City Pass Card Security System Construction and Product Analysis

1, background introduction

With the expansion of the city pass card business in various fields, in order to strengthen the security in the development process of the city pass card, and effectively protect the interests of the city pass card and the cardholders, the IC card application service center of the Ministry of Housing and Urban-Rural Development (hereinafter referred to as : The Department of IC Card Center) plans and builds the "Digital Authentication System for Urban Construction and Public Service" based on the current "Security System for Construction Business IC Card Key Management System" to meet the needs of the city's passcard based on the Internet. The security needs of the city guide Tongka to carry out the construction of the city card system security system.

2. City Pass Card Security System

The security system of the city pass card system consists of the “IC Card Key Management System for Construction Business” and the “Digital Authentication System for Urban Construction and Public Service”. Among them, the "Construction Business IC Card Key Management System" guarantees the security of offline transactions under the city pass card line, and the "Digital Authentication System for Urban Construction and Public Service" guarantees the security of online payment through the City Pass Card.


City Card Security System

The purpose of building the entire security system is to ensure the overall security of the city pass card business, ensure the safe application of various application keys of the city passcard, and allow the city passcard to have certain security control rights.

3. City Pass Card Security Products

The security products involved in the entire city passcard security system include various cryptosystems, SAM cards/security modules, and secure systems/CA systems.


City Pass Card Security Products

1) The cipher machine

The City One Card Special Encryption Machine is a hardware encryption device used in the "IC Card Key Management System for Construction Business". Currently, it is managed by the Department's IC Card Center and unified procurement. In hardware, it has certain anti-physical attack capabilities. It controls the generation, storage, backup, and calculation of keys in software and can take certain strategies for auditing.

With the development and application of the National Interconnection Data Processing Center, in response to application requirements, the Department of IC Card Center and the crypto supplier have jointly developed a TAC check cipher machine specifically for transaction data verification. Ensures the security of keys during data clearing.

2) SAM Card/Security Module

The city's one-card special SAM card/security module belongs to the special control security product of the IC card center. The department's IC card center carries out unified design and planning, entrusts manufacturers with strong technical strength to develop and test, and is unified and initialized by the IC card center and loaded. Consumer master key/Ministry root certificate.

The security module is integrated with RF and SAM functions, which can not only realize the COS function of the SAM card, but also realize the card communication of the RF pair conforming to ISO/IEC14443A/B. It can meet the needs of online payment, access control and various value-added business applications.

3) Construction business IC card key management system

The “IC Card Key Management System for Construction Enterprises” was developed based on the requirements of the Document No.65 [1999] of the Ministry of Housing and Urban-Rural Development. In the development process, the PBOC standard and key management system of the People's Bank of China was used for reference and reference at the beginning. In 1999, R&D was completed in accordance with the characteristics of its own industry, and it was approved by experts from the Ministry of Housing and Urban-Rural Development to obtain the National Gold Card Office. Such as the approval of the competent authorities.

The "Circular on Application of Construction IC Cards Application Management" stipulates that in order to ensure a high level of security in all areas of IC card application systems, especially in issuance, recharging, liquidation, and fund transfer, construction of the IC card system should take necessary safety management. The mechanism shall adopt a unified key management system and implement security module. Up to now, the IC card system for housing urban and rural construction has covered all the municipalities and the vast majority of provincial capital cities, and is widely used in more than 40 areas such as public utilities payment, landscape architecture, property management, parking management, and public transportation.

According to the "Notice on Handling Serious Security Vulnerabilities in Some IC Cards" issued by the Ministry of Industry and Information Technology ("Koshin Denki [2009] No. 2) and issued by the National Cryptographic Administration Bureau, please assist with the IC card system. The letter of the password management work" (Senior Council Letter [2009] No. 4), the Department of IC Card Center is compatible with the "building enterprise IC card key management system", using the national secret SM1 algorithm for the "city card key The management system's password scheme is designed and demonstrated, and it is demonstrated through the program of the National Cryptography Administration. It has been developed and has already undergone preliminary trials in the city.

4) Digital Certificate Authentication System in Urban Construction and Public Service

The "Digital Certificate Authentication System for Urban Construction and Public Service" is designed and developed for the online payment business application following the "IC Card Key Management System for Construction Business". It supports RSA1024-bit and 2048-bit key generation and certificate issuance, and is used by cities. Users in the field of construction and public services provide digital certificate inspection services in order to ensure online payment identity authentication and security during key transmission.

At present, the "Digital Certificate Authentication System for Urban Construction and Public Services" has been completed and deployed in the city. In the near future, the IC Card Center will also apply for "Digital Authentication System for Urban Construction and Public Service" to apply for electronic authentication services. "Password License" and "Electronic Authentication Service License" are the escort for the sustainable development of the city Tongka.

4. City Pass Card Safety Standard

Centering on the whole city pass card business, the Department of IC Card Center has successively formulated the "Industrial IC (Integrated Circuit Card) Product Inspection", "Construction Project CPU Card Operating System Technical Requirements" and "Construction Business Contactless CPU Card Chip Technical Requirements". , “Technical Requirements for Urban Public Utilities Interconnection Cartoons”, “Technical Requirements for Urban Public Utilities Interconnection Card Clearing and Clearing,” and “Urban Public Utility Interconnection Card Keys and Safety Technical Requirements” and other national industry standards to guide cities The construction of the card business and the strengthening of the security of the city's card business.

In order to systematically and comprehensively guide industry users in the construction of various IC card systems, this year's Ministry of IC Card Centers has also organized industrial city users, chip manufacturers, COS manufacturers, terminal manufacturers, and system integrators to prepare and formulate a national engineering standard, "Urban Construction Smart Card System Engineering Technical Specifications. At the same time, it also applied to the National Standardization Management Committee for the establishment of the national standard "Smart Card System Security Technical Requirements."

LED Bulb

Led Bulb,Light Bulb,Smart Bulb,Led Light Bulbs

Jiangmen hengshenghui Lighting Co., Ltd , https://www.jmsunbright.com