. When the terminal device sends a reset signal, the reset response processing module 30 parses each byte in the ATR string and identifies the basic information and type of the inserted smart card.

[0073] The reset response processing module 30 is also responsible for negotiating the communication frequencies with the terminal device and the smart card respectively. For example, some older smart cards have a relatively slow communication frequency. If they communicate with the terminal device at this frequency, the terminal device will also communicate at a relatively slow rate. However, the sticker card performs digital certificate reading and writing, signature verification, encryption and decryption operations at a certain frequency and does not need to work at a relatively low communication frequency.

[0074] Therefore, the reset response processing module 30 negotiates and simulates a communication frequency with the terminal device, and the reset response processing module 30 is responsible for adjusting the communication frequency difference between the terminal device and the smart card. For example, when the communication processing module 10 communicates with the terminal device, it communicates at a first communication frequency, which can be a relatively high communication frequency; when the communication processing module 10 communicates with the smart card, it communicates at a second communication frequency, which can be a relatively low communication frequency.

[0075] In this embodiment, through the reset response processing module (ATR), communication processing module (APDU), and algorithm processing module of the sticker card, the sticker card can not only directly handle high-security operations such as encryption, decryption, and signature verification without relying on external devices, but also act as a bridge between the smart card and the terminal, transmitting or enhancing the functions of the original SIM card, thereby improving data protection capabilities and reducing the risk of information leakage.

[0076] To establish electrical and communication connections between the sticker card and the smart card, as shown in Figure 3, the sticker card also includes:

[0077] After the contact module 40 is connected to the contact corresponding to the smart card, a communication connection with a standard communication protocol is established.

[0078] Specifically, the film-mounted card is equipped with a first power signal terminal VPS1, a first reset terminal RST1, a first clock signal terminal CLK1, and a first ground signal terminal GND1; the smart card is equipped with a second power signal terminal VPS2, a second reset terminal RST2, a second clock signal terminal CLK2, and a second ground signal terminal GND2.

[0079] The first power signal terminal VPS1 and the second power signal terminal VPS2, the first reset terminal RST1 and the second reset terminal RST2, the first clock signal terminal CLK1 and the second clock signal terminal CLK2, and the first ground signal terminal GND1 and the second ground signal terminal GND2 are respectively connected to establish an electrical connection to ensure stable communication.

[0080] The SWIO pin (soft I / O) in the contact module 40 can simulate standard communication protocols, such as the ISO7816 protocol, through software. The screen protector card establishes communication with the smart card to which it is attached through this extended SWIO pin, while the I / O pin of the screen protector card is connected to the mobile terminal. In this way, when the SIM card needs to communicate with the terminal, the screen protector card acts as an intermediary.

[0081] In this embodiment, the design of the sticker card fully complies with the standard size and interface specifications of smart cards, ensuring plug-and-play compatibility with the vast majority of terminal devices on the market. Users can enjoy value-added security services without replacing their smart cards or performing complex settings, greatly improving user experience and convenience. The SWIO pin design ensures that the sticker card establishes communication with the attached smart card, enabling the sticker card to simulate standard communication protocols.

[0082] The communication method of the film-covered card is described below with reference to the attached diagram.

[0083] Figure 4 illustrates a flowchart of a communication method for a film-covered card provided in some embodiments of this disclosure. The method is executed by a terminal device and includes at least the following steps:

[0084] The S100 receives and parses data packets sent by the terminal device, and identifies the instructions in the data packets.

[0085] When the instruction is the first instruction, S200 analyzes the algorithm type of the first instruction and calls and runs the corresponding algorithm according to the algorithm type, and then feeds back the first response data to the terminal device; the first instruction includes digital certificate reading and writing, signature verification, encryption and decryption.

[0086] When the instruction is the second instruction, S300 transmits the second instruction to the smart card, receives the second response data fed back by the smart card after executing the operation corresponding to the second instruction, and feeds back the second response data to the terminal device; the second instruction includes requesting a call channel and closing a call channel.

