CN101751450B - Information sharing realizing method for CPU card with multi-application COS - Google Patents
Information sharing realizing method for CPU card with multi-application COS Download PDFInfo
- Publication number
- CN101751450B CN101751450B CN200910130893.0A CN200910130893A CN101751450B CN 101751450 B CN101751450 B CN 101751450B CN 200910130893 A CN200910130893 A CN 200910130893A CN 101751450 B CN101751450 B CN 101751450B
- Authority
- CN
- China
- Prior art keywords
- basic document
- catalogue
- application
- attribute
- cos
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Landscapes
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
The invention provides an information sharing realizing method for a CPU card with a multi-application COS. The information sharing realizing method includes the following steps: a first elementary file is established in a master directory of the CPU card, and is used for storing data for the access of the COS; a plurality of application directories which are corresponding to the multiple application of the multi-application COS are established in the master directory of the CPU card, and second elementary files are respectively established in the application directories, wherein the second elementary files point at the elementary files in the previous stages of directories so as to quote the elementary files. When executing certain application, the COS can realize synchronization with data of other applications under the condition of not accessing the elementary files in other application directories, thereby realizing information sharing under the premise of ensuring data completeness and safe transaction.
Description
Technical field
The present invention relates to a kind of method of information sharing, particularly relate to a kind of method of information sharing of IC-card.
Background technology
Along with the development of informationization technology, the application of IC-card is constantly expanded, the market volume of holding of IC-card constantly increases, particularly in telecommunications card, social security card, public transport card, campus card, Ka Deng field, Internet bar, card and the system quantity of its application are considerable, but also are continuing the impetus keeping expansion.
IC-card is divided into memory card and CPU card.Along with more and more higher to the various requirement of IC-card, and the required various management work of card itself also become increasingly complex, therefore the inner CPU card with microprocessor due to security high, function is strong, data reliability advantages of higher, after cost declines gradually, will be employed more and more.
In order to improve the interactive interface of CPU card, make it manage and become easy, people utilize the microprocessor chip of its inside, develop the operating system being applied to CPU card, namely Chip Operating System (COS), thus opened up very wide prospect for the development of CPU card.
Along with the accelerated development of national information process, the demand of people to information consumption is growing, the applied environment of CPU card also trends towards complicated, diversified, the multifunctional application of CPU card becomes the direction of following smart card techniques development, advancing CPU card " one card for multiple uses " and " multifunction card " to be the link that can not be ignored in current development of information, is also the important mission with epoch symbol.
Therefore, COS needs to support multiple application.In the COS of the general CPU card based on PBOC standard, realize " one card for multiple uses " by setting up different application catalogues.Different application is organically combined by the form of a file, as long as these files representing different purposes are respectively write by read write line in the different application catalogue in same CPU card, the multiple use (i.e. all-purpose card) of a CPU card just can be realized.Different application catalogues is adopted to distinguish for different purposes (such as and transportation card, highway passing card).
When CPU card is used as the use of different purposes, the read-write equipment of corresponding uses is deposited the master key conducted interviews to respective application catalogue (representing corresponding uses) and authority keys, these equipment can only conduct interviews to the file under corresponding application catalogue and process (such as wallet file, transaction record file etc.), can not conduct interviews to the file under other catalogue and process, namely the IC-card read write line of an application-specific can only complete an application in the numerous application of card.As can be seen here, the file in different application catalogue be isolation, this be in order to set up between different application security firewall consideration.But cause in different application simultaneously and cannot share information; unless the file in other application catalogues can be read and revise to application; but this operation can affect the safeguard protection of information; particularly across the integrality that cannot ensure to conclude the business in application transaction; cause whole data security not ensure and transaction data abnormal, run counter to the essential safety requirements in PBOC standard simultaneously.
But along with a card is multi-functionally applied, the simple merging mode that multi-application card originally mainly solves many cards function can not meet the demand of application, and such as need the wallet realizing many application lower to share, log file is shared.How solving information sharing to guarantee data integrity again and transaction security, is problem in the urgent need to address.
Summary of the invention
Because the above-mentioned defect of prior art, technical matters to be solved by this invention is to provide a kind of guaranteeing data integrity with under the prerequisite of transaction security, realizes the method for information sharing.
For achieving the above object, the invention provides a kind of information sharing realizing method with the CPU card of multi-application COS, comprising: in the master catalogue of described CPU card, set up the first basic document, described first basic document access for described COS for storing data; The multiple application catalogues corresponding with multiple application of described multi-application COS are set up in the master catalogue of described CPU card, and in described application catalogue, set up the second basic document respectively, wherein said second basic document point to the basic document being positioned at higher level's catalogue, to be quoted described higher level's catalogue basic document by described second basic document.
Preferably, by making the file identification of described first basic document identical with the file identification of described second basic document, described second basic document are pointed to described basic document.
Preferably, in described application catalogue, described first basic document are set up.
Preferably, also comprise in step (a) for described first basic document arrange the attribute that is cited, wherein, when the described attribute that is cited is logical truth, allow described second basic document in described sub-directory to quote described first basic document; When the described attribute that is cited is logical falsehood, described second basic document in described sub-directory are not allowed to quote described first basic document.
Preferably, step (b) also comprises quotes attribute for described application catalogue is arranged, wherein, when described to quote attribute be logical truth time, allow in described application catalogue to set up described second basic document; When described to quote attribute be logical falsehood time, do not allow in described application catalogue to set up described second basic document.
Preferably, (c) md in the master catalogue of described CPU card is also comprised; Described basic document and multiple described application catalogue is set up in described sub-directory; In each described application catalogue, set up the second basic document, wherein said second basic document point to the described basic document being positioned at higher level's catalogue, to be quoted described higher level's catalogue basic document by described second basic document.
Preferably, described sub-directory is multistage sub-directory.
Preferably, step (c) also comprises quotes attribute for described sub-directory is arranged, wherein, when described to quote attribute be logical truth time, the described basic document in described sub-directory are described first basic document and described second basic document; When described to quote attribute be logical falsehood time, the described basic document in described sub-directory are described first basic document.
When COS performs certain application, when not accessing the basic document in other application catalogues, can realize and other data syn-chronization applied, thus guaranteeing data integrity with under the prerequisite of transaction security, realizing information sharing.Quoting attribute and the attribute that is cited by arranging, while reaching data syn-chronization, access control can be realized.By arranging multistage sub-directory, the second basic document in subprime directory can be made to quote the basic document of higher level's catalogue layer by layer, realize multi-level basic document recited function, strengthen access control further.
Accompanying drawing explanation
Be described further below with reference to the technique effect of accompanying drawing to design of the present invention and generation, to understand object of the present invention, characteristic sum effect fully.Wherein:
Fig. 1 is the schematic diagram of CPU card according to a first embodiment of the present invention;
Fig. 2 is the schematic diagram of CPU card according to a second embodiment of the present invention;
Fig. 3 is the schematic diagram of the file structure of CPU card according to a third embodiment of the present invention.
Embodiment
With reference to the accompanying drawing that the embodiment of the present invention is shown, hereafter in more detail the present invention will be described.But the present invention can realize in many different forms, and should not be construed as by the restriction in the embodiment of this proposition.
Fig. 1 is a kind of schematic diagram with the file structure of the CPU card of multi-application COS.
As shown in Figure 1, the chip 1 of CPU card runs multi-application COS 2, described COS 2 can be used for performing multiple application.As shown in Fig. 1 file bibliographic structure 3, the file structure of CPU card comprises master catalogue (MF).Basic document 0001,0002,0018 and 0006 are set up in described master catalogue.Basic document 0001 for storing the System Control Data needed for application, as application directory entry etc.Described basic document 0002,0006,0018 in master catalogue store the data relevant to multiple application of COS 2.Basic document 0001,0002,0018 and 0006 in described master catalogue are the example of the first basic document.
In described master catalogue, setting up application catalogue (ADF) 3F01,1001 that multiple and described multiple application is corresponding, by operating each application catalogue described, each application being managed to make COS 2.Set up respectively in described multiple application catalogue and have basic document 0002,0006 and 0018.Basic document 0002 in described application catalogue, 0006 and 0018 is used in reference to the basic document 0002 in superior catalogue (master catalogue), 0006 and 0018, namely, when COS2 is to the basic document 0002 in described application catalogue, 0006 and 0018 when accessing, the basic document 0002 in described master catalogue are pointed to respectively due to these basic document, 0006 and 0018, therefore COS 2 is quoted described first basic document by described second basic document, thus COS 2 actual be to the basic document 0002 in described master catalogue, data in 0006 and 0018 access.In the present embodiment, by making the described basic document in described application catalogue identical with the filename of the basic document in described master catalogue, and the described basic document in described application catalogue are made to point to basic document in described master catalogue.In other words, the basic document 0002,0006 and 0018 in described application catalogue not actual storage have data, and just point to the pointer in described master catalogue with the basic document of same file name as one.Basic document 0002,0006 and 0018 in described application catalogue are the example of the second basic document.File is called an example of file identification.
When COS 2 accesses the second basic document in the respective application catalogue of multiple application, because these basic document all point to the identical basic document of higher level's catalogue file name, thus can while the integrality keeping related data in self application, also reach and other to apply between data syn-chronization.Thus, when COS 2 performs certain application, when not accessing the basic document in other application catalogues, can realize and other data syn-chronization applied, thus guaranteeing data integrity with under the prerequisite of transaction security, realizing information sharing.
In the present embodiment, " the first basic document " and " the second basic document " are for distinguishing different basic document.Concrete, described first basic document mean the basic document wherein directly storing data, and described second basic document mean the basic document of the basic document be used in reference in superior catalogue.
In another embodiment, in described application catalogue, also can comprise described first basic document (see Fig. 1, being basic document 0015), i.e. the basic document of wherein actual storage data.When COS2 accesses basic document 0015, directly these basic document 0015 are accessed.In described embodiment, by quoting attribute to the basic document setting in described application catalogue, they are divided into described first basic document or described second basic document.Concrete, described in quote attribute and can be logical identifier.When described to quote attribute be logical truth time, described basic document are described second basic document, that is, it quotes identical described first basic document of described master catalogue file name.When described attribute of quoting is fictitious time, described basic document are described first basic document, that is, in described basic document, directly store data, even if there are first basic document identical with the filename of these basic document in described master catalogue, do not quote this first basic document yet.As shown in Figure 1, the attribute of quoting of basic document 0015 is logical falsehood, then data be directly stored in the described basic document 0015 under application catalogue 3F01.By arranging apply property to the basic document in described application catalogue, can selectively by data access in the first basic document of described application catalogue, or quoted the first basic document of the tool same file name in described master catalogue by described second basic document in described application catalogue, thus data are stored in these first basic document.
In addition, in described master catalogue set up basic document time also can be it and arrange and to be cited attribute.Concrete, described in quote attribute and can be logical identifier.When the described attribute that is cited is logical truth, allow the basic document in described master catalogue quote by the identical basic document of described application catalogue file name, namely by being accessed the identical basic document of described master catalogue file name by the basic document in described application catalogue.When the described attribute that is cited is logical falsehood, do not allow the basic document in described master catalogue quote by the identical basic document of described application catalogue file name, namely, even if there are the basic document identical with the filename in described master catalogue in described application catalogue, do not allow these basic document quoted by these basic document in described master catalogue yet.As described in Figure 1, the attribute that is cited of the basic document 0001 in master catalogue is logical falsehood, like this, its just can not by subordinate apply any second basic document in catalogue quote.To be cited attribute by arranging the first basic document in described master catalogue, can make described first basic document selectively quote by the second basic document of tool same file name in described application catalogue.
Moreover, when setting up described application catalogue, also can arrange described application catalogue and quoting attribute.Concrete, described in quote attribute and can be logical identifier.When described to quote attribute be logical truth time, allow in described application to set up described second basic document.When described to quote attribute be logical falsehood time, do not allow in described application catalogue to set up described second basic document.As described in Figure 1, also set up in master catalogue MF and have application catalogue 1002, it quotes attribute is logical falsehood.Thus all basic document in this application catalogue are all the first basic document directly storing data, and cannot be the second basic document of the basic document pointing to tool same file name in master catalogue.Like this, application catalogue 1002 and other are made to apply catalogue completely isolated.
Thus, while reaching data syn-chronization, access control can be realized.
According to Fig. 2, the second embodiment of the present invention is described below.
In second embodiment, further md (DDF) DDF01 in master catalogue MF.Set up in sub-directory DDF01 and have the second basic document 0002, first basic document 009, application catalogue 1003.Set up in application catalogue 1003 and have the second basic document 0002,0009, and the first basic document 0003,0006,0018.In addition, multiple application catalogue can also be set up in sub-directory DDF01.Moreover, also can set up multiple sub-directory in master catalogue MF.
When COS 2 accesses the second basic document 0002 in application catalogue 1003, these basic document quote the basic document 0002 in higher level's catalogue (sub-directory DDF01).Subsequently, because the basic document 0002 in sub-directory DDF01 are the second basic document, it quotes the basic document 0002 in higher level's catalogue (master catalogue MF) again.Like this, COS2 is actual is access the basic document 0002 in master catalogue.
When COS 2 is to the second basic document 0009 applied in catalogue 1003, these basic document quote the basic document 0009 in higher level's catalogue (sub-directory DDF01).Because the basic document 0009 in sub-directory DDF01 are the first basic document, so the basic document 0009 in COS 2 couples of sub-directory DDF01 access.
When COS 2 accesses the basic document 0003,0006,0018 in application catalogue 1003, because basic document 0003,0006,0018 are the first basic document, then direct basic document 0003,0006,0018 to be accessed.
In addition, also can nested sub-directory in sub-directory DDF01, nested progression is the catalogue number of plies that COS 2 allows.Like this, by quoting of the second basic document to higher level's catalogue, top-ranking's catalogue can be referred to.So, by quoting layer by layer, until the basic document under referring to master catalogue.
Moreover, can arrange sub-directory and quote attribute.Concrete, described in quote attribute and can be logical identifier.When described to quote attribute be logical truth time, the described basic document in described sub-directory are described first basic document and described second basic document; When described to quote attribute be logical falsehood time, the described basic document in described sub-directory are described first basic document.
By arranging multilayer sub-directory, the second basic document in subprime directory can be made to quote the basic document of higher level's catalogue layer by layer, realize multi-level basic document recited function, strengthen access control further.
Above-described embodiment tool has the following advantages.
(1) when COS 2 performs certain application, when not accessing the basic document in other application catalogues, can realize and other data syn-chronization applied, thus guaranteeing data integrity with under the prerequisite of transaction security, realizing information sharing.
(2) quote attribute and the attribute that is cited by setting, while reaching data syn-chronization, access control can be realized.
(3) by arranging multistage sub-directory, the second basic document in subprime directory can be made to quote the basic document of higher level's catalogue layer by layer, realize multi-level basic document recited function, strengthen access control further.
Hereafter describe another embodiment of the present invention, namely many application CPU card of urban public transport card and ExpresswayNetwork Toll Collection System card realizes the method for information sharing.Two independent utility of described CPU card meet corresponding national standard respectively, wherein urban public transport card meets the CPU card standard of the Ministry of Construction, and ExpresswayNetwork Toll Collection System card need meet the relevant CPU card standard of Ministry of Communications, these two independent utility need to share relevant fileinfo simultaneously.Fig. 3 gives the file structure of this CPU card, establishes the first basic file system key file 0000, holder's essential information file, card issuer information file 0005, DIR catalogue data file 0001, stored value card file 0002 under master catalogue MF; Application catalogue 3F01 and and DF01.File under application catalogue 3F01 is public transport card application file, and the file under application catalogue DF01 is the application file structure of ExpresswayNetwork Toll Collection System card.The attribute of quoting of above two methods catalogue is logical truth, and the attribute of quoting of stored value card file 0002 in catalogue is also logical truth.The attribute that is cited of the stored value card file 0002 under master catalogue is logical truth.Like this, the stored value card file 0002 under master catalogue quoted respectively by the stored value card file 0002 under application catalogue 3F01 and DF01, reaches data syn-chronization object, thus makes the public transport of this CPU card and application in highways share a stored value card file.And other expanded application catalogues (as 1002 etc.) do not allow to quote shared, then can not quote the file under master catalogue.
