Can realize the mobile phone that digital certificate is used
Technical field
The present invention relates to digital certificate technique, particularly can realize the mobile phone that digital certificate is used.
Background technology
Along with popularizing of Internet-based banking services, increasing people brings into use this conveniently bank service, and, he uses in order to further facilitate the user, a lot of banks have released the mobile phone Internet-based banking services, and namely the user can directly carry out Internet-based banking services by mobile phone.And, in order to guarantee fail safe, proposed to realize the demand that digital certificate is used with mobile phone, namely from the transaction message that banking carries out generating the process, extract some key messages on the net, such as dealing money, transaction account etc., these key messages are shown to the user, after the user confirms that these key messages are errorless, transaction message is carried out the processing such as digital signature, and send to background server; Whether the background server certifying digital signature is correct, if so, then carries out subsequent transaction.
At present, realize that by mobile phone the mode that digital certificate is used mainly comprises following two kinds:
1, at the user identification module (SIM of mobile phone, Subscriber Identity Module), it is SIM card, or subscriber identification module (UIM, User Identity Module), be that the integrated digital certificate is used on the UIM card, that is to say that SIM card/UIM card is exactly the carrier of digital certificate.When needs combine digital certificate application function, main central processing unit (CPU in the mobile phone, CentralProcessing Unit) carries out the functions such as extraction, demonstration, and confirm as the user errorless after, transaction message is sent to SIM card/UIM stick into line number word signature, and the transaction message behind the signature that SIM card/the UIM card returns is sent to background server.
2, connect the digital certificate instrument by the special communication interface that arranges on the mobile phone, such as, utilize standard flash memory card (CF, Compact Flash) communication interface to connect the digital certificate instrument with CF cartoon communication interface; Perhaps, utilize the communication interface of SIM card/UIM card, paste a digital certificate instrument at SIM card/UIM card.Host CPU in the mobile phone is carried out the functions such as extraction, demonstration, and confirm as the user errorless after, transaction message is sent to the digital certificate instrument, and the transaction message behind the signature that the digital certificate instrument is returned sends to background server.
But all can there be certain problem in above-mentioned two kinds of processing modes in actual applications, because:
Above-mentioned which kind of mode no matter, the hardware that provides digital certificate to use, such as SIM card/UIM card, or the digital certificate instrument etc., for easy to use, usually all be to be connected to for a long time on the mobile phone, and control by the host CPU in the mobile phone all the time, and the at present fail safe of the host CPU of mobile phone can't guarantee fully, such as, if mobile phone has been downloaded certain software from the Internet, may carry virus in this software, namely attack software, so follow-up this attack software can be hidden in the operating system of host CPU, thereby affects the fail safe that digital certificate is used.
Summary of the invention
In view of this, the object of the present invention is to provide the mobile phone that to realize that digital certificate is used, can improve the fail safe that digital certificate is used.
For achieving the above object, technical scheme of the present invention is achieved in that
A kind of mobile phone that can realize that digital certificate is used comprises: cell phone keyboard, main central processing unit CPU, safety certificate control module ACM, authentication module, library stores module, display module and the reminding module relatively independent with the operating system of mobile phone;
Described host CPU is used for sending transaction message to described ACM module;
Described ACM module, be used for extracting key message from the transaction message that receives, and from described library stores module, obtain the required type matrix of the described key message of demonstration, and the type matrix that gets access to is sent to described display module, notify simultaneously described reminding module to carry out self function;
Described display module is used for according to the type matrix that receives described key message being shown to the user;
Described reminding module is used for the described ACM module of prompting user just at combine digital certificate application function;
Described ACM module is further used for, determine whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then described transaction message is sent to described authentication module and carry out digital signature, and the transaction message behind the signature that described authentication module is returned sends to described host CPU;
Described authentication module be used for described transaction message is carried out digital signature, and the transaction message after will signing sends to described ACM module.
Preferably, described authentication module is the module that arranges separately, or for carrying out user identification module SIM or the subscriber identification module UIM behind the Function Extension.
A kind of mobile phone that can realize that digital certificate is used comprises: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and the reminding module relatively independent with the operating system of mobile phone;
Described host CPU is used for sending transaction message to described ACM module;
Described ACM module is used for extracting key message from the transaction message that receives, and sends to described host CPU, notifies simultaneously described reminding module to carry out self function;
Described reminding module is used for the described ACM module of prompting user just at combine digital certificate application function;
Described host CPU is further used for, under the control of described ACM module, from described library stores module, obtain and show the required type matrix of described key message, the type matrix that gets access to is sent to described display module, and determine whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then send a notification message to described ACM module;
Described display module is used for according to the type matrix that receives described key message being shown to the user;
Described ACM module is further used for, and after receiving described notification message, described transaction message is sent to described authentication module, and the transaction message behind the signature that described authentication module is returned sends to described host CPU;
Described authentication module be used for described transaction message is carried out digital signature, and the transaction message after will signing sends to described ACM module.
A kind of mobile phone that can realize that digital certificate is used comprises: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and the reminding module relatively independent with the operating system of mobile phone;
Described host CPU is used for sending transaction message to described ACM module;
Described ACM module is used for extracting key message from the transaction message that receives, and sends to described host CPU, notifies simultaneously described reminding module to carry out self function;
Described reminding module is used for the described ACM module of prompting user just at combine digital certificate application function;
Described host CPU is further used for, under the control of described ACM module, from described library stores module, obtain and show the required type matrix of described key message, the type matrix that gets access to is sent to described display module, and determine whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then described transaction message is sent to described authentication module, and receive the transaction message behind the signature that described authentication module returns;
Described display module is used for according to the type matrix that receives described key message being shown to the user;
Described authentication module be used for described transaction message is carried out digital signature, and the transaction message after will signing returns to described host CPU.
Preferably, described authentication module is SIM card or the UIM card that carries out behind the Function Extension.
A kind of mobile phone that can realize that digital certificate is used comprises: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and the reminding module relatively independent with the operating system of mobile phone;
Described host CPU is used for sending transaction message to described ACM module;
Described ACM module, be used for reading the script run time version of described authentication module, determine and the execution follow-up processing flow according to described script run time version, comprise: from the transaction message that receives, extract key message, and from described library stores module, obtain and show the required type matrix of described key message, the type matrix that gets access to is sent to described display module, notify simultaneously described reminding module to carry out self function;
Described display module is used for according to the type matrix that receives described key message being shown to the user;
Described reminding module is used for the described ACM module of prompting user just at combine digital certificate application function;
Described ACM module is further used for, determine whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then described transaction message is sent to described authentication module and carry out digital signature, and the transaction message behind the signature that described authentication module is returned sends to described host CPU;
Described authentication module be used for described transaction message is carried out digital signature, and the transaction message after will signing returns to described ACM module.
Preferably, described authentication module is SIM card or the UIM card that carries out behind the Function Extension.
A kind of mobile phone that can realize that digital certificate is used comprises: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and the reminding module relatively independent with the operating system of mobile phone;
Described host CPU is used for sending transaction message to described ACM module;
Described ACM module, be used for reading the script run time version of described authentication module, determine and the execution follow-up processing flow according to described script run time version, comprise: from the transaction message that receives, extract key message, and send to described host CPU, notify simultaneously described reminding module to carry out self function;
Described reminding module is used for the described ACM module of prompting user just at combine digital certificate application function;
Described host CPU is further used for, under the control of described ACM module, from described library stores module, obtain and show the required type matrix of described key message, the type matrix that gets access to is sent to described display module, and determine whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then described transaction message is sent to authentication module, and receive the transaction message behind the signature that described authentication module returns;
Described display module, the user is shown to the user according to the type matrix that receives with described key message;
Described authentication module be used for described transaction message is carried out digital signature, and the transaction message after will signing returns to described host CPU.
Preferably, described authentication module is SIM card or the UIM card that carries out behind the Function Extension.
As seen, adopt technical scheme of the present invention, using relevant function with digital certificate is mainly carried out by the ACM module, rather than host CPU of the prior art, therefore, hide in the operating system of host CPU even attack software, also can not exert an influence to the ACM module, thereby improved the fail safe that digital certificate is used in the mobile phone.
Description of drawings
Fig. 1 is the structural representation that the present invention can realize mobile phone the first embodiment that digital certificate is used.
Fig. 2 is the structural representation that the present invention can realize mobile phone the second embodiment that digital certificate is used.
Fig. 3 is the structural representation that the present invention can realize mobile phone the 3rd embodiment that digital certificate is used.
Fig. 4 is the structural representation that the present invention can realize mobile phone the 4th embodiment that digital certificate is used.
Fig. 5 is the structural representation that the present invention can realize mobile phone the 5th embodiment that digital certificate is used.
Fig. 6 is the structural representation that the present invention can realize mobile phone the 6th embodiment that digital certificate is used.
Embodiment
For problems of the prior art, a kind of mobile phone that can realize that digital certificate is used is proposed among the present invention, in mobile phone, increase a safety certificate control module (ACM, Authority Certificate Module), the operating system of this module and existing mobile phone is relatively independent, is mainly realized the digital certificate application function of mobile phone by this module; And, the operating state of ACM module can be pointed out at mobile phone, such as, if the ACM module at combine digital certificate application function, then can be notified the user by showing the indicator light of a special color at mobile phone screen or presenting a kind of special display mode at screen; If combine digital certificate application function is not then pointed out.Need to prove that above-mentioned prompting is controlled by the ACM module, other module in the mobile phone all can't be controlled.
For making purpose of the present invention, technical scheme and advantage clearer, referring to the accompanying drawing embodiment that develops simultaneously, the present invention is described in further detail.
Fig. 1 is the structural representation that the present invention can realize mobile phone the first embodiment that digital certificate is used.As shown in Figure 1, comprising: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and reminding module; Certainly, in actual applications, also can further comprise SIM card/UIM card and other functional module.
In the present embodiment, host CPU sends transaction message to the ACM module; The ACM module extracts key message from the transaction message that receives, and obtains the required type matrix of demonstration key message from the library stores module, and the type matrix that gets access to is sent to display module, notifies simultaneously reminding module to carry out self function; Display module is shown to the user according to the type matrix that receives with described key message, and simultaneously, reminding module prompting user ACM module is just at combine digital certificate application function; Afterwards, the ACM module determines whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then transaction message is sent to authentication module and carry out digital signature, and the transaction message behind the signature that authentication module is returned sends to host CPU; At last, the transaction message after host CPU will be signed sends to background server.
In actual applications, when needed, host CPU can switch to be controlled display module and cell phone keyboard etc., and follow-up analogue repeats no more.
Fig. 2 is the structural representation that the present invention can realize mobile phone the second embodiment that digital certificate is used.As shown in Figure 2, comprising: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and reminding module; Certainly, in actual applications, also can further comprise other functional module.
The specific works mode of each module shown in the present embodiment and embodiment illustrated in fig. 1 basic identical, difference only is that the authentication module among Fig. 1 is a module that arranges separately, and the authentication module in the present embodiment is the SIM card/UIM card, the i.e. SIM card of integrated digital certificate application function/UIM card of carrying out behind the Function Extension.When host CPU and SIM card/when the UIM card carried out communicating by letter of nonnumeric certificate application facet, the ACM module only was responsible between contact transmission of information, the information of transmitting is not carried out any processing.
Fig. 3 is the structural representation that the present invention can realize mobile phone the 3rd embodiment that digital certificate is used.As shown in Figure 3, comprising: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and reminding module; Certainly, in actual applications, also can further comprise SIM card/UIM card and other functional module.
In the present embodiment, host CPU sends transaction message to the ACM module; The ACM module extracts key message from the transaction message that receives, and sends to host CPU, notifies simultaneously reminding module to carry out self function; Reminding module prompting user ACM module is just at combine digital certificate application function; Host CPU obtains from the library stores module and shows the required type matrix of described key message, and the type matrix that gets access to is sent to display module; Display module is shown to the user according to the type matrix that receives with key message; Afterwards, host CPU determines whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then sends a notification message to the ACM module; The ACM module sends to authentication module with transaction message after receiving notification message, and the transaction message behind the signature that authentication module is returned sends to host CPU; Transaction message after host CPU will be signed sends to background server.
In the present embodiment, the operation relevant with demonstration and monitoring etc. that host CPU relates to all is to carry out under the control of ACM module.
Fig. 4 is the structural representation that the present invention can realize mobile phone the 4th embodiment that digital certificate is used.As shown in Figure 4, comprising: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and reminding module; Certainly, in actual applications, also can further comprise other functional module.Wherein, authentication module is the SIM card/UIM card of carrying out behind the Function Extension.
In the present embodiment, host CPU sends transaction message to the ACM module; The ACM module extracts key message from the transaction message that receives, and sends to host CPU, notifies simultaneously reminding module to carry out self function; Reminding module prompting user ACM module is just at combine digital certificate application function; Host CPU obtains from the library stores module and shows the required type matrix of described key message, and the type matrix that gets access to is sent to display module, and display module is shown to the user according to the type matrix that receives with described key message; Simultaneously, host CPU determines whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then transaction message is sent to authentication module, and the transaction message behind the signature that authentication module is returned sends to background server.
In the present embodiment, the operation relevant with demonstration, monitoring and signature etc. that host CPU relates to all is to carry out under the control of ACM module.
Fig. 5 is the structural representation that the present invention can realize mobile phone the 5th embodiment that digital certificate is used.As shown in Figure 5, comprising: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and reminding module; Certainly, in actual applications, also can further comprise other functional module.Wherein, authentication module is the SIM card/UIM card of carrying out behind the Function Extension.
In the present embodiment, increase a special PORT COM in SIM card/UIM card, thereby so that SIM card/UIM card can be connected simultaneously with host CPU and ACM module.Usually, have 8 contacts on SIM card/UIM card, but only can use 6 generally speaking, so in the present embodiment, can utilize other 2 contacts to make a communication interface, realize that SIM card/UIM card is connected with the ACM module.
Among front four embodiment, when the ACM module needs What for all is to control by the program of writing in advance and being stored in the ACM module, the ACM module only needs follow procedure requirement execution to get final product, but can there be like this a problem, because the ACM module is fixed on the cell phone mainboard, the inconvenience dismounting, so in case set, just be not easy to change very much, if need to change so some function of ACM module, content such as the key message that changes its extraction, will be difficult to realize, if can control the workflow of ACM module then different by SIM card/UIM card, because SIM card/UIM card can at will plug, also can be than being easier to so the program on it is made amendment.
The specific implementation of present embodiment comprises: host CPU sends transaction message to the ACM module; The ACM module reads the script run time version in the authentication module, determine and the execution follow-up processing flow according to described script run time version, comprise: from the transaction message that receives, extract key message, and from the library stores module, obtain and show the required type matrix of described key message, the type matrix that gets access to is sent to display module, notify simultaneously reminding module to carry out self function; Display module is shown to the user according to the type matrix that receives with described key message, and simultaneously, reminding module prompting user ACM module is just at combine digital certificate application function; The ACM module determines whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then transaction message is sent to authentication module and carry out digital signature, and the transaction message behind the signature that authentication module is returned sends to host CPU; Transaction message after host CPU will be signed sends to background server.
Fig. 6 is the structural representation that the present invention can realize mobile phone the 6th embodiment that digital certificate is used.As shown in Figure 6, comprising: cell phone keyboard, host CPU, ACM module, authentication module, library stores module, display module and reminding module; Certainly, in actual applications, also can further comprise other functional module.Wherein, authentication module is the SIM card/UIM card of carrying out behind the Function Extension.
Host CPU sends transaction message to the ACM module; The ACM module reads the script run time version in the authentication module, determine and the execution follow-up processing flow according to the script run time version, comprise: from the transaction message that receives, extract key message, and send to host CPU, notify simultaneously reminding module to carry out self function; Reminding module prompting user ACM module is just at combine digital certificate application function; Host CPU obtains from the library stores module and shows the required type matrix of described key message, and the type matrix that gets access to is sent to display module, and display module is shown to the user according to the type matrix that receives with described key message; Afterwards, host CPU determines whether to monitor the affirmation information that the user sends by cell phone keyboard, if so, then transaction message is sent to authentication module, and receives the transaction message behind the signature that authentication module returns, and sends to background server.
In the present embodiment, the operation relevant with demonstration, monitoring and signature etc. that host CPU relates to all is to carry out under the control of ACM module.
In the various embodiments described above, host CPU can be by independent physical port automatic switchover operational module, the mode of operation of mentioning here, the mode of operation the when mode of operation when namely referring to combine digital certificate application function and other function of execution.Like this, can guarantee that host CPU when combine digital certificate application function, do not carry out other function, and after the digital certificate application function is finished, can continue to carry out other function, both do not interfere with each other.
In a word, adopt technical scheme of the present invention, using relevant function with digital certificate is mainly carried out by the ACM module, rather than host CPU of the prior art, therefore, hide in the operating system of host CPU even attack software, also can not exert an influence to the ACM module, thereby improved the fail safe that digital certificate is used in the mobile phone; And the prior art that is maturation that scheme of the present invention relates to is convenient to popularize.
In sum, more than be preferred embodiment of the present invention only, be not for limiting protection scope of the present invention.Within the spirit and principles in the present invention all, any modification of doing, be equal to replacement, improvement etc., all should be included within protection scope of the present invention.