[0087] Specifically, when a terminal device receives a command sent by a terminal application, it parses the data packet of the command and decides whether to process it directly or pass it through to the smart card based on the instructions parsed from the data packet.

[0088] If the instruction parsed from the data packet is the first instruction related to security algorithms such as digital certificate reading and writing, signature verification, encryption and decryption, then analyze the algorithm type of the first instruction, call and run the corresponding algorithm, and then feed back the first response data to the upper-layer terminal device.

[0089] If the instruction parsed from the data packet is a second instruction related to requesting or closing the call channel, the instruction parsed from the data packet is passed through to the smart card to execute the corresponding operation in response to the second instruction. The second response data after the smart card's response operation is received is then fed back to the upper-layer terminal device.

[0090] In this embodiment, before identifying the instructions in the data packet, S100 further includes: analyzing the application type involved in the instructions in the data packet; when the application type is a first type of application, the data packet is passed through to the smart card; when the application type is a second type of application, the step of identifying the instructions in the data packet is executed.

[0091] Specifically, when the application involved in the data packet is a first-class application, the data packet is directly passed through to the smart card parsing instruction to execute the corresponding operation. The first-class application can be an application that is only responsible for executing the second instruction.

[0092] When the application involved in the data packet is a second type of application, it is necessary to identify the instructions in the data packet and continue to execute steps S200 or S300 of the above-mentioned communication method for the film-applied card. The second type of application can execute not only the first instruction but also the second instruction.

[0093] The communication method of the film-covered card of the present invention can not only autonomously process specific high-level security commands, but also transmit or enhance the functions of the original smart card, realizing flexible expansion of functions, significantly enhancing the security level of mobile communication, and broadening the boundaries of mobile communication services.

[0094] The flowchart of the terminal device is described below with reference to the accompanying drawings.

[0095] Figure 5 shows a flowchart of a terminal device provided in some embodiments of this disclosure.

[0096] Specifically, once the screen protector is attached to the smart card, it can be used immediately on a terminal device (such as a mobile phone). When a terminal application on the terminal device sends a command to the smart card, the screen protector first determines whether the application involved in the command is an application type that requests or closes a call channel.

[0097] When the application type is a Type 1 application, the sticker card transmits the instruction to the smart card. The smart card then determines whether the instruction is a request to open or close a call channel. If it is a request to open a call channel, the smart card opens the call channel and returns the response to the sticker card. The sticker card records the call channel and sends the result back to the terminal application that sent the command. If it is not a request to open a call channel, the smart card closes the call channel and returns the response to the sticker card, which then sends the result back to the terminal application that sent the command. For example, in some applications that only implement call functionality and do not involve digital certificate signing or authentication, the sticker card can directly transmit the instruction to the smart card when receiving a request from such an application.

[0098] When the application type is a Type II application, the SIM card first determines whether the instruction from the Type II application requests a channel. If not, the SIM card informs the terminal application that no channel has been requested. If it requests a channel for processing instructions, it determines whether the instruction type is a custom COS instruction (i.e., a first instruction) such as a signature or encryption. If it is an encrypted instruction, the SIM card's internal module executes the instruction and sends the response back to the terminal application. If it is not an encrypted instruction (i.e., a second instruction), the SIM card transmits the instruction to the smart card, the smart card opens the call channel and returns the response to the SIM card, which then sends the result back to the terminal application that sent the command. For example, a Type II application could be an application that integrates encrypted operation and call functionality.

[0099] In this invention, when a terminal application installed on a terminal device accesses a security certificate, the intelligent processing mechanism built into the sticker card enables the terminal device to directly handle high-security operations such as encryption, decryption, and signature verification without relying on external devices (such as an external USB key), significantly enhancing the security level of mobile communication. The sticker card can not only autonomously process specific advanced security commands, but also act as a bridge between the smart card and the terminal, transmitting or enhancing the functions of the original smart card, thus achieving flexible expansion of identity authentication and digital certificate management functions.

