Background technology
NFC (Near Field Communication, near-field communication) is a kind of short-range wireless communication technology, makes between the electronic equipment in short distance, (in ten centimetres) to carry out contactless Point-to-Point Data Transmission swap data.Because near-field communication has natural fail safe, and with low cost, convenient easy-to-use, therefore, the NFC technology is considered to have great application prospect in fields such as mobile-phone payments.
NFC technology principal character is following:
(1) is used for closely the wireless communication technology of (in the 10cm) secure communication.
(2) rf frequency: 13.56MHz.
(3) radio frequency is compatible: ISO 14443, and ISO 15693, Felica (contact type intelligent card) standard.
(4) data transmission bauds: 106kbit/s, 212kbit/s, 424kbit/s.
The near-field communication technology is by Nokia (Nokia); Philips (Philips); The standard that Sony (Sony) cooperation is formulated, at ISO 18092, ECMA 340 promotes standardization down with ETSI TS 102 190 frameworks; Also compliant applications ISO 14443 Type-A widely simultaneously, the architecture of B and Felica standard contact type intelligent card.The frame format of modulation scheme, coding, transmission speed and RF (radio frequency) interface of near-field communication standard specified in more detail near-field communication equipment; And initiatively with passive near-field communication pattern initialization procedure in required initialization scheme and the condition of data collision control; Define host-host protocol in addition, comprised agreement startup and method for interchanging data etc.The mode of operation of NFC equipment has following three kinds:
Mode card (Card emulation): this pattern is exactly to be equivalent to an IC-card that adopts RFID (radio frequency identification) technology in fact.Can substitute a large amount of IC-card (comprising credit card) occasion now, for example swipe the card in the market, mass transit card, gate inhibition's control, ticket, admission ticket etc.Under this kind mode, a great advantage is arranged, that RF territory that is exactly card through contactless card reader supplies power, even if host's equipment (like mobile phone) does not have electricity can work yet.
Ad hoc mode (P2P mode): this pattern and infrared similar, can be used for exchanges data, though transmission range is shorter, the operation that transmission is set up is very convenient, and speed is very fast, and power consumption is lower.Between digital camera, PDA (personal digital assistant), computer, mobile phone, just can realize the fast data point-to-point transmission; As exchange music, picture, video clip, delivery network configuration, terminal configuration etc. or phone directory, message registration, note etc. synchronously.
Card reader pattern (Reader/writer mode): use as contactless card reader, such as perhaps puting on display the information electronic tag reads relevant information from placard.
Safe unit in the near-field communication functional module of the prior art is the not strong single-chip microcomputer of a kind of disposal ability, and is consuming time longer when handling the encryption and decryption computing.
Summary of the invention
The technical problem that the present invention will solve provides a kind of terminal and the method for handling payment transaction, to have strengthened the encryption and decryption ability of terminal processes NFC equipment.
In order to solve the problems of the technologies described above; The invention provides a kind of terminal; Comprise: near-field communication functional module and processing module, wherein, the safe unit in the said near-field communication functional module is connected with said processing module; In said safe unit, store the mobile payment Secure Application that comprises user's payment information
Said mobile payment Secure Application after being used to receive Payment Request, sends to said processing module with user's payment information; After receiving the user profile ciphertext of said processing module transmission, send said user profile ciphertext;
Said processing module is used for carrying out cryptographic calculation according to user's payment information and obtains the user profile ciphertext, and said user profile ciphertext is sent to said mobile payment Secure Application.
Further, above-mentioned terminal also has following characteristics:
Said mobile payment Secure Application after also being used to receive the transaction results ciphertext, sends to said processing module with said transaction results ciphertext and decryption information; Store the transaction record that said processing module is returned;
Said processing module also is used for according to said decryption information said transaction results ciphertext being deciphered, and the transaction record after the deciphering is returned to said mobile payment Secure Application.
Further, above-mentioned terminal also has following characteristics:
In the mainboard of the integrated said portable terminal of said safe unit, be connected with said processing module through bus,
Said safe unit adopts single line connection protocol mode or near-field communication wireline interface to be connected with near-field communication chip in the said near-field communication functional module.
Further, above-mentioned terminal also has following characteristics:
Said safe unit is arranged in the safe digital card, is connected with said processing module through said safe digital card, and said safe digital card adopts single line connection protocol mode to be connected with near-field communication chip in the said near-field communication functional module.
Further, above-mentioned terminal also has following characteristics:
Said safe unit is arranged in the Subscriber Identity Module, is connected with said processing module through bus, and said Subscriber Identity Module adopts single line connection protocol mode to be connected with near-field communication chip in the said near-field communication functional module.
Further, above-mentioned terminal also has following characteristics:
Said safe unit is arranged in the near-field communication chip in the said near-field communication functional module, is connected with said processing module through said near-field communication chip or bus.
Further, above-mentioned terminal also has following characteristics: said user's payment information comprises:
User profile, key certificate and AES information.
In order to address the above problem, the present invention also provides a kind of method of handling payment transaction, comprising:
After receiving Payment Request, user's payment information is sent to processing module, wherein, said user's payment information comprises: user profile, key certificate and AES information.
Further, said method also has following characteristics: also comprise:
After receiving the transaction results ciphertext, said transaction results ciphertext and decryption information are sent to said processing module.
Further, said method also has following characteristics: also comprise:
Store the transaction record after said processing module is returned deciphering.
To sum up, the present invention provides a kind of terminal and the method for handling payment transaction, makes NFC equipment can use complicated and the stronger enciphering and deciphering algorithm of function, has strengthened the encryption and decryption ability of NFC equipment, has improved the fail safe of NFC equipment as a kind of means of payment.
Embodiment
For making the object of the invention, technical scheme and advantage clearer, hereinafter will combine accompanying drawing that embodiments of the invention are elaborated.Need to prove that under the situation of not conflicting, embodiment among the application and the characteristic among the embodiment be combination in any each other.
As shown in Figure 1, the embodiment of the invention provides a kind of terminal, comprises NFC functional module and processing module, and wherein, the NFC functional module makes the terminal possess the function of near-field communication.
Safe unit in the said near-field communication functional module in the present embodiment is connected with said processing module, in said safe unit (SE), stores the mobile payment Secure Application that comprises user's payment information,
Said mobile payment Secure Application after being used to receive Payment Request, sends to said processing module with user's payment information; After receiving the user profile ciphertext of said processing module transmission, send said user profile ciphertext;
Said processing module is used for carrying out cryptographic calculation according to user's payment information and obtains the user profile ciphertext, and said user profile ciphertext is sent to said mobile payment Secure Application.
Wherein, said mobile payment Secure Application after also being used to receive the transaction results ciphertext, sends to said processing module with said transaction results ciphertext and decryption information; Store the transaction record that said processing module is returned;
Said processing module also is used for according to said decryption information said transaction results ciphertext being deciphered, and the transaction record after the deciphering is returned to said mobile payment Secure Application.
Can connect through the ISO7816 bus between SE in the present embodiment and the processing module, but be not limited to the ISO7816 bus, also can use other connected modes.
In this enforcement, SE can pass to processing module through instruction with the complex calculation, particularly enciphering and deciphering algorithm that need to handle, is accomplished computing fast and is returned result of calculation by processing module.The disposal ability of SE is limited, and this embodiment can improve the processing speed of SE, shortens the mutual time, and can expand the enciphering and deciphering algorithm scope of SE, reduces the SE cost, and in conjunction with the Secure Transaction model, the fail safe of NFC mobile payment scheme is effectively promoted.
Embodiments of the invention can also be applicable to PDA, notebook, desktop computer etc. except being applicable to mobile phone, as long as equipment has the powerful main control chip of disposal ability, can be suitable for embodiments of the invention.
The terminal of present embodiment is that example describes with the mobile phone, and the NFC nextport hardware component NextPort in the mobile phone mainly comprises three parts:
1, (Secure Element SE), is a SCM system to safe unit, can store polytype application, possesses the certain calculation ability.SE can also can be built in the near-field communication chip in safe digital card, Subscriber Identity Module or the near-field communication functional module with the mode individualism of chip.
2, NFC chip, NFC chip are used to realize non-contacting 13.56M radio communication function, meet ISO14443, ISO15693 and ISO18092 standard, and can supply power to safe unit through antenna feed.
3, NFC antenna.
According to the position of security component, various embodiments can be arranged, four embodiment below give an example:
Embodiment one
SE is integrated in cell phone mainboard inside, is connected to mobile phone baseband (being equivalent to above-mentioned processing module) through the ISO7816 bus, and is as shown in Figure 2.
All be to adopt the ISO7816 bus at present, not getting rid of has the possibility that adopts serial ports, I2C or SPI mouth etc.
SE in the present embodiment is connected with the NFC chip, both can adopt single line connection protocol (SWP) mode to connect, and also can adopt the near-field communication wireline interface to connect.
Embodiment two
Be built in the SE in the external memory storage, build in for example in SD (Secure Digital, the safe digital) card, connect through SD card and mobile phone baseband, as shown in Figure 3.
Embodiment three
With being built in the SE in SIM (Subscriber Identity Module, the User Recognition) card, connect through ISO7816 bus and base band, as shown in Figure 4.
Embodiment two can adopt the SWP mode to connect with SIM/SD card and being connected of NFC chip among the embodiment three, on the SWP single line, realizes full-duplex communication based on voltage and load-modulate principle.
Embodiment four
With being built in the NFC chip in the SE, both can pass through being connected of foundation of NFC chip and base band, also can connect through ISO7816 bus and base band, as shown in Figure 5.
Fig. 6 is the flow chart of method of the processing payment transaction of the embodiment of the invention, and the method for present embodiment is implemented by SE, comprises following step:
S10, receive Payment Request after, user's payment information is sent to baseband module, wherein, said user's payment information comprises: user profile, key certificate and AES information.
Further, can also comprise step:
S20, receive the transaction results ciphertext after, said transaction results ciphertext and decryption information are sent to said baseband module.
Then, can store the transaction record after said baseband module returns deciphering, so that user inquiring.
Fig. 7 is the Secure Transaction illustraton of model in practical application at the terminal of present embodiment, and the participant of Secure Transaction model that should use example is mainly by following several types:
1, NFC terminal use
The NFC mobile phone terminal that the terminal use uses needs in SE, to preset mobile payment Secure Application (containing user profile and key certificate) earlier, just can on the Pos of businessman machine, carry out payment transaction then.
2, the Pos of businessman machine
Businessman uses the transaction of can paying of the Pos machine of appointment.
3, user's card sending mechanism
User's card sending mechanism is asked key certificate and user profile to data center when the NFC mobile phone terminal of giving the user presets the mobile payment Secure Application, and writes the mobile payment Secure Application.
4, business settlement system
Key certificate from business settlement system to the request user of data center and user profile, is used for identifying user identity, encryption and decryption trading instruction and accomplishes process of exchange in the payment transaction process.
5, data center
Data center mainly is responsible for the record process of exchange, preserves user's key certificate and user profile.
Should mainly comprise following step with the Secure Transaction process of example, as shown in Figure 8:
Step 101, user's NFC mobile phone terminal is to the request of presetting of user's card sending mechanism initiation mobile payment Secure Application, and user's card sending mechanism writes the mobile payment Secure Application SE of NFC mobile phone terminal;
Personal data (comprising user profile and key certificate) is asked and got access to step 102, user's card sending mechanism to data center;
Step 103, user's card sending mechanism write personal data the mobile payment Secure Application among the SE of NFC mobile phone terminal, accomplish the hair fastener flow process.
Step 104, user initiate the payment transaction process in businessman, the NFC mobile phone terminal are placed mode card, near the Pos machine of businessman;
The Pos machine of step 105, businessman searches the NFC mobile phone terminal; And according to AID (the Application identifier of mobile payment Secure Application; Application identities) number have access to the corresponding mobile payment Secure Application among the SE after, just can use commands for controlling mobile payment Secure Application to carry out each generic operation.
Step 106, receive the payment instruction of Pos machine when the mobile payment Secure Application, will trigger action, extract user profile, through passing to base band, cryptographic calculation is carried out in request with AES information, key certificate and user profile;
After step 107, base band receive the cryptographic calculation request, call BBP and hardware accelerator and accomplish cryptographic calculation with the AES of appointment and obtain the user profile ciphertext, then the user profile ciphertext is returned to the mobile payment Secure Application;
Step 108, mobile payment Secure Application pass to the Pos of businessman machine with the user profile ciphertext through the NFC radio communication;
Step 109, the Pos of businessman machine pass to business settlement system with user profile ciphertext and Transaction Information;
Step 110, business settlement system ask and get access to user's key certificate and user profile to data center;
Step 111, business settlement system use user's key certificate decrypted user information ciphertext, identifying user identity.
Step 112, business settlement system are accomplished trading processing, and transaction record is passed to data center, and the information of Transaction Success or failure is returned to the Pos of businessman machine.
Step 113, business settlement system are encrypted transaction results, pass to the Pos of businessman machine;
Step 114, the Pos of businessman machine pass to the ciphertext of transaction results the mobile payment Secure Application of NFC mobile phone terminal through the NFC radio communication;
Step 115, mobile payment Secure Application pass to base band with ciphertext, enciphering and deciphering algorithm and key certificate;
Step 116, base band are accomplished decrypt operation with the enciphering and deciphering algorithm of appointment, and transaction record is returned to the mobile payment Secure Application; The user just can inquire transaction results.
One of ordinary skill in the art will appreciate that all or part of step in the said method can instruct related hardware to accomplish through program, said program can be stored in the computer-readable recording medium, like read-only memory, disk or CD etc.Alternatively, all or part of step of the foregoing description also can use one or more integrated circuits to realize.Correspondingly, each the module/unit in the foregoing description can adopt the form of hardware to realize, also can adopt the form of software function module to realize.The present invention is not restricted to the combination of the hardware and software of any particular form.
More than be merely the preferred embodiments of the present invention; Certainly; The present invention also can have other various embodiments; Under the situation that does not deviate from spirit of the present invention and essence thereof, those of ordinary skill in the art work as can make various corresponding changes and distortion according to the present invention, but these corresponding changes and distortion all should belong to the protection range of the appended claim of the present invention.