Those skilled in the art should be understood that the present invention can realize with other concrete forms many and not depart from spirit of the present invention and scope.Just several preferred embodiment of the present invention described in this instructions.All technician in the art, all should in claims of the present invention under this invention's idea on the basis of existing technology by the available technical scheme of logical analysis, reasoning, or a limited experiment.
Claims (6)
1. there is an information sharing realizing method for the CPU card of multi-application COS, comprising:
A () sets up the first basic document in the master catalogue of described CPU card, described first basic document access for described COS for storing data;
B () sets up the multiple application catalogues corresponding with multiple application of described multi-application COS in the master catalogue of described CPU card, and in described application catalogue, set up the second basic document respectively, wherein said second basic document point to the basic document being positioned at higher level's catalogue, to be quoted described higher level's catalogue basic document by described second basic document;
Wherein, also comprise in step (a) for described first basic document arrange the attribute that is cited, wherein, when the described attribute that is cited is logical truth, allow described second basic document in described application catalogue to quote described first basic document; When the described attribute that is cited is logical falsehood, described second basic document in described application catalogue are not allowed to quote described first basic document;
Step (b) also comprises quotes attribute for described application catalogue is arranged, wherein, when described to quote attribute be logical truth time, allow in described application catalogue to set up described second basic document; When described to quote attribute be logical falsehood time, do not allow in described application catalogue to set up described second basic document.
2. information sharing realizing method as claimed in claim 1, is characterized in that, by making the file identification of described first basic document identical with the file identification of described second basic document, described second basic document being pointed to described basic document.
3. information sharing realizing method as claimed in claim 1, is characterized in that, in described application catalogue, set up described first basic document.
4. information sharing realizing method as claimed in claim 1, is characterized in that, also comprise (c) md in the master catalogue of described CPU card; Described basic document and multiple described application catalogue is set up in described sub-directory; In each described application catalogue, set up the second basic document, wherein said second basic document point to the described basic document being positioned at higher level's catalogue, to be quoted described higher level's catalogue basic document by described second basic document.
5. information sharing realizing method as claimed in claim 4, it is characterized in that, described sub-directory is multistage sub-directory.
6. information sharing realizing method as claimed in claim 5, it is characterized in that, step (c) also comprises quotes attribute for described sub-directory is arranged, wherein, when described to quote attribute be logical truth time, the described basic document in described sub-directory are described first basic document and described second basic document; When described to quote attribute be logical falsehood time, the described basic document in described sub-directory are described first basic document.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200910130893.0A CN101751450B (en) | 2008-12-03 | 2009-04-17 | Information sharing realizing method for CPU card with multi-application COS |
Applications Claiming Priority (4)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810203898 | 2008-12-03 | ||
| CN200810203898.7 | 2008-12-03 | ||
| CN2008102038987 | 2008-12-03 | ||
| CN200910130893.0A CN101751450B (en) | 2008-12-03 | 2009-04-17 | Information sharing realizing method for CPU card with multi-application COS |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101751450A CN101751450A (en) | 2010-06-23 |
| CN101751450B true CN101751450B (en) | 2015-05-20 |
Family
ID=42478439