[0100] It should be noted that the above embodiments can be freely combined as needed. The above are merely preferred embodiments of the present invention. It should be pointed out that for those skilled in the art, several improvements and modifications can be made without departing from the principle of the present invention, and these improvements and modifications should also be considered within the scope of protection of the present invention.

Claims

1. A film-covered card, characterized in that, include: The communication processing module receives and parses data packets sent by the terminal device, and identifies the instructions in the data packets; When the instruction is identified as a first instruction, the algorithm type for processing the first instruction is analyzed; the first instruction includes digital certificate reading / writing, signature verification, and encryption / decryption. The algorithm processing module is connected to the communication processing module. After calling and running the corresponding algorithm in the algorithm processing module according to the algorithm type, it feeds back the first response data to the communication processing module. The communication processing module then returns the first response data to the terminal device.

2. The film-covered card according to claim 1, characterized in that: The communication processing module is further configured to, when recognizing the instruction as a second instruction, transmit the second instruction to the smart card; the smart card includes a SIM card; Receive the second response data fed back after the smart card responds to and executes the operation corresponding to the second instruction; The second response data is then fed back to the terminal device; the second instruction includes requesting a call channel and closing a call channel.

3. The film-covered card according to claim 1, characterized in that, Also includes: The reset response processing module parses the sequence information of the smart card when it receives a reset signal sent by the terminal device. The reset response processing module also negotiates the communication frequency with the terminal device.

4. The film-covered card according to claim 1, characterized in that, Also includes: The contact module, after being connected to the contact corresponding to the smart card, establishes a communication connection with a standard communication protocol.

5. The film-covered card according to any one of claims 1 to 4, characterized in that: When the communication processing module establishes a communication connection with the terminal device, it uses a first communication frequency. line of communication; When the communication processing module communicates with the smart card, it communicates at a second communication frequency.

6. A communication method for a film-covered card, characterized in that, Includes the following steps: Receive and parse data packets sent by the terminal device, and identify the instructions in the data packets; When the instruction is a first instruction, the algorithm type for processing the first instruction is analyzed, and the corresponding algorithm is called and run according to the algorithm type. Then, the first response data is fed back to the terminal device. The first instruction includes digital certificate reading and writing, signature verification, and encryption / decryption.

7. The card-mounted communication method according to claim 6, characterized in that, Also includes: When the instruction is a second instruction, the second instruction is transmitted to the smart card, and the second response data fed back by the smart card after the operation corresponding to the second instruction is executed is received; The second response data is then fed back to the terminal device; the second instruction includes requesting a call channel and closing a call channel.

8. The card-mounted communication method according to claim 6, characterized in that, Before identifying the instructions in the data packet, the process includes: Analyze the application type involved in the instructions in the data packet; when the application type is a first type of application, pass the data packet through to the smart card. When the application type is a second type of application, the following step is performed: identify the instructions in the data packet.

9. A terminal device, characterized in that, Includes a central processing unit and a film card installed on the terminal device; The central processing unit sends data packets; The sticker card receives and parses the data packet, and identifies the instructions in the data packet; when the instruction is identified as a first instruction, it analyzes the algorithm type for responding to and processing the first instruction; after calling and running the corresponding algorithm according to the algorithm type, it feeds back the first response data to the central processing unit; the first instruction includes digital certificate reading and writing, signature verification, and encryption / decryption.

10. The terminal device according to claim 9, characterized in that, It also includes a smart card installed on the terminal device; When the sticker card recognizes the instruction as a second instruction, it transmits the second instruction to the smart card. After the smart card responds to and executes the operation corresponding to the second instruction, it sends back second response data to the film-covered card; the film-covered card sends the second response data back to the central processing unit; the second instruction includes requesting a call channel and closing a call channel.

Images