WO2016107381A1 - 一种基于nfc的通信装置和方法 - Google Patents

一种基于nfc的通信装置和方法 Download PDF

Info

Publication number
WO2016107381A1
WO2016107381A1 PCT/CN2015/096706 CN2015096706W WO2016107381A1 WO 2016107381 A1 WO2016107381 A1 WO 2016107381A1 CN 2015096706 W CN2015096706 W CN 2015096706W WO 2016107381 A1 WO2016107381 A1 WO 2016107381A1
Authority
WO
WIPO (PCT)
Prior art keywords
nfc
application
module
execution environment
communication
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2015/096706
Other languages
English (en)
French (fr)
Inventor
郭伟
李定洲
周钰
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
China Unionpay Co Ltd
Original Assignee
China Unionpay Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by China Unionpay Co Ltd filed Critical China Unionpay Co Ltd
Priority to DK15875059.6T priority Critical patent/DK3242494T3/da
Priority to US15/532,390 priority patent/US20170366925A1/en
Priority to JP2017531257A priority patent/JP6573672B2/ja
Priority to EP15875059.6A priority patent/EP3242494B1/en
Publication of WO2016107381A1 publication Critical patent/WO2016107381A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/80—Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/71—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information
    • G06F21/74—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer to assure secure computing or processing of information operating in dual or compartmented mode, i.e. at least one secure mode
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W76/00—Connection management
    • H04W76/10—Connection setup
    • H04W76/14—Direct-mode setup
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W8/00—Network data management
    • H04W8/005—Discovery of network devices, e.g. terminals

Definitions

  • the present invention relates to NFC communications, and more particularly to NFC based communication devices and methods.
  • Trusted Executive Environment (TEE) technology can provide a trusted execution environment protected by hardware protection for communication devices such as smart terminals, in which security-related sensitive operations on smart terminals are completed based on TEE, thereby Improve security.
  • TEE Trusted Executive Environment
  • NFC Near Field Communication
  • the NFC function is implemented in a multimedia execution environment (such as Android, IOS, etc.), which will destroy the security closed loop of the trusted execution environment.
  • a multimedia execution environment such as Android, IOS, etc.
  • secure payment information such as financial transactions, needs to be transmitted to a secure, trusted execution environment via an insecure multimedia execution environment during which sensitive information may be stolen or tampered with.
  • the present invention discloses an NFC-based communication device comprising: an NFC module disposed in a trusted execution environment of the communication device, the trusted execution environment being independent of a multimedia execution environment of the communication device, wherein the NFC module includes communication A module and a protocol module for establishing a connection with another NFC device for parsing communication data of the communication device with the another NFC device.
  • the NFC module is used to perform NFC functions of a safety-related application.
  • the security-related application is an application installed in a trusted execution environment or an application installed in a multimedia execution environment, and when the security-related application is a first application installed in a multimedia execution environment, The NFC module implements the NFC function of the first application via another application in the trusted execution environment corresponding to the first application.
  • the communication device further includes a virtual NFC module disposed in the multimedia execution environment, the virtual NFC module for simulating NFC hardware disposed in the trusted execution environment to cause execution in the multimedia
  • the NFC functionality of an application in the environment can be handled by the NFC hardware.
  • an NFC routing table is further set in the protocol module, and the routing table associates an application ID with a system environment and an application name.
  • the invention also discