KR100926364B1 - Method and Apparatus for Providing Simultaneously Plural Application Interfaces in Smart Card - Google Patents

Abstract

The present invention relates to a method and apparatus for simultaneously providing a plurality of application interfaces in a smart card. A method of simultaneously providing a plurality of application interfaces in a smart card according to the present invention includes: determining whether a proximity communication module is connected by using a change in an operating voltage applied to the smart card; As a result of the determination, when the proximity communication module is connected, the application identification code for converting the application identification code value of the APDU (Application Protocol Data Unit) received from the proximity communication module to a predefined application identification code value corresponding to the RF interface Conversion step; And a data processing step of identifying the application interface type using the converted application identification code to process the received APDU. Therefore, the present invention has the advantage of simultaneously providing a plurality of application interfaces in the smart card without changing the proximity communication module.

Smart card, card operating system, operating voltage, USB, proximity communication

Description

Method and Apparatus for Simultaneously Providing Simultaneously Plural Application Interfaces in Smart Card

The present invention relates to a smart card, and more particularly, to a method and apparatus for providing a plurality of application interfaces in a smart card capable of simultaneously providing a USB interface and an RF interface in one smart card.

As the use of smart cards is one of the basic specifications in the third generation mobile telecommunications market, each mobile carrier is actively researching the definition of its Universal Subscriber Identity Module (USIM) card specification and improving service using the USIM card.

Conventionally, the domestic mobile communication market has been mainstream in synchronous IS-95 network based on CDMA technology, but recently, Universal Mobile Telecommunication (UMTS) based on Wideband Code Division Multiple Access (WCDMA) method. System) service is being commercialized.

In particular, in recent years to meet the needs of various subscribers. Subscriber authentication cards are being developed with Java Card, one of the open platforms. Individual value-added services can be developed into each Java Card applet, providing flexibility in providing personalized value-added services according to subscribers' needs.

In other words, the USIM card has a large capacity, multi-function smart card function, and can provide various functions such as communication function, global roaming function, and various additional service functions such as credit card, banking, stock trading, membership, and payment.

In recent years, efforts have been actively made to provide various application interfaces in one smart card.

However, to date, there is a problem in that an effective method for simultaneously supporting a USB interface and an RF interface is not provided in one smart card.

An object of the present invention for solving the problems of the prior art as described above is to provide a method and apparatus for simultaneously providing a plurality of application interfaces in one smart card.

Another object of the present invention is to provide a smart card capable of identifying the application interface in the card operating system by converting the application identification code of the APDU internally without changing the existing proximity communication module.

Other objects of the present invention will be readily understood through the following description of the embodiments.

According to an embodiment of the present invention, a method for simultaneously providing a plurality of application interfaces in a smart card is disclosed.

A method of simultaneously providing a plurality of application interfaces in a smart card according to an embodiment of the present invention includes: determining whether to connect a proximity communication module by using a change in an operating voltage applied to the smart card; As a result of the determination, when the proximity communication module is connected, the application identification code for converting the application identification code value of the APDU (Application Protocol Data Unit) received from the proximity communication module to a predefined application identification code value corresponding to the RF interface Conversion step; And a data processing step of identifying the application interface type using the converted application identification code to process the received APDU.

According to another embodiment of the present invention, an apparatus for simultaneously providing a plurality of application interfaces in a smart card is disclosed.

A proximity communication processor for detecting a connection of a proximity communication module according to a change in an operating voltage applied to a smart card and converting an application identification code of an APDU received from the proximity communication module and a card operating system; And

An application interface type may be identified using the application identification code of the APDU, and may include a card management body for processing the APDU received through the application interface.

The present invention has the advantage of providing a method and apparatus for simultaneously providing a plurality of application interfaces in one smart card.

In addition, the present invention has the advantage of providing a smart card capable of identifying the application interface in the card operating system by converting the application identification code of the APDU internally without changing the existing proximity communication module.

As the invention allows for various changes and numerous embodiments, particular embodiments will be illustrated in the drawings and described in detail in the written description. However, this is not intended to limit the present invention to specific embodiments, it should be understood to include all modifications, equivalents, and substitutes included in the spirit and scope of the present invention.

The terms first, second, etc. may be used to describe various components, but the components should not be limited by the terms. The terms are used only for the purpose of distinguishing one component from another. For example, without departing from the scope of the present invention, the first component may be referred to as the second component, and similarly, the second component may also be referred to as the first component.

The term and / or includes a combination of a plurality of related items or any item of a plurality of related items. The terminology used herein is for the purpose of describing particular example embodiments only and is not intended to be limiting of the present invention. Singular expressions include plural expressions unless the context clearly indicates otherwise.

In this application, the terms "comprising" or "mounted" and "mounted" are intended to indicate that there is a feature, number, step, action, component, part, or combination thereof described on the specification, one Or other features or numbers, steps, operations, components, parts or combinations thereof in any way should not be excluded in advance.

Unless defined otherwise, all terms used herein, including technical or scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art. Terms such as those defined in the commonly used dictionaries should be construed as having meanings consistent with the meanings in the context of the related art, and are not construed in ideal or excessively formal meanings unless expressly defined in this application. Do not.

Other aspects, features, and advantages other than those described above will become apparent from the following drawings, claims, and detailed description of the invention.

Hereinafter, a preferred embodiment of a method and apparatus for simultaneously providing a plurality of application interfaces in a smart card according to the present invention will be described in detail with reference to the drawings.

1 is a view for explaining the communication mechanism between the terminal and the smart card according to the prior art.

As shown in Fig. 1, communication between a terminal and a smart card according to the prior art follows a half duplex mode communication method in the form of request / response using a syntax defined in the ISO 7816 standard. In general, the transmission scheme defined in the ISO 7816 standard supports low-speed data communication, eg, 9.6 kbps, using serial bidirectional transmission lines.

The ISO 7816 standard provides two transport protocols.

One of them, the T = 0 protocol, is a transmission protocol used in the early days of ISO 7816 and follows the asynchronous half-duplex byte transmission scheme.

The remaining T = 1 protocols are called block transfer protocols, and there is room for some improvement in security compared to byte transfer protocols. Since adopting T = 0 protocol in GSM's 11.11 Subscriber Identification Module (SIM), next-generation credit card EMVs have adopted both T = 0 and T = 1 protocols.

Referring to FIG. 1, a command is initiated by a terminal, and a card operating system (Card OS) embedded in a smart card interprets a command received from the terminal to update a state of data stored in the smart card. Sends a response to the received command to the terminal.

ISO 7816-7 provides a command message and a response message transmitted and received between a terminal and a smart card using a conventional application protocol data unit (APDU).

Currently, the high speed communication interface between the terminal and the smart card, which is currently being targeted for 3GPP Release 7, includes the IC-USB high speed communication interface and the SWP interface for RF as well as the existing ISO 7816 serial interface.

Conventional USIM, where USIM is a form of smart card, generally means a subscriber authentication module mounted on a terminal supporting WCDMA, which is a third-generation asynchronous wireless access method, which is a contact type and a contactless type. In order to simultaneously support different types of modems, different modems are used, and logical channels for each type are separated to provide services.

In the following description, a smart card that supports both contact and contactless services in one smart card will be referred to as a 'hybrid smart card'.

However, until now, the method of handling contactless-that is, the RF interface method in a hybrid smart card has not been clearly determined.

2 is an APDU command message structure defined in ISO 7816.

As shown in FIG. 2, the APDU command message is mainly composed of a header 210 and a body 220.

The header 410 may be composed of a class 211, an instruction code 212, and a parameter 213.

Here, the parameter 213 is composed of P1 214 and P2 215, and P1 214 and P2 215 indicate reference address information of the command code 412.

Class 211 is an area in which class bytes for identifying an instruction set, such as ISO instructions, dedicated instructions, encryption, and the like, are recorded and described in detail in ISO 7816-4.

In addition, the class 211 has a length of 1 byte, and the lower two bits (bits) may be used for identifying various application programs mounted on a smart card.

The instruction code 212 is a code for identifying the instruction type in combination with the class field 211. The LSB of the valid instruction code is always 0, and the MSB cannot be 6 or 9. The reason is that the value is used internally by the smart card manufacturer to avoid the conflict.

The body 220 has a variable length and includes a length of command data (Lc) 221 indicating a length of data included in a command message, a data 222 indicating data to be recorded in a corresponding address area of the smart card, and a smart card. It consists of Le (Length of Expected response data, 223) indicating the size of response message to be received.

Hereinafter, various structures of the APDU command message will be briefly described.

The first structure is a command message that does not require transmission or reception data, and is composed of a class 211, a command code 212, a P1 214, and a P2 215.

The second structure is a command message containing data to be sent from the terminal to the smart card. Class 211, command code 212, P1 (214), P2 (215), Lc (221), DATA (422).

The third structure is a command message for which the terminal does not transmit data to the smart card, but requests a data reply response to the smart card. Class 211, command code 212, P1 214, P2 215, Le 223.

Lastly, the fourth structure is a command message for requesting a data reply response to the smart card at the same time that the terminal transmits data to the smart card. Class 211, command code 212, P1 214, P2 215 , Lc 221, DATA 222, and Le 223.

As noted above, class 211, command code 212, P1 214 and P2 215 information are essential components that must be included in the APDU command message.

3 is a view for explaining the smart card pin assignment structure and function defined in ISO 7816-2.

As shown in FIG. 3, ISO 7816 part 2 defines the arrangement and location of the electrical contact surfaces. That is, define the purpose, location and electrical characteristics of the metal contact of the smart card.

The smart card defined in ISO 7816 part 2 consists of 8 pins in total, and the arrangement of each pin is as shown in reference numeral 300.

In the following description, the function of each pin will be described in detail.

C1 (Vcc, 310) is a pin that provides operating power to a microprocessor chip on a smart card via a power line.

C2 (RST) 320 is a pin that receives a predetermined reset signal from a device that communicates with a smart card via a predetermined reset line. The microprocessor on the smart card, i.e., the card operating system, is C2. Upon receiving the reset signal through 320, a series of reset commands is started.

C3 (CLK) 330 is a pin that provides a clock signal to the microprocessor chip of the smart card through the clock signal line. Here, the clock signal may provide a common framework for the communication speed of the smart card and data communication between the smart card and an external interface device such as a terminal such as a mobile terminal.

C5 (GND, 310) is a pin that provides a common electrical grounding function between the external interface device and the smart card.

C6 (Vpp, 360) is a pin that provides the programming power used to program the EEPROM (Electrically-Erasable Programmable Read-Only Memory) of the first smart card.

In particular, C6 360, which provides the EEPROM programming voltage, was used a lot in the early days, but is not used due to the recent development of semiconductor technology.

The C7 (I / O) 370 is an input / output pin for providing a half-duplex communication channel based on the ISO 7816 standard between the smart card reader and the smart card.

C4 (Reserved for Future Use (RFU) 340) and C8 (Reserved for Future Use (RFU) 380) are reserved pins for future use and are pins for which no special functionality has yet been defined.

4 is a structure of a smart card according to an embodiment of the present invention.

In more detail, FIG. 4 is a diagram for describing pin assignment of a smart card capable of simultaneously supporting an existing USIM interface and an RF interface.

C1 410, C2 420, C3 430, C5 450, and C7 470 shown in FIG. 4 are respectively C1 310, C2 320, and C3 ( 330, C5 350, and C7 370 have the same function and electrical characteristics, and thus description of the corresponding pins will be omitted in the description of this drawing.

C4 (USB +, 440) and C8 (USB-, 480) according to the present embodiment may be used as pins for providing a high speed communication interface of IC-USB.

In particular, the C6 460 is used as a pin for providing a full duplex single wire protocol (SWP) between the smart card and the NFC module 490.

The smart card 400 provides a voltage and ground means of the NFC module 490 through the C1 410 and the C5 450 when the NFC module 490 is mounted to the smart card 400.

In general, an over-the-air (OTA) method is used as a technology for wirelessly transmitting information on a smart card. In particular, the OTA technology may be used for issuing credit cards and transportation cards to the USIM via wireless.

NFC, on the other hand, is an active proximity communication scheme defined in ISO 18092 based on existing 13.56MHz RFID technology. For example, NFC is a proximity communication technology used when making a payment using a card issued through OTA. In particular, NFC has the advantage that the recognition range is wider than the RF method currently used in mobile payments, and unlike the conventional method that can be recognized only by touching the mobile phone to the payment terminal for payment, payment is possible only by touching the side. It should be noted that the NFC module 490 according to the present invention may be configured integrally with the smart card or may be removable.

5 is a pin arrangement and interface structure of a smart card according to an embodiment of the present invention.

As shown in FIG. 5, a smart card according to an embodiment of the present invention includes an operating voltage Vcc from a terminal baseband processor, for example, a mobile station modem (MSM) provided in a mobile communication terminal. Signals such as Reset, Clock, and Ground are received through C1 541, C2 542, C3 543, and C5 545, respectively.

The smart card also provides a half-duplex communication channel based on the ISO 7816 standard through the terminal baseband processor 550 and the C7 547.

The smart card according to the present invention may provide a SWP type wireless communication interface through the NFC module 530 and the C6 546.

The NFC module 530 may receive a voltage and a ground signal for operation from the terminal baseband processor 550.

In particular, the proximity communication processor 520 provided in the smart card according to an embodiment of the present invention is that the NFC module 530 is connected through a change in operating voltage, for example, when Vcc drops from Max to Min. It can be recognized.

In this case, the proximity communication processor 520 preferably transmits a predetermined control signal indicating that the NFC module 530 is connected, for example, a proximity communication module connection event, to the card operating system 510.

The card operating system 510 may transmit the processed APDU to the proximity communication processor 520 only when receiving a control signal indicating that the proximity communication module is connected.

In addition, the proximity communication processor 520 may detect that the connection of the NFC module 530 is released through the change of the operating voltage, and detects a predetermined control signal, for example, a proximity communication disconnect event. It can transmit to the operating system (510).

Referring to FIG. 2, the header 210 of the APDU includes a class 211 field, and 2 bits of LSB (Least Significant Bit) of the class 211 field, hereinafter, referred to as an "application identification code". Can be used to identify application interfaces. Here, 00 (0) to 10 (2) of the values assignable to the application identification code are values assigned to the data input from the USB interface.

Accordingly, by assigning 11 (3) to the application identification code of the class 211 field for data input through the RF interface, the card operating system 510 is inputted through the RF interface and the data input through the USB interface. Data can be identified.

However, the application identification code of the class 211 inputted through the NFC module 530 from a commercially available RF infrastructure is used as the value used for the USB interface, for example, binary '00' to '10'. Therefore, the card operating system 510 has a problem in that it is not possible to identify which data is input through the application interface.

In order to solve the above problems, the existing NFC method may be changed so that the application identification code input through the conventional commercialized NFC module 530 is 11 (3), but this is a practically impossible problem.

Therefore, when the proximity communication processor 520 according to an embodiment of the present invention detects the connection of the NFC module 530 through a change in operating voltage, the application identification code of the APDU input from the C6 546 is 11 (3). ) And the ADPU with the application identification code converted to the card operating system 510.

At this time, the proximity communication processor 520 temporarily stores the application identification code of the corresponding APUD before conversion, wherein the application identification code is any one of 00 (0) to 10 (2) in a predetermined recording area. Do.

In order to maintain compatibility with the existing NFC communication method, the proximity communication processor 520 according to an embodiment of the present invention is a temporary application stored in the application identification code of the APDU received from the card operating system 510 corresponding application identification code Transmit and transfer to the NFC module 530 through the C6 (546).

Therefore, the smart card according to the present invention can simultaneously support the USB interface and the RF interface to the NFC module 530.

In the above-described embodiment, the application identification code corresponding to the RF application interface has been described as being defined as binary '11', but this is not possible in one embodiment and is not duplicated with the application identification code corresponding to the other application interface. It should be noted that this may be defined.

6 is a flowchart illustrating a procedure of processing an APDU received from an NFC module in a proximity communication processor according to an embodiment of the present invention.

As shown in FIG. 6, the proximity communication processor 520 according to the present invention determines whether the NFC module 530 is connected (S610). Here, whether the NFC module 530 is connected may be determined using a change in the operating voltage applied to the smart card.

As a result of determination, if the NFC module 530 is connected, the proximity communication processor 520 receives the APDU transmitted by the NFC module 530 through the C6 (546) (S620).

The proximity communication processor 520 temporarily stores the application identification code of the received APDU in a predetermined recording area (S630), and stores the application identification code of the received APDU corresponding to the predefined RF interface- For example, binary 11 (3)-is converted (S640).

The proximity communication processor 520 transmits the converted APDU to the card operating system 510 (650).

According to another exemplary embodiment of the present invention, between steps 610 and 620, the proximity communication processor 520 sends a proximity communication connection event signal indicating that the NFC module 530 is connected to the card operating system 510. You can also send.

7 is a flowchart illustrating a procedure of processing an APDU received from a card operating system in a proximity communication processor according to an embodiment of the present invention.

As shown in FIG. 7, when the proximity communication processor 520 receives the APDU processed by the card operating system 510 (S710), the application identification code of the received APDU, where the value of the application identification code is a binary number. 11 (3) is converted into an application identification code temporarily stored in step 630 of FIG. 6 (S720).

The proximity communication processor 520 transmits the converted APDU to the NFC module 530 through the C6 546 (S730).

Preferred embodiments of the present invention described above are disclosed for purposes of illustration, and those skilled in the art will be able to make various modifications, changes, and additions within the spirit and scope of the present invention. Additions should be considered to be within the scope of the following claims.

1 is a view for explaining the communication mechanism between the terminal and the smart card according to the prior art.

2 is an APDU command message structure defined in ISO 7816.

3 is a view for explaining the smart card pin assignment structure and function defined in ISO 7816-2.

4 is a structure of a smart card according to an embodiment of the present invention.

5 is a pin arrangement and interface structure of a smart card according to an embodiment of the present invention.

6 is a flowchart illustrating a procedure of processing an APDU received from an NFC module in a proximity communication processor according to an embodiment of the present invention.

7 is a flowchart illustrating a procedure of processing an APDU received from a card operating system in a proximity communication processor according to an embodiment of the present invention.

* Key Drawing

210: header

211: class field

510: Card operation system

520: proximity communication processing unit

530: NFC module

541 C1 (VCC)

546: C6

550: terminal baseband processing unit

560 USB module

Claims (15)

In the method of simultaneously providing a plurality of application interfaces in the smart card, A proximity communication module connection checking step of determining whether a proximity communication module is connected by using a change in an operating voltage applied to the smart card; As a result of the determination, when the proximity communication module is connected, the application identification code for converting the application identification code value of the APDU (Application Protocol Data Unit) received from the proximity communication module to a predefined application identification code value corresponding to the RF interface Conversion step; And A data processing step of identifying the application interface type using the converted application identification code and processing the received APDU; Simultaneously providing a plurality of application interfaces in the smart card comprising a. The method of claim 1, And temporarily storing the application identification code value before the conversion. The method of claim 2, Prior to the application identification code conversion, Temporarily storing the application identification code value of the APDU received from the proximity communication module, converting the application identification code value of the APDU generated internally in the smart card into the temporary stored application identification code value, and transmitting it to the proximity communication module; A method for simultaneously providing a plurality of application interfaces in a smart card. The method of claim 1, The application identification code is a method of providing multiple application interfaces in a smart card, characterized in that the LSB (Least Significant Bit) 2 bits of the class byte defined in the header of the APDU. The method of claim 4, wherein And a value of a predefined application identification code corresponding to the RF interface is different from a value of an application identification code corresponding to another application interface. The method of claim 1, Method of simultaneously providing a plurality of application interfaces in the smart card to provide a communication interface to the proximity communication module through the C6 of the eight contact pins provided in the smart card. The method of claim 1, And the application interface type comprises a USB interface and an RF interface. The method of claim 1, And determining that the proximity communication module is connected to the smart card when the operating voltage falls from a predefined maximum value to a minimum value. A proximity communication processor for detecting a connection of a proximity communication module according to a change in an operating voltage applied to a smart card and converting an application identification code of an APDU received from the proximity communication module and a card operating system; And Card management system that identifies the application interface type by using the application identification code of the APDU, and processes the APDU received through the application interface Apparatus for providing multiple application interfaces simultaneously in a smart card comprising a. The method of claim 9, When the proximity communication module is connected, the proximity communication processor converts the application identification code value of the APDU (Application Protocol Data Unit) received from the proximity communication module into a predefined application identification code value corresponding to the RF interface. Apparatus for providing a plurality of application interfaces at the same time, characterized in that for transmitting the converted APDU to the card operating system. The method of claim 10, The proximity communication processor temporarily stores the application identification code value of the APDU received from the proximity communication module, converts the application identification code value of the APDU received from the card operating system into the temporary stored application identification code value, and performs the proximity communication. Apparatus for providing multiple application interfaces simultaneously in a smart card, characterized in that the transmission to the module. The method of claim 10, The application identification code is a plurality of application interface providing apparatus in a smart card, characterized in that the LSB (Least Significant Bit) 2 bits of the class byte defined in the header of the APDU. The method of claim 12, Apparatus for providing multiple application interfaces in a smart card, characterized in that the value of the application identification code predefined in accordance with the RF interface is different from the value of the application identification code corresponding to the other application interface. The method of claim 9, And the proximity communication processor determines that the proximity communication module is connected to the smart card when the operation voltage falls from a predefined maximum value to a minimum value. The method of claim 9, And the proximity communication processor generates a predetermined control signal according to the connection and disconnection of the proximity communication module and transmits the predetermined control signal to the card operating system.

Images