CN108881242B

CN108881242B - Method and device for acquiring electronic identity card

Info

Publication number: CN108881242B
Application number: CN201810673010.XA
Authority: CN
Inventors: 张霄
Original assignee: Beijing Xiaomi Mobile Software Co Ltd
Current assignee: Beijing Xiaomi Mobile Software Co Ltd
Priority date: 2018-06-26
Filing date: 2018-06-26
Publication date: 2021-05-18
Anticipated expiration: 2038-06-26
Also published as: CN108881242A

Abstract

The disclosure relates to a method and a device for acquiring an electronic identity card. The method comprises the following steps: the method comprises the steps of obtaining user identity information and communication card information in terminal equipment, sending an electronic identity card request instruction comprising the user identity information and the communication card information to a server, and installing an electronic identity card in the terminal equipment according to the electronic identity card installation instruction after receiving the electronic identity card installation instruction sent by the server, wherein the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment. The electronic identity card can be installed in the terminal equipment, and a user does not need to carry the entity identity card, so that the condition that the entity identity card is easy to lose is avoided, and the safety of user identity information is effectively improved.

Description

Method and device for acquiring electronic identity card

Technical Field

The present disclosure relates to the field of computer network technologies, and in particular, to a method and an apparatus for acquiring an electronic identity card.

Background

Each citizen can receive a resident identification card to express the identity of the citizen. The traditional resident identification card is a card for marking the basic information of residents, and like other numerous cards such as bank cards, bus cards, industrial cards, dining cards, water, electricity, gas cards, internet access cards and the like, a user can carry the identification card with him or her so as to display the identification card when the user needs to use the information of the identification card.

Disclosure of Invention

In order to overcome the problems in the related art, the embodiments of the present disclosure provide a method and an apparatus for acquiring an electronic identity card. The technical scheme is as follows:

according to a first aspect of the embodiments of the present disclosure, a method for acquiring an electronic identity card is provided, where the method is applied to a terminal device, and the method includes:

acquiring user identity information;

acquiring communication card information in terminal equipment;

sending an electronic identity card request instruction to the server; the electronic identity card request instruction comprises the following steps: the user identity information and the communication card information;

receiving an electronic identity card installation instruction sent by the server; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment;

and installing the electronic identity card in the terminal equipment according to the electronic identity card installation instruction.

The technical scheme provided by the embodiment of the disclosure can have the following beneficial effects: the method comprises the steps of obtaining user identity information and communication card information in terminal equipment, sending an electronic identity card request instruction comprising the user identity information and the communication card information to a server, and installing an electronic identity card in the terminal equipment according to the electronic identity card installation instruction after receiving the electronic identity card installation instruction sent by the server, wherein the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment. The electronic identity card can be installed in the terminal equipment, and a user does not need to carry the entity identity card, so that the condition that the entity identity card is easy to lose is avoided, and the safety of user identity information is effectively improved.

In one embodiment, the sending the electronic identification card request instruction to the server includes:

sending a terminal equipment validity verification instruction to the server; the terminal equipment validity verification instruction comprises the following steps: the terminal equipment logs in account information of the server and preset verification information in the terminal equipment; the account information includes: a login account and a login password;

and when a verification legal instruction sent by the server is received, sending the electronic identity card request instruction to the server.

In one embodiment, the sending an electronic identity card request instruction to the server when receiving a verification legal instruction sent by the server includes:

when a verification legal instruction sent by the server is received, detecting whether an encryption channel establishment instruction sent by the server is received;

when detecting that the encrypted channel establishing instruction is received, establishing an encrypted channel for transmitting data between the terminal equipment and the server according to the encrypted channel establishing instruction;

sending an electronic identity card request instruction to the server through the encryption channel;

and when the encrypted channel establishing instruction is not received through detection, sending an electronic identity card request instruction to the server through a common channel.

In one embodiment, the method further comprises:

acquiring a security unit identifier used for installing the electronic identity card in the terminal equipment;

sending the security element identification to the server;

the electronic identity card installation instruction further comprises the following steps: a security element identification; installing the electronic identity card in the terminal equipment according to the electronic identity card installation instruction, comprising:

and detecting whether the safety unit identification included in the electronic identity card installation instruction is the same as the safety unit identification in the terminal equipment or not, and installing the electronic identity card in the safety unit according to the electronic identity card installation instruction when detecting that the two safety unit identifications are the same.

encrypting the electronic identity card request instruction according to a preset encryption algorithm;

and sending the encrypted electronic identity card request instruction to the server.

In one embodiment, the obtaining user identity information includes:

and acquiring user identity information in the entity identity card through a short-distance wireless communication technology.

In one embodiment, after the electronic identity card is installed in the terminal device according to the electronic identity card installation instruction, the method further includes:

sending an electronic identity card activation request instruction to the server; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the server logged in by the terminal equipment are obtained;

when detecting that an electronic identity card activation instruction sent by the server is received, activating the electronic identity card in the terminal equipment according to the electronic identity card activation instruction;

and when detecting and receiving an electronic identity card abnormal instruction sent by the server, unloading the electronic identity card in the terminal equipment according to the electronic identity card abnormal instruction.

According to a second aspect of the embodiments of the present disclosure, there is provided a method for acquiring an electronic identity card, the method being applied to a server, the method including:

receiving an electronic identity card request instruction sent by terminal equipment; the electronic identity card request instruction comprises the following steps: user identity information and communication card information in the terminal equipment;

when the user identity information and the communication card information are detected to belong to the same user, acquiring an electronic identity card installation instruction corresponding to the terminal equipment according to the user identity information; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment;

and sending the electronic identity card installation instruction to the terminal equipment.

The technical scheme provided by the embodiment of the disclosure can have the following beneficial effects: receiving an electronic identity card request instruction which is sent by terminal equipment and comprises user identity information and communication card information in the terminal equipment; when detecting that the user identity information and the communication card information belong to the same user, acquiring an electronic identity card installation instruction corresponding to the terminal equipment according to the user identity information; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment, and the electronic identity card installation instruction is sent to the terminal equipment. Wherein, only when the server detects that user's identity information and communication card information belong to same user can support terminal equipment installation electronic identity card, effectively promoted the security of electronic identity card, can be through installing electronic identity card in terminal equipment moreover, and need not the user and hand-carry entity identity card to the condition of having avoided entity identity card to lose easily has effectively promoted user's identity information's security.

In one embodiment, before receiving the electronic identity card request instruction sent by the terminal device, the method further includes:

receiving a terminal equipment validity verification instruction sent by the terminal equipment; the terminal equipment validity verification instruction comprises the following steps: the terminal equipment logs in account information of the server and preset verification information in the terminal equipment;

and when the account information is detected to be correct and the preset verification information in the terminal equipment is the same as the preset verification information stored in the server, sending a verification legal instruction to the terminal equipment.

In one embodiment, the method further comprises:

when detecting that the preset check information in the terminal equipment is the same as the preset check information stored in the server, establishing an encryption channel for transmitting data between the terminal equipment and the server;

and sending an encryption channel establishment instruction to the terminal equipment.

In one embodiment, the method further comprises:

receiving a security unit identifier used for installing the electronic identity card in the terminal equipment;

and the electronic identity card installation instruction sent to the terminal equipment also comprises the safety unit identification.

In one embodiment, after receiving the electronic identity card request instruction sent by the terminal device, the method further includes:

detecting whether the electronic identity card request instruction is encrypted or not;

and when the electronic identity card request instruction is detected to be encrypted, decrypting the electronic identity card request instruction according to a preset decryption algorithm.

In one embodiment, the method further comprises:

storing the mapping relation between the account information of the terminal equipment logging in the server and the electronic identity card information;

receiving an electronic identity card activation request instruction sent by the terminal equipment; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the server logged in by the terminal equipment are obtained;

detecting whether a mapping relation between the account information and the electronic identity card information is stored or not;

when the mapping relation between the account information and the electronic identity card information is detected and saved, whether the electronic identity card information and the communication card information belong to the same user is detected;

when detecting that the electronic identity card information and the communication card information belong to the same user, sending an electronic identity card activation instruction to the terminal equipment; and the electronic identity card activation instruction indicates the terminal equipment to activate the electronic identity card in the terminal equipment.

In one embodiment, the detecting whether to save the mapping relationship between the account information and the electronic identity card includes:

receiving an electronic identity card processing instruction; the electronic identity card processing instruction carries the electronic identity card information; the electronic identity card processing instruction indicates to report loss or cancel the electronic identity card corresponding to the electronic identity card information;

storing the electronic identity card processing instruction;

the detecting whether the mapping relationship between the account information and the electronic identity card is stored includes:

detecting whether an electronic identity card processing instruction aiming at the electronic identity card information is stored in the server or not;

when an electronic identity card processing instruction aiming at the electronic identity card information is detected and stored, an electronic identity card abnormal instruction is sent to the terminal equipment, and the electronic identity card abnormal instruction instructs the terminal equipment to unload the electronic identity card;

and when detecting that an electronic identity card processing instruction corresponding to the electronic identity card information is not stored, detecting whether a mapping relation between the account information and the electronic identity card is included in a database.

According to a third aspect of the embodiments of the present disclosure, there is provided an apparatus for acquiring an electronic identity card, the apparatus being applied to a terminal device, the apparatus including:

the first acquisition module is used for acquiring user identity information;

the second acquisition module is used for acquiring the communication card information in the terminal equipment;

the first sending module is used for sending an electronic identity card request instruction to the server; the electronic identity card request instruction comprises the following steps: the user identity information acquired by the first acquisition module and the communication card information acquired by the second acquisition module;

the first receiving module is used for receiving an electronic identity card installation instruction sent by the server; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment;

and the installation module is used for installing the electronic identity card in the terminal equipment according to the electronic identity card installation instruction received by the first receiving module.

In one embodiment, the first transmitting module comprises: a first sending submodule and a second sending submodule;

the first sending submodule is used for sending a terminal equipment validity verification instruction to the server; the terminal equipment validity verification instruction comprises the following steps: the terminal equipment logs in account information of the server and preset verification information in the terminal equipment; the account information includes: a login account and a login password;

and the second sending submodule is used for sending the electronic identity card request instruction to the server when receiving a verification legal instruction sent by the server.

In one embodiment, the second transmitting submodule includes: the system comprises a first detection submodule, an establishing submodule, a third sending submodule and a fourth sending submodule;

the first detection submodule is used for detecting whether an encryption channel establishment instruction sent by the server is received or not when a verification legal instruction sent by the server is received;

the establishing submodule is used for establishing an encryption channel for transmitting data between the terminal equipment and the server according to the encryption channel establishing instruction when the first detection submodule detects that the encryption channel establishing instruction is received;

the third sending submodule is used for sending an electronic identity card request instruction to the server through the encryption channel;

and the fourth sending submodule is used for sending an electronic identity card request instruction to the server through a common channel when the first detection submodule detects that the encryption channel establishment instruction is not received.

In one embodiment, the apparatus further comprises: a third acquisition module and a second sending module; the installation module includes: the second detection submodule and the installation submodule;

the third obtaining module is used for obtaining a security unit identifier used for installing the electronic identity card in the terminal equipment;

the second sending module is configured to send the security element identifier obtained by the third obtaining module to the server;

the electronic identity card installation instruction further comprises the following steps: a security element identification; the second detection submodule is used for detecting whether the safety unit identifier included in the electronic identity card installation instruction is the same as the safety unit identifier in the terminal equipment;

and the mounting submodule is used for mounting the electronic identity card in the safety unit according to the electronic identity card mounting instruction when the second detection submodule detects that the two safety unit identifications are the same.

In one embodiment, the first transmitting module comprises: an encryption submodule and a fifth sending submodule;

the encryption submodule is used for encrypting the electronic identity card request instruction according to a preset encryption algorithm;

and the fifth sending submodule is used for sending the electronic identity card request instruction encrypted by the encryption submodule to the server.

In one embodiment, the first obtaining module comprises: a first obtaining submodule;

the first obtaining submodule is used for obtaining the user identity information in the entity identity card through the short-distance wireless communication technology.

In one embodiment, the apparatus further comprises: the third sending module, the activating module and the unloading module;

the third sending module is used for sending an electronic identity card activation request instruction to the server; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the server logged in by the terminal equipment are obtained;

the activation module is used for activating the electronic identity card in the terminal equipment according to the electronic identity card activation instruction when detecting that the electronic identity card activation instruction sent by the server is received;

and the unloading module is used for unloading the electronic identity card in the terminal equipment according to the electronic identity card abnormal instruction when detecting and receiving the electronic identity card abnormal instruction sent by the server.

According to a fourth aspect of the embodiments of the present disclosure, there is provided an apparatus for acquiring an electronic identity card, the apparatus being applied to a server, the apparatus including:

the second receiving module is used for receiving an electronic identity card request instruction sent by the terminal equipment; the electronic identity card request instruction comprises the following steps: user identity information and communication card information in the terminal equipment;

the first detection module is used for detecting whether the user identity information and the communication card information belong to the same user;

the fourth obtaining module is used for obtaining an electronic identity card installation instruction corresponding to the terminal device according to the user identity information when the first detecting module detects that the user identity information and the communication card information belong to the same user; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment;

and the fourth sending module is used for sending the electronic identity card installation instruction acquired by the fourth acquiring module to the terminal equipment.

In one embodiment, the apparatus further comprises: a third receiving module and a fifth sending module;

the third receiving module is configured to receive a terminal device validity verification instruction sent by the terminal device; the terminal equipment validity verification instruction comprises the following steps: the terminal equipment logs in account information of the server and preset verification information in the terminal equipment;

the fifth sending module is configured to send a verification validity instruction to the terminal device when it is detected that the account information is correct and the preset verification information in the terminal device is the same as the preset verification information stored in the server.

In one embodiment, the apparatus further comprises: the establishing module and the sixth sending module;

the establishing module is used for establishing an encryption channel for data transmission between the terminal equipment and the server when detecting that the preset check information in the terminal equipment is the same as the preset check information stored in the server;

and the sixth sending module is configured to send an encryption channel establishment instruction to the terminal device.

In one embodiment, the apparatus further comprises: a fourth receiving module;

the fourth receiving module is configured to receive a security unit identifier used for installing the electronic identity card in the terminal device;

and the fourth sending module sends the electronic identity card installation instruction to the terminal equipment, wherein the electronic identity card installation instruction further comprises the safety unit identification.

In one embodiment, the apparatus further comprises: a second detection module and a decryption module;

the second detection module is used for detecting whether the electronic identity card request instruction is encrypted or not;

and the decryption module is used for carrying out encryption processing on the electronic identity card request instruction when the second detection module detects that the electronic identity card request instruction is encrypted, and carrying out decryption processing on the electronic identity card request instruction according to a preset decryption algorithm.

In one embodiment, the apparatus further comprises: the device comprises a storage module, a fifth receiving module, a third detection module, a fourth detection module and a fifth sending module;

the storage module is used for storing the mapping relation between the account information of the terminal equipment logging in the server and the electronic identity card information;

the fifth receiving module is configured to receive an electronic identity card activation request instruction sent by the terminal device; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the server logged in by the terminal equipment are obtained;

the third detection module is used for detecting whether the mapping relation between the account information and the electronic identity card information is stored or not;

the fourth detection module is configured to detect whether the electronic identity card information and the communication card information belong to the same user when the third detection module detects that the mapping relationship between the account information and the electronic identity card information is stored;

the fifth sending module is configured to send an electronic identity card activation instruction to the terminal device when the fourth detecting module detects that the electronic identity card information and the communication card information belong to the same user; and the electronic identity card activation instruction indicates the terminal equipment to activate the electronic identity card in the terminal equipment.

In one embodiment, the third detection module comprises: the first receiving submodule, the saving submodule, the third detecting submodule, the sixth sending submodule and the fourth detecting submodule;

the first receiving submodule is used for receiving an electronic identity card processing instruction; the electronic identity card processing instruction carries the electronic identity card information; the electronic identity card processing instruction indicates to report loss or cancel the electronic identity card corresponding to the electronic identity card information;

the storage submodule is used for storing the electronic identity card processing instruction;

the third detection submodule is used for detecting whether an electronic identity card processing instruction aiming at the electronic identity card information is stored in the server or not;

the sixth sending submodule is configured to send an electronic identity card abnormal instruction to the terminal device when the third detection submodule detects and stores an electronic identity card processing instruction for the electronic identity card information, where the electronic identity card abnormal instruction instructs the terminal device to unload the electronic identity card;

the fourth sending sub-module is configured to detect whether a mapping relationship between the account information and the electronic identity card is included in a database when the third detecting sub-module detects that an electronic identity card processing instruction corresponding to the electronic identity card information is not stored.

According to a fifth aspect of the embodiments of the present disclosure, there is provided an apparatus for acquiring an electronic identity card, where the apparatus is applied to a terminal device, and the apparatus includes:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to:

acquiring user identity information;

acquiring communication card information in terminal equipment;

According to a sixth aspect of the embodiments of the present disclosure, there is provided an apparatus for acquiring an electronic identity card, the apparatus being applied to a server, the apparatus including:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to:

According to a seventh aspect of embodiments of the present disclosure, there is provided a computer-readable storage medium having stored thereon computer instructions which, when executed by a processor, implement the steps of the method of any one of the first aspects.

According to an eighth aspect of embodiments of the present disclosure, there is provided a computer-readable storage medium having stored thereon computer instructions which, when executed by a processor, implement the steps of the method of any one of the second aspects.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the disclosure.

Drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present disclosure and together with the description, serve to explain the principles of the disclosure.

Fig. 1 is a flowchart illustrating a method for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 2 is a flowchart illustrating a method of acquiring an electronic identification card according to an example embodiment.

Fig. 3 is a flow chart illustrating a method of acquiring an electronic identification card in accordance with an exemplary embodiment.

Fig. 4 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 5 is a block diagram illustrating a first sending module in an electronic identity card obtaining apparatus according to an exemplary embodiment.

Fig. 6 is a block diagram illustrating a second sending submodule in an electronic identification card obtaining apparatus according to an exemplary embodiment.

Fig. 7 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 8 is a block diagram illustrating a first sending module in an electronic identification card obtaining apparatus according to an example embodiment.

Fig. 9 is a block diagram illustrating a first obtaining module in an electronic identification card obtaining apparatus according to an example embodiment.

Fig. 10 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 11 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 12 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 13 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 14 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 15 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 16 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 17 is a block diagram illustrating a third detection module in an apparatus for acquiring an electronic identification card according to an exemplary embodiment.

Fig. 18 is a block diagram illustrating an acquisition apparatus 80 for an electronic identification card according to an exemplary embodiment.

Fig. 19 is a block diagram illustrating an apparatus 90 for message push according to an example embodiment.

Detailed Description

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the exemplary embodiments below are not intended to represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.

At present, a user needs to carry a resident identification card with him or her for the sake of occasional needs, but the condition that the identification card is lost easily occurs when the user carries the identification card with him or her, and once the identification card is lost, the identity information of the user can be leaked, and the ID card is easily faked and embezzled by others, so that the information security of the traditional resident identification card is not high.

In order to solve the problem that the identity card is easy to lose due to the fact that the identity card is carried with a user, the electronic identity card acquisition method is provided, the electronic identity card is installed in the terminal device, inconvenience of carrying an entity identity card with the user is avoided, and safety of user identity information is effectively improved.

The embodiment of the disclosure provides an acquisition method of an electronic identity card, and an execution main body for implementing the method comprises terminal equipment and a server. According to different implementation main bodies of the method, the embodiment of the disclosure arranges two sets of electronic identity card obtaining methods, which are as follows:

terminal equipment side

Fig. 1 is a flowchart illustrating an electronic identity card acquiring method according to an exemplary embodiment, where the method is used in a terminal device, as shown in fig. 1, and the method includes the following steps S101 to S105:

in step S101, user identity information is acquired.

The user identity information may include basic information of residents, and the basic information of residents may include, for example, names, genders, ages, citizen identification numbers, head portraits, and the like. The user identity information may also include other types of information, such as: identification information, etc., and the present disclosure does not impose limitations on the type and content of user identification information.

In one embodiment, the user identity information in the entity identity card can be acquired through a short-distance wireless communication technology.

For example, when the physical id card is a resident id card, the terminal device may read the user identity information in the resident id card through Near Field Communication (NFC).

In step S102, communication card information in the terminal device is acquired.

Because the electronic identity card is installed in the terminal equipment, in order to improve the reliability and the safety of the installation of the electronic identity card, the integration of a person, a machine and a card is needed, that is, the user identity information, the communication card in the terminal equipment and the terminal equipment are owned by the same person, and therefore, the information of the communication card needs to be acquired.

Wherein, the communication card includes: a Subscriber Identity Module (SIM), a User Identity Module (UIM), or a Universal Subscriber Identity Module (USIM), etc. And the communication card information may include: a telephone number or cardholder information for the communication card, etc.

In step S103, an electronic identification card request instruction is sent to the server; the electronic identity card request instruction comprises the following steps: user identity information and communication card information.

The electronic identity card is used as a virtual identity card, the importance of the electronic identity card is equal to that of an entity identity card, therefore, a user cannot operate at a terminal equipment side to obtain the electronic identity card at will, but the electronic identity card is issued through a special server, at the moment, the terminal equipment needs to carry user identity information and communication card information in an electronic identity card request instruction to be sent to the server, and the electronic identity card request instruction is used for requesting the server to issue the electronic identity card.

The dedicated server may comprise a server approved by the ministry of public security.

For example, the identity information identifier may be an identity serial number corresponding to the user and the user identity information one to one, and since the identity information identifier corresponds to the user and the user identity information one to one, the terminal device may only send the identity information identifier to the server, so that the server can obtain the user identity information according to the identity information identifier, thereby reducing the sending flow and increasing the sending speed.

In step S104, receiving an electronic identity card installation instruction sent by a server; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment.

When the server side detects that the information included in the electronic identity card request instruction accords with the condition of issuing the electronic identity card, the server side sends an electronic identity card installation instruction to the terminal equipment.

In step S105, the electronic identification card is installed in the terminal device according to the electronic identification card installation instruction.

After the terminal equipment receives the electronic identity card installation instruction, the electronic identity card can be established locally, and the electronic identity card is installed in the terminal equipment according to the electronic identity card installation instruction.

The electronic identification card of this disclosure includes: driver's license, resident identification card, etc.

Since the server is required to issue an electronic identification card installation instruction, the server needs to be logged in the terminal device, and then, the terminal device side needs to install a client capable of logging in the server, but the electronic identification card is an important certificate for a user, and therefore, the client needs to be approved by a public security department and distributed by a legal distribution mechanism.

However, some persons skilled in the art may attempt to obtain the electronic identification card information of the user through the network, and at this time, they may tamper with the code of the client to obtain the electronic identification card information of the user, and therefore, before applying for the electronic identification card using the client, it is necessary to verify whether the client is tampered with, in one embodiment, the above step S103 includes the following sub-steps a1-a 2:

in a1, sending a terminal device validity verification instruction to a server; the terminal equipment validity verification instruction comprises the following steps: account information of a terminal device login server and preset verification information in the terminal device; the account information includes: a login account number and a login password.

When a user logs in a server by using terminal equipment, account information of the login server is registered, preset check information is carried in the client, and at the moment, the terminal equipment sends the account information of the login server and the preset check information to the server so that the server checks the account information and the preset check information.

In a2, when a verification validity instruction sent by the server is received, an electronic identification card request instruction is sent to the server.

The technical scheme provided by the embodiment of the disclosure can have the following beneficial effects: when the server detects that the terminal equipment is legal, the terminal equipment sends an electronic identity card request instruction to the server, so that the user identity information can be prevented from being leaked.

In order to further improve the reliability of data transmission between the terminal device and the server, in one embodiment, the step a2 includes the following sub-steps B1-B4:

in B1, when a verification legal instruction sent by the server is received, it is detected whether an encrypted channel establishment instruction sent by the server is received.

In B2, when it is detected that the encrypted channel establishment instruction is received, an encrypted channel for transmitting data between the terminal device and the server is established according to the encrypted channel establishment instruction.

In B3, an electronic identification card request instruction is sent to the server through the encrypted channel.

In B4, when it is detected that the encrypted channel establishing instruction is not received, an electronic identification card request instruction is sent to the server through the normal channel.

In order to improve the reliability of data transmission between the terminal device and the server, when the server detects that the terminal device is legal, an encryption channel for transmitting data between the terminal device and the server is established.

Exemplary, encrypted channels include, but are not limited to: a Secure Sockets Layer (SSL) encryption channel, or a Transport Layer Security (TLS) encryption channel.

After the encryption channel between the terminal equipment and the server is established, the terminal equipment can send an electronic identity card request instruction to the server through the encryption channel so as to ensure the safety of data transmission.

Of course, if the terminal device does not receive the encrypted channel establishing instruction, the terminal device will send an electronic identity card request instruction to the server through the common channel.

When a transmission channel of the server is blocked, a data transmission error may occur, and in this case, in order to avoid that the electronic identification card installation command received by the current terminal device is of another terminal device, in an embodiment, the method further includes the following sub-steps C1-C2, in which case the step S105 includes the following sub-step C3:

in C1, the identity of the security element in the terminal device used to install the electronic identification card is obtained.

In C2, the security element identification is sent to the server.

In C3, the electronic identification card installation instruction further includes: a security element identification; and detecting whether the safety unit identification included in the electronic identity card installation instruction is the same as the safety unit identification in the terminal equipment, and installing the electronic identity card in the safety unit according to the electronic identity card installation instruction when detecting that the two safety unit identifications are the same.

The electronic identity card installation instruction sent by the server to the terminal equipment can comprise the safety unit identification, and the safety unit identification is unique, so that the terminal equipment can judge whether the electronic identity card installation instruction is the same as the safety unit identification in the terminal equipment or not based on the fact that the received electronic identity card installation instruction comprises the safety unit identification.

The above-mentioned mounting unit includes but is not limited to: embedded security chip (english: ESE), or SIM-NFC (also swp-SIM).

When the installation unit is ESE, the safety unit is marked as Card Production Cycle (CPLC).

In one embodiment, in order to further enhance the security of the information transmitted by the terminal device, the step S103 includes the following sub-steps D1-D2:

in D1, the electronic identification card request command is encrypted according to a preset encryption algorithm.

In D2, the encrypted electronic identification card request command is sent to the server.

The electronic identity card request instruction can be encrypted according to a preset encryption algorithm, and then the encrypted electronic identity card request instruction is sent to the server, so that the safety of data transmission is effectively improved.

In one embodiment, after installing the electronic identification card in the terminal device according to the electronic identification card installation instruction, if the user wants to use the electronic identification card in the terminal device, the method further includes the following sub-steps E1-E3:

in E1, sending an electronic identification card activation request instruction to the server; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the login server.

In E2, when the electronic identification card activation instruction sent by the server is detected and received, the electronic identification card in the terminal device is activated according to the electronic identification card activation instruction.

In E3, when the electronic identification card abnormal instruction sent by the server is detected and received, the electronic identification card in the terminal device is unloaded according to the electronic identification card abnormal instruction.

When a user wants to use an electronic identity card installed in a terminal device, for example, to further improve the security of using the electronic identity card, the user is required to log in a server through the terminal device, and the user inputs account information of the login server into the terminal device, for example: and then the terminal equipment sends the account information, the electronic identity card information in the terminal equipment and the communication card information in the terminal equipment to a server so that the server judges whether the terminal equipment can activate the electronic identity card or not.

If the server does not need to be logged in, the terminal equipment can send an electronic identity card activation request instruction to activate the electronic identity card in the terminal equipment, and then after the terminal equipment is lost, others can use the terminal equipment to send the electronic identity card activation request instruction to the server to activate the electronic identity card in the terminal equipment, so that the user identity card is abused.

Server side

Fig. 2 is a flowchart illustrating an electronic identification card acquiring method according to an exemplary embodiment, where the method is used in a server, as shown in fig. 2, and the method includes the following steps S201 to S203:

in S201, receiving an electronic identity card request instruction sent by a terminal device; the electronic identity card request instruction comprises the following steps: user identity information and communication card information in the terminal device.

In S202, when it is detected that the user identity information and the communication card information belong to the same user, an electronic identity card installation instruction corresponding to the terminal equipment is obtained according to the user identity information; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment.

In S203, an electronic identification card installation instruction is sent to the terminal device.

Because the electronic identity card is installed in the terminal equipment, in order to improve the safety of the electronic identity card, after the server receives an electronic identity card request instruction sent by the terminal equipment, whether user identity information and communication card information belong to the same user can be detected, only when the user identity information and the communication card information belong to the same user, an electronic identity card installation instruction corresponding to the terminal equipment can be obtained according to the user identity information, the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment, and the electronic identity card installation instruction is sent to the terminal equipment, so that the terminal equipment can locally install the electronic identity card.

In one embodiment, the step S201 further includes the following sub-steps F1-F2:

in F1, receiving a terminal device validity verification instruction sent by the terminal device; the terminal equipment validity verification instruction comprises the following steps: account information of a terminal device login server and preset verification information in the terminal device.

In F2, when it is detected that the account information is correct and the preset verification information in the terminal device is the same as the preset verification information stored in the server, a verification validity instruction is sent to the terminal device.

In order to avoid tampering of a client program in the terminal device, check information can be preset in both the client and the server, and before applying for the electronic identity card, the terminal device can send a terminal device validity verification instruction to the server; the terminal equipment validity verification instruction comprises the following steps: account information of a terminal device login server and preset verification information in the terminal device; the account information includes: a login account and a login password; when the server receives a terminal device validity verification instruction, whether the account information is correct or not is judged, namely whether the server can be logged in or not, when the account information is detected to be correct, whether preset verification information in the terminal device is the same as preset verification information stored in the server or not needs to be matched, and only when the preset verification information in the terminal device is detected to be the same as the preset verification information stored in the server, a validity verification instruction is sent to the terminal device.

When the preset check information in the terminal equipment is the same as the preset check information stored in the server, the client in the terminal equipment can be considered to be not tampered and safe, so that the user identity information can be prevented from being leaked.

In order to further improve the reliability of data transmission between the terminal device and the server, in an embodiment, the step F2 further includes the following sub-steps G1-G2:

in G1, when it is detected that the preset check information in the terminal device is the same as the preset check information stored in the server, an encrypted channel for transmitting data between the terminal device and the server is established.

In G2, an encrypted channel establishment instruction is sent to the terminal device.

When a transmission channel of a server is blocked, a data transmission error occurs, and at this time, in order to avoid that an electronic identity card installation instruction received by a current terminal device is of another terminal device, in an embodiment, the method further includes the following sub-steps: and receiving a safety unit identifier used for installing the electronic identity card in the terminal equipment, and sending an electronic identity card installation instruction to the terminal equipment at the moment, wherein the safety unit identifier is also included.

In one embodiment, in order to further improve the security of the information transmitted by the terminal device, after receiving the electronic identity card request command sent by the terminal device, the method further includes the following sub-steps H1-H2:

in H1, it is detected whether the electronic identification card request command is subjected to encryption processing.

In H2, when the electronic identification card request command is detected to be encrypted, the electronic identification card request command is decrypted according to a preset decryption algorithm.

In one embodiment, the above method further comprises the following sub-steps I1-I5:

in I1, a mapping relationship between the account information of the terminal device login server and the electronic identification card information is saved.

In I2, receiving an electronic identity card activation request instruction sent by a terminal device; the electronic identity card activation request instruction comprises the following steps: the method comprises the steps of obtaining electronic identity card information in the terminal equipment, communication card information in the terminal equipment and account information of a login server of the terminal equipment.

In I3, it is detected whether the mapping relationship between the account information and the electronic identity card information is saved.

In I4, when the mapping relationship between the saved account information and the electronic identification card information is detected, it is detected whether the electronic identification card information and the communication card information belong to the same user.

In I5, when detecting that the electronic identity card information and the communication card information belong to the same user, sending an electronic identity card activation instruction to the terminal device; and the electronic identity card activation instruction instructs the terminal equipment to activate the electronic identity card in the terminal equipment.

In order to avoid that when the terminal device of the user is lost, another person maliciously uses the electronic identity card installed in the terminal device, in this embodiment, the mapping relationship between the account information of the terminal device logging in the server and the electronic identity card information is stored in advance, that is, the account information of the application electronic identity card is stored, when the terminal device needs to use the electronic identity card, an electronic identity card activation request instruction is sent to the server, and then after the server receives the electronic identity card activation request instruction, whether the mapping relationship between the account information and the electronic identity card information is stored in the server is judged, when the mapping relationship between the account information and the electronic identity card information is stored in the server is detected, whether the electronic identity card information and the communication card information belong to the same user is further detected, and only when the electronic identity card information and the communication card information belong to the same user is detected, sending an electronic identity card activation instruction to the terminal equipment; and the electronic identity card activation instruction instructs the terminal equipment to activate the electronic identity card in the terminal equipment. Through the judgment process, the terminal equipment can be determined not to be used maliciously, but the user himself uses the terminal equipment, and the safety of the electronic identity card is effectively improved.

When the mapping relationship between the account information and the electronic identity card information is not stored in the detection server, the person who does not apply for the electronic identity card can be considered to need to use the electronic identity card, and no feedback can be made at the moment.

In one embodiment, the method further comprises the following sub-steps J1-J2, in which case the step I3 comprises the following sub-steps J3-J5:

at J1, receiving an electronic identification card processing instruction; the electronic identity card processing instruction carries electronic identity card information; the electronic identity card processing instruction indicates to report loss or cancel the electronic identity card corresponding to the electronic identity card information.

In J2, the electronic identification card processing instructions are saved.

In J3, it is detected whether an electronic identification card processing instruction for the electronic identification card information is stored in the server.

In J4, when an electronic identification card processing instruction for the electronic identification card information is detected and saved, an electronic identification card abnormal instruction is sent to the terminal device, and the electronic identification card abnormal instruction instructs the terminal device to unload the electronic identification card.

In J5, when it is detected that an electronic identification card processing instruction corresponding to the electronic identification card information is not saved, it is detected whether the mapping relationship between the account information and the electronic identification card is included in the database.

When the terminal equipment of the user is lost and the user wants to report the loss or log out the electronic identity card in the terminal equipment, the user can log in the server through other terminal equipment and send an electronic identity card processing instruction to the server, wherein the electronic identity card processing instruction carries electronic identity card information; the electronic identity card processing instruction indicates that the electronic identity card corresponding to the electronic identity card information is lost or cancelled, and after the server receives the electronic identity card processing instruction, the electronic identity card processing instruction is stored so as to perform corresponding processing when a subsequent person uses the electronic identity card.

When the server receives an electronic identity card activation request instruction sent by the terminal equipment, whether an electronic identity card processing instruction aiming at electronic identity card information is stored in the server or not is detected, when the electronic identity card processing instruction aiming at the electronic identity card information is detected and stored, the electronic identity card is indicated to be cancelled or lost, an electronic identity card abnormal instruction is sent to the terminal equipment, the electronic identity card abnormal instruction indicates the terminal equipment to unload the electronic identity card, when the terminal equipment receives the electronic identity card abnormal instruction, the installed electronic identity card is actively unloaded, so that the safety of user identity information is ensured, and when the electronic identity card processing instruction aiming at the electronic identity card information is not detected and stored, whether the mapping relation between account information and the electronic identity card is included in the database or not is detected.

Fig. 3 is a flowchart illustrating an electronic identification card obtaining method according to an exemplary embodiment, where as shown in fig. 3, the electronic identification card obtaining method is divided into three stages, namely an authentication stage, an issuing stage and a using stage, and the method includes the following steps:

and (3) an authentication stage:

in step S301, the terminal device installs a client that acquires an electronic identification card.

The terminal device can download the installation package of the client in a preset platform, and then install the client locally.

In step S302, the terminal device sends a terminal device validity verification instruction to the server; the terminal equipment validity verification instruction comprises the following steps: account information of a terminal device login server and preset verification information in the terminal device; the account information includes: a login account number and a login password.

After the client is installed in the terminal equipment, the account information of the login client is input to log in the server, and if the account information of the login client is newly registered for the first time, the account information of the login client can be input. In order to avoid tampering of a program of the client, check information is preset in the client, and after a user logs in the client, the client sends a terminal device validity verification instruction to the server through the terminal device, so that the terminal device can verify whether the client is legal or not.

In step S303, the server receives a terminal device validity verification instruction transmitted by the terminal device.

In step S304, when the server detects that the account information is correct and the preset check information in the terminal device is the same as the preset check information stored in the server, the server establishes an encryption channel for transmitting data between the terminal device and the server.

In step S305, the server transmits a verification legitimate instruction and an encrypted channel establishment instruction to the terminal device.

In step S306, when the terminal device receives the verification legal instruction and the encryption channel establishment instruction sent by the server, an encryption channel for transmitting data between the terminal device and the server is established according to the encryption channel establishment instruction.

In step S307, the terminal device obtains the user identity information, the communication card information in the terminal device, and the security unit identifier for installing the electronic identity card in the terminal device.

The terminal equipment acquires user identity information in the entity resident identity card through NFC; the communication card information in the terminal equipment is the telephone number of the SIM card installed in the terminal equipment.

In step S308, the terminal device encrypts the electronic identification card request instruction according to a preset encryption algorithm; the electronic identity card request instruction comprises the following steps: user identity information, communication card information, and a security element identification.

In step S309, the terminal device sends the encrypted electronic identification card request instruction to the server through the encryption channel.

In step S3010, the server receives an electronic identification card request instruction sent by the terminal device; the electronic identity card request instruction comprises the following steps: user identity information and communication card information in the terminal device.

In step S3011, when the server detects that the electronic identification card request command is encrypted, the server decrypts the electronic identification card request command according to a preset decryption algorithm.

In step S3012, when the server detects that the user identity information and the communication card information belong to the same user, acquiring an electronic identity card installation instruction corresponding to the terminal device according to the user identity information; the electronic identity card installation instruction comprises electronic identity card installation package information and a safety unit identifier corresponding to the terminal equipment.

In step S3013, the server stores a mapping relationship between the account information of the terminal device login server and the electronic identification card information.

A card issuing stage:

in step S3014, the server transmits an electronic identification card installation instruction to the terminal device.

In step S3015, the terminal device receives an electronic identity card installation instruction sent by the server, and the terminal device detects whether a security unit identifier included in the electronic identity card installation instruction is the same as a security unit identifier in the terminal device, and installs the electronic identity card in the security unit according to the electronic identity card installation instruction when detecting that the two security unit identifiers are the same.

The terminal device may install the electronic identification card installation instruction into the ESE of the terminal device.

In step S3016, the server receives and stores the electronic identification card processing instruction; the electronic identity card processing instruction carries electronic identity card information; the electronic identity card processing instruction indicates to report loss or cancel the electronic identity card corresponding to the electronic identity card information.

The use stage is as follows:

in step S3017, the terminal device receives an electronic identity card activation request instruction; the electronic identity card activation request instruction comprises the following steps: the method comprises the steps of obtaining electronic identity card information in the terminal equipment, communication card information in the terminal equipment and account information of a login server of the terminal equipment.

In step S3018, the terminal device sends an electronic identification card activation request instruction to the server.

In step S3019, after the server receives the electronic identification card activation request instruction sent by the terminal device, the server detects whether to store an electronic identification card processing instruction for the electronic identification card information; when the server detects and stores an electronic identity card processing instruction aiming at the electronic identity card information, executing steps S30110-S3011; when the server detects that an electronic identity card processing instruction corresponding to the electronic identity card information is not stored, the server detects whether a mapping relation between the account information and the electronic identity card information is stored or not; and when the server detects that the mapping relation between the stored account information and the electronic identity card information and whether the electronic identity card information and the communication card information belong to the same user, executing the steps S30112-S3013.

In step S30110, an electronic identity card abnormal instruction is sent to the terminal device, and the electronic identity card abnormal instruction instructs the terminal device to unload the electronic identity card.

In step S30111, the electronic identity card in the terminal device is unloaded according to the electronic identity card abnormal instruction.

In step S30112, an electronic identification card activation instruction is sent to the terminal device; and the electronic identity card activation instruction instructs the terminal equipment to activate the electronic identity card in the terminal equipment.

In step S30113, when the terminal device receives the electronic identification card activation instruction sent by the server, the electronic identification card in the terminal device is activated according to the electronic identification card activation instruction.

The terminal equipment activates the electronic identity card in the card simulation mode, and the electronic identity card can be used like a normal identity card at the moment, and has the same identity card legal effectiveness if the card issuing mechanism passes the authentication of the public security department.

The electronic identity card in the disclosure avoids the situation that the entity identity card is abused after being lost, and after the terminal equipment is lost, because the terminal equipment has the protection of unlocking and checking layer by layer, thereby the safety of the electronic identity card can be improved, and after the electronic identity card is lost, the electronic identity card in the terminal equipment can be automatically unloaded after being activated again, namely the electronic identity card information in the terminal equipment is erased, the safety of the electronic identity card is further improved, the electronic identity card is expandable, when the terminal equipment unloads the electronic identity card, the position information of the terminal equipment can be sent to a server, so that the lost terminal equipment can be found based on the position information.

The following are embodiments of the disclosed apparatus that may be used to perform embodiments of the disclosed methods.

Fig. 4 is a block diagram illustrating an apparatus for acquiring an electronic identification card according to an exemplary embodiment, where the apparatus is applied to a terminal device, and as shown in fig. 4, the apparatus for acquiring an electronic identification card includes:

a first obtaining module 11, configured to obtain user identity information;

a second obtaining module 12, configured to obtain information of a communication card in the terminal device;

a first sending module 13, configured to send an electronic identity card request instruction to the server; the electronic identity card request instruction comprises the following steps: the user identity information acquired by the first acquisition module 11 and the communication card information acquired by the second acquisition module 12;

a first receiving module 14, configured to receive an electronic identity card installation instruction sent by the server; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment;

and the installation module 15 is configured to install the electronic identity card in the terminal device according to the electronic identity card installation instruction received by the first receiving module 14.

In one embodiment, as shown in fig. 5, the first sending module 13 includes: a first transmission submodule 131 and a second transmission submodule 132;

the first sending submodule 131 is configured to send a terminal device validity verification instruction to the server; the terminal equipment validity verification instruction comprises the following steps: the terminal equipment logs in account information of the server and preset verification information in the terminal equipment; the account information includes: a login account and a login password;

the second sending submodule 132 is configured to send the electronic identity card request instruction to the server when receiving a verification legal instruction sent by the server.

In one embodiment, as shown in fig. 6, the second sending submodule 132 includes: a first detection submodule 1321, an establishing submodule 1322, a third sending submodule 1323 and a fourth sending submodule 1324;

the first detection submodule 1321 is configured to, when receiving a verification legal instruction sent by the server, detect whether an encryption channel establishment instruction sent by the server is received;

the establishing submodule 1322 is configured to, when the first detecting submodule 1321 detects that the encrypted channel establishing instruction is received, establish an encrypted channel for transmitting data between the terminal device and the server according to the encrypted channel establishing instruction;

the third sending submodule 1324 is configured to send an electronic identity card request instruction to the server through the encrypted channel;

the fourth sending submodule 1325 is configured to send an electronic identity card request instruction to the server through a common channel when the first detecting submodule 1321 detects that the encryption channel establishment instruction is not received.

In one embodiment, as shown in fig. 7, the apparatus further comprises: a third obtaining module 16 and a second sending module 17; the installation module 15 includes: a second detection submodule 151 and a mounting submodule 152;

the third obtaining module 16 is configured to obtain a security unit identifier used for installing the electronic identity card in the terminal device;

the second sending module 17 is configured to send the secure element identifier obtained by the third obtaining module 16 to the server;

the electronic identity card installation instruction further comprises the following steps: a security element identification; the second detection submodule 151 is configured to detect whether a security unit identifier included in the electronic identity card installation instruction is the same as a security unit identifier in the terminal device;

the installation submodule 152 is configured to, when the second detection submodule 151 detects that the two security unit identifiers are the same, install the electronic identity card in the security unit according to the electronic identity card installation instruction.

In one embodiment, as shown in fig. 8, the first sending module 13 includes: an encryption sub-module 133 and a fifth transmission sub-module 134;

the encryption submodule 133 is configured to encrypt the electronic identity card request instruction according to a preset encryption algorithm;

the fifth sending submodule 134 is configured to send the electronic identity card request instruction encrypted by the encryption submodule 133 to the server.

In one embodiment, as shown in fig. 9, the first obtaining module 11 includes: a first acquisition submodule 111;

the first obtaining sub-module 111 is configured to obtain user identity information in the entity identity card through a short-distance wireless communication technology.

In one embodiment, as shown in fig. 10, the apparatus further comprises: a third sending module 18, an activation module 19 and an offloading module 110;

the third sending module 18 is configured to send an electronic identity card activation request instruction to the server; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the server logged in by the terminal equipment are obtained;

the activation module 19 is configured to activate the electronic identity card in the terminal device according to the electronic identity card activation instruction when detecting that the electronic identity card activation instruction sent by the server is received;

the unloading module 110 is configured to, when detecting that an electronic identity card abnormal instruction sent by the server is received, unload the electronic identity card in the terminal device according to the electronic identity card abnormal instruction.

Fig. 11 is a block diagram illustrating an apparatus for acquiring an electronic identification card, which is applied to a server according to an exemplary embodiment, and as shown in fig. 11, the apparatus for acquiring an electronic identification card includes:

the second receiving module 21 is configured to receive an electronic identity card request instruction sent by the terminal device; the electronic identity card request instruction comprises the following steps: user identity information and communication card information in the terminal equipment;

the first detection module 22 is configured to detect whether the user identity information and the communication card information belong to the same user;

a fourth obtaining module 23, configured to obtain, according to the user identity information, an electronic identity card installation instruction corresponding to the terminal device when the first detecting module 22 detects that the user identity information and the communication card information belong to the same user; the electronic identity card installation instruction comprises electronic identity card installation package information corresponding to the terminal equipment;

a fourth sending module 24, configured to send the electronic identity card installation instruction obtained by the fourth obtaining module to the terminal device.

In one embodiment, as shown in fig. 12, the apparatus further comprises: a third receiving module 25 and a fifth transmitting module 26;

the third receiving module 25 is configured to receive a terminal device validity verification instruction sent by the terminal device; the terminal equipment validity verification instruction comprises the following steps: the terminal equipment logs in account information of the server and preset verification information in the terminal equipment;

the fifth sending module 26 is configured to send a verification validity instruction to the terminal device when it is detected that the account information is correct and the preset verification information in the terminal device is the same as the preset verification information stored in the server.

In one embodiment, as shown in fig. 13, the apparatus further comprises: a building module 27 and a sixth sending module 28;

the establishing module 27 is configured to establish an encryption channel for data transmission between the terminal device and the server when it is detected that the preset check information in the terminal device is the same as the preset check information stored in the server;

the sixth sending module 28 is configured to send an encrypted channel establishing instruction to the terminal device.

In one embodiment, as shown in fig. 14, the apparatus further comprises: a fourth receiving module 29;

the fourth receiving module 29 is configured to receive a security unit identifier used for installing the electronic identity card in the terminal device;

the fourth sending module 24 sends the electronic identification card installation instruction to the terminal device, where the electronic identification card installation instruction further includes the security unit identifier.

In one embodiment, as shown in fig. 15, the apparatus further comprises: a second detection module 210 and a decryption module 211;

the second detection module 210 is configured to detect whether the electronic identity card request instruction is encrypted;

the decryption module 211 is configured to, when the second detection module 210 detects that the electronic identity card request instruction is encrypted, decrypt the electronic identity card request instruction according to a preset decryption algorithm.

In one embodiment, as shown in fig. 16, the apparatus further comprises: a saving module 212, a fifth receiving module 213, a third detecting module 214, a fourth detecting module 215, and a fifth sending module 216;

the saving module 212 is configured to save a mapping relationship between account information of the terminal device logging in the server and the electronic identity card information;

the fifth receiving module 213 is configured to receive an electronic identity card activation request instruction sent by the terminal device; the electronic identity card activation request instruction comprises the following steps: the electronic identity card information in the terminal equipment, the communication card information in the terminal equipment and the account information of the server logged in by the terminal equipment are obtained;

the third detecting module 214 is configured to detect whether a mapping relationship between the account information and the electronic identity card information is saved;

the fourth detecting module 215 is configured to detect whether the electronic identity card information and the communication card information belong to the same user when the third detecting module 214 detects that the mapping relationship between the account information and the electronic identity card information is stored;

the fifth sending module 216 is configured to send an electronic identity card activation instruction to the terminal device when the fourth detecting module 215 detects that the electronic identity card information and the communication card information belong to the same user; and the electronic identity card activation instruction indicates the terminal equipment to activate the electronic identity card in the terminal equipment.

In one embodiment, as shown in fig. 17, the third detection module 214 includes: a first receiving submodule 2141, a saving submodule 2142, a third detecting submodule 2143, a sixth transmitting submodule 2144, and a fourth detecting submodule 2145;

the first receiving submodule 2141 is configured to receive an electronic identity card processing instruction; the electronic identity card processing instruction carries the electronic identity card information; the electronic identity card processing instruction indicates to report loss or cancel the electronic identity card corresponding to the electronic identity card information;

the storage submodule 2142 is configured to store the electronic identity card processing instruction;

the third detection submodule 2143 is configured to detect whether an electronic identity card processing instruction for the electronic identity card information is stored in the server;

the sixth sending submodule 2144 is configured to send an electronic identity card abnormal instruction to the terminal device when the third detecting submodule 2143 detects and stores an electronic identity card processing instruction for the electronic identity card information, where the electronic identity card abnormal instruction instructs the terminal device to unload the electronic identity card;

the fourth sending submodule 2145 is configured to, when the third detecting submodule 2143 detects that an electronic identity card processing instruction corresponding to the electronic identity card information is not stored, detect whether a mapping relationship between the account information and the electronic identity card is included in a database.

The embodiment of the present disclosure provides an obtaining apparatus of an electronic identity card, where the apparatus is applied to a terminal device, and the apparatus includes:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to:

acquiring user identity information;

acquiring communication card information in terminal equipment;

The processor may be further configured to:

the sending of the electronic identification card request instruction to the server includes:

When receiving a verification legal instruction sent by the server, sending an electronic identity card request instruction to the server, including:

The method further comprises the following steps:

sending the security element identification to the server;

The acquiring of the user identity information includes:

After the electronic identity card is installed in the terminal device according to the electronic identity card installation instruction, the method further comprises the following steps:

With regard to the apparatus in the above-described embodiment, the specific manner in which each module performs the operation has been described in detail in the embodiment related to the method, and will not be elaborated here.

The embodiment of the present disclosure provides an acquisition device of an electronic identity card, where the device is applied to a server, and the device includes:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to:

The processor may be further configured to:

before the receiving of the electronic identity card request instruction sent by the terminal device, the method further includes:

The method further comprises the following steps:

After receiving the electronic identity card request instruction sent by the terminal device, the method further includes:

The method further comprises the following steps:

storing the electronic identity card processing instruction;

Fig. 18 is a block diagram illustrating an acquisition apparatus 80 for an electronic identification card, which is suitable for a terminal device according to an exemplary embodiment. For example, the apparatus 80 may be a mobile phone, a computer, a digital broadcast terminal, a messaging device, a game console, a tablet device, a medical device, an exercise device, a personal digital assistant, and the like.

The apparatus 80 may include one or more of the following components: processing component 802, memory 804, power component 806, multimedia component 808, audio component 810, input/output (I/O) interface 812, sensor component 814, and communication component 816.

The processing component 802 generally controls overall operation of the device 80, such as operations associated with display, telephone calls, data communications, camera operations, and recording operations. The processing components 802 may include one or more processors 820 to execute instructions to perform all or a portion of the steps of the methods described above. Further, the processing component 802 can include one or more modules that facilitate interaction between the processing component 802 and other components. For example, the processing component 802 can include a multimedia module to facilitate interaction between the multimedia component 808 and the processing component 802.

The memory 804 is configured to store various types of data to support operations at the apparatus 80. Examples of such data include instructions for any application or method operating on the device 80, contact data, phonebook data, messages, pictures, videos, and so forth. The memory 804 may be implemented by any type or combination of volatile or non-volatile memory devices such as Static Random Access Memory (SRAM), electrically erasable programmable read-only memory (EEPROM), erasable programmable read-only memory (EPROM), programmable read-only memory (PROM), read-only memory (ROM), magnetic memory, flash memory, magnetic or optical disks.

The power supply component 806 provides power to the various components of the device 80. The power components 806 may include a power management system, one or more power supplies, and other components associated with generating, managing, and distributing power for the device 80.

The multimedia component 808 includes a screen that provides an output interface between the device 80 and the user. In some embodiments, the screen may include a Liquid Crystal Display (LCD) and a Touch Panel (TP). If the screen includes a touch panel, the screen may be implemented as a touch screen to receive an input signal from a user. The touch panel includes one or more touch sensors to sense touch, slide, and gestures on the touch panel. The touch sensor may not only sense the boundary of a touch or slide action, but also detect the duration and pressure associated with the touch or slide operation. In some embodiments, the multimedia component 808 includes a front facing camera and/or a rear facing camera. The front camera and/or the rear camera may receive external multimedia data when the device 80 is in an operating mode, such as a shooting mode or a video mode. Each front camera and rear camera may be a fixed optical lens system or have a focal length and optical zoom capability.

The audio component 810 is configured to output and/or input audio signals. For example, the audio component 810 includes a Microphone (MIC) configured to receive external audio signals when the apparatus 80 is in an operating mode, such as a call mode, a recording mode, and a voice recognition mode. The received audio signals may further be stored in the memory 804 or transmitted via the communication component 816. In some embodiments, audio component 810 also includes a speaker for outputting audio signals.

The I/O interface 812 provides an interface between the processing component 802 and peripheral interface modules, which may be keyboards, click wheels, buttons, etc. These buttons may include, but are not limited to: a home button, a volume button, a start button, and a lock button.

The sensor assembly 814 includes one or more sensors for providing various aspects of state assessment for the device 80. For example, the sensor assembly 814 may detect the open/closed status of the device 80, the relative positioning of the components, such as a display and keypad of the device 80, the change in position of the device 80 or a component of the device 80, the presence or absence of user contact with the device 80, the orientation or acceleration/deceleration of the device 80, and the change in temperature of the device 80. Sensor assembly 814 may include a proximity sensor configured to detect the presence of a nearby object without any physical contact. The sensor assembly 814 may also include a light sensor, such as a CMOS or CCD image sensor, for use in imaging applications. In some embodiments, the sensor assembly 814 may also include an acceleration sensor, a gyroscope sensor, a magnetic sensor, a pressure sensor, or a temperature sensor.

The communication component 816 is configured to facilitate wired or wireless communication between the apparatus 80 and other devices. The device 80 may access a wireless network based on a communication standard, such as WiFi, 2G or 3G, or a combination thereof. In an exemplary embodiment, the communication component 816 receives a broadcast signal or broadcast related information from an external broadcast management system via a broadcast channel. In an exemplary embodiment, the communication component 816 further includes a Near Field Communication (NFC) module to facilitate short-range communications. For example, the NFC module may be implemented based on Radio Frequency Identification (RFID) technology, infrared data association (IrDA) technology, Ultra Wideband (UWB) technology, Bluetooth (BT) technology, and other technologies.

In an exemplary embodiment, the apparatus 80 may be implemented by one or more Application Specific Integrated Circuits (ASICs), Digital Signal Processors (DSPs), Digital Signal Processing Devices (DSPDs), Programmable Logic Devices (PLDs), Field Programmable Gate Arrays (FPGAs), controllers, micro-controllers, microprocessors or other electronic components for performing the above-described methods.

In an exemplary embodiment, a non-transitory computer-readable storage medium comprising instructions, such as the memory 804 comprising instructions, executable by the processor 820 of the apparatus 80 to perform the above-described method is also provided. For example, the non-transitory computer readable storage medium may be a ROM, a Random Access Memory (RAM), a CD-ROM, a magnetic tape, a floppy disk, an optical data storage device, and the like.

A non-transitory computer readable storage medium, wherein instructions of the storage medium, when executed by a processor of an apparatus 80, enable the apparatus 80 to perform the above-mentioned method for acquiring an electronic identity card, the method comprising:

acquiring user identity information;

acquiring communication card information in terminal equipment;

The method further comprises the following steps:

sending the security element identification to the server;

The acquiring of the user identity information includes:

Fig. 19 is a block diagram illustrating an apparatus 90 for message push according to an example embodiment. For example, the apparatus 90 may be provided as a server. The apparatus 90 comprises a processing component 902 further comprising one or more processors, and memory resources, represented by memory 903, for storing instructions, e.g., applications, executable by the processing component 902. The application programs stored in memory 903 may include one or more modules that each correspond to a set of instructions. Further, the processing component 902 is configured to execute instructions to perform the above-described methods.

The apparatus 90 may also include a power component 906 configured to perform power management of the apparatus 90, a wired or wireless network interface 905 configured to connect the apparatus 90 to a network, and an input/output (I/O) interface 908. The apparatus 90 may operate based on an operating system stored in the memory 903, such as Windows Server, Mac OS XTM, UnixTM, LinuxTM, FreeBSDTM, or the like.

A non-transitory computer readable storage medium, wherein instructions of the storage medium, when executed by a processor of an apparatus 90, enable the apparatus 90 to perform the above-mentioned method for acquiring an electronic identification card, the method comprising:

The method further comprises the following steps:

storing the electronic identity card processing instruction;

Other embodiments of the disclosure will be apparent to those skilled in the art from consideration of the specification and practice of the disclosure disclosed herein. This application is intended to cover any variations, uses, or adaptations of the disclosure following, in general, the principles of the disclosure and including such departures from the present disclosure as come within known or customary practice within the art to which the disclosure pertains. It is intended that the specification and examples be considered as exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It will be understood that the present disclosure is not limited to the precise arrangements described above and shown in the drawings and that various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims

1. A method for acquiring an electronic identity card is applied to terminal equipment, and the method comprises the following steps:

acquiring user identity information;

acquiring communication card information in terminal equipment;

sending an electronic identity card request instruction to a server; the electronic identity card request instruction comprises the following steps: the user identity information and the communication card information;

installing an electronic identity card in the terminal equipment according to the electronic identity card installation instruction;

the method further comprises the following steps:

sending the security element identification to the server;

2. The method of claim 1, wherein sending the electronic identification card request instruction to the server comprises:

3. The method according to claim 2, wherein the sending an electronic identity card request instruction to the server when receiving a validation instruction sent by the server comprises:

4. The method of claim 1, wherein sending the electronic identification card request instruction to the server comprises:

5. The method of claim 1, wherein the obtaining user identity information comprises:

6. The method according to claim 1, wherein after the electronic identity card is installed in the terminal device according to the electronic identity card installation instruction, the method further comprises:

7. The method for acquiring the electronic identity card is applied to a server and comprises the following steps:

sending the electronic identity card installation instruction to the terminal equipment;

the method further comprises the following steps:

and the terminal equipment sends the electronic identity card installation instruction and also comprises the safety unit identification so as to enable the terminal equipment to detect whether the safety unit identification included in the electronic identity card installation instruction is the same as the safety unit identification in the terminal equipment or not, and when the two safety unit identifications are detected to be the same, the electronic identity card is installed in the safety unit according to the electronic identity card installation instruction.

8. The method according to claim 7, wherein before receiving the electronic identity card request instruction sent by the terminal device, the method further comprises:

9. The method of claim 8, further comprising:

10. The method according to claim 7, wherein after receiving the electronic identity card request instruction sent by the terminal device, the method further comprises:

11. The method of claim 7, further comprising:

12. The method according to claim 11, wherein the detecting whether to save the mapping relationship between the account information and the electronic identity card comprises:

storing the electronic identity card processing instruction;

13. An apparatus for acquiring an electronic identity card, the apparatus being applied to a terminal device, the apparatus comprising:

the first acquisition module is used for acquiring user identity information;

the installation module is used for installing the electronic identity card in the terminal equipment according to the electronic identity card installation instruction received by the first receiving module;

the device further comprises: a third acquisition module and a second sending module; the installation module includes: the second detection submodule and the installation submodule;

14. The apparatus of claim 13, wherein the first sending module comprises: a first sending submodule and a second sending submodule;

15. The apparatus of claim 14, wherein the second transmit submodule comprises: the system comprises a first detection submodule, an establishing submodule, a third sending submodule and a fourth sending submodule;

16. The apparatus of claim 13, wherein the first sending module comprises: an encryption submodule and a fifth sending submodule;

17. The apparatus of claim 13, wherein the first obtaining module comprises: a first obtaining submodule;

18. The apparatus of claim 13, further comprising: the third sending module, the activating module and the unloading module;

19. An apparatus for acquiring an electronic identity card, wherein the apparatus is applied to a server, and the apparatus comprises:

a fourth sending module, configured to send the electronic identity card installation instruction obtained by the fourth obtaining module to the terminal device;

the device further comprises: a fourth receiving module;

the fourth sending module sends the electronic identity card installation instruction to the terminal equipment, the electronic identity card installation instruction further comprises the safety unit identification, so that the terminal equipment detects whether the safety unit identification included in the electronic identity card installation instruction is the same as the safety unit identification in the terminal equipment or not, and when the two safety unit identifications are detected to be the same, the electronic identity card is installed in the safety unit according to the electronic identity card installation instruction.

20. The apparatus of claim 19, further comprising: a third receiving module and a fifth sending module;

21. The apparatus of claim 20, further comprising: the establishing module and the sixth sending module;

22. The apparatus of claim 19, further comprising: a second detection module and a decryption module;

23. The apparatus of claim 19, further comprising: the device comprises a storage module, a fifth receiving module, a third detection module, a fourth detection module and a fifth sending module;

24. The apparatus of claim 23, wherein the third detection module comprises: the first receiving submodule, the saving submodule, the third detecting submodule, the sixth sending submodule and the fourth detecting submodule;

the fourth detection submodule is configured to detect whether a mapping relationship between the account information and the electronic identity card is included in a database when the third detection submodule detects that an electronic identity card processing instruction corresponding to the electronic identity card information is not stored.

25. An apparatus for acquiring an electronic identity card, the apparatus being applied to a terminal device, the apparatus comprising:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to:

acquiring user identity information;

acquiring communication card information in terminal equipment;

sending the security element identification to the server;

26. An apparatus for acquiring an electronic identity card, wherein the apparatus is applied to a server, and the apparatus comprises:

a processor;

a memory for storing processor-executable instructions;

wherein the processor is configured to:

27. A computer-readable storage medium having stored thereon computer instructions, which when executed by a processor, carry out the steps of the method according to any one of claims 1 to 6.

28. A computer-readable storage medium having stored thereon computer instructions, which when executed by a processor, carry out the steps of the method of any one of claims 7 to 12.