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200910130893.0A Active CN101751450B (en) | 2008-12-03 | 2009-04-17 | Information sharing realizing method for CPU card with multi-application COS |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101751450B (en) |
Families Citing this family (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN102880897B (en) * | 2011-07-14 | 2016-01-27 | ***通信集团公司 | A kind of application data of smart card shares method and smart card |
| CN102567535A (en) * | 2011-12-30 | 2012-07-11 | 北京握奇数据***有限公司 | Method and device for synchronizing file data in multi-file system smart card |
| CN103257853B (en) * | 2012-02-17 | 2016-06-29 | 上海复旦微电子集团股份有限公司 | The synthesis application of a kind of CPU card with multi-application COS realizes method |
| CN107798516A (en) * | 2017-11-08 | 2018-03-13 | 南通智慧交通科技有限公司 | One kind realizes that Ministry of Communications interconnects system with living to build portion's traffic all-purpose card |
Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1735243A (en) * | 2004-08-10 | 2006-02-15 | 雅斯拓（北京）智能卡科技有限公司 | Sharing data on multi-system smart card |
| CN1889077A (en) * | 2005-06-29 | 2007-01-03 | 雅斯拓（北京）智能卡科技有限公司 | Extended file system by using basic file system in integrated circuit device |
| CN1920889A (en) * | 2006-06-22 | 2007-02-28 | 北京飞天诚信科技有限公司 | Method for controlling multiple operations of smart card |
| CN101136079A (en) * | 2007-10-10 | 2008-03-05 | 北京握奇数据***有限公司 | CPU and logical encrypt double-purpose smart card and key data processing method thereof |
-
2009
- 2009-04-17 CN CN200910130893.0A patent/CN101751450B/en active Active
Patent Citations (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1735243A (en) * | 2004-08-10 | 2006-02-15 | 雅斯拓（北京）智能卡科技有限公司 | Sharing data on multi-system smart card |
| CN1889077A (en) * | 2005-06-29 | 2007-01-03 | 雅斯拓（北京）智能卡科技有限公司 | Extended file system by using basic file system in integrated circuit device |
| CN1920889A (en) * | 2006-06-22 | 2007-02-28 | 北京飞天诚信科技有限公司 | Method for controlling multiple operations of smart card |
| CN101136079A (en) * | 2007-10-10 | 2008-03-05 | 北京握奇数据***有限公司 | CPU and logical encrypt double-purpose smart card and key data processing method thereof |
Also Published As
| Publication number | Publication date |
|---|---|
| CN101751450A (en) | 2010-06-23 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101908120B (en) | Method for realizing all-in-one function of single intelligent card | |
| CN106886375B (en) | The method and apparatus of storing data | |
| CN101448002B (en) | Method and device for accessing digital resources | |
| US11803519B2 (en) | Method and system for managing and securing subsets of data in a large distributed data store | |
| CN101714172B (en) | Search method of index structure supporting access control | |
| CN111538786B (en) | Block chain data desensitization and tracing storage method and device | |
| CN102436408B (en) | Data storage cloud and cloud backup method based on Map/Dedup | |
| CN114445010B (en) | Block chain-based multi-mode intermodal system and method | |
| CN104050424B (en) | The realization of smartcard file access safety rights management and file access method | |
| CN101751450B (en) | Information sharing realizing method for CPU card with multi-application COS | |
| CN103310334A (en) | Business processing method and device | |
| CN110020544A (en) | The Hash information processing method and system of record are stored in the block of block chain | |
| CN110428238A (en) | The account cancelling method and system of block chain | |
| CN102495730A (en) | Dynamic and extendable web interface method | |
| Klink | Metropolis, money and markets: Brazilian urban financialization in times of re-emerging global finance | |
| CN104282098B (en) | The making out an invoice and copy tax process upgrade method of a kind of tax-controlling device | |
| CN110457321A (en) | Date storage method and Related product based on block chain | |
| CN108427982A (en) | A kind of data read-write method and device | |
| CN103034701B (en) | Meta data file format conversion method | |
| CN105930520A (en) | Cache protection method based on cluster file system | |
| CN103678427A (en) | Method and system for retrieving and using application arranged in smart card | |
| CN102567501A (en) | File management system in small storage space | |
| US20200313887A1 (en) | Micoservices Based Mainchain/Sidechain (MMS) Architecture For Blockchain | |
| CN110428260A (en) | The account model of block chain | |
| US10089029B2 (en) | Storage in flash memory |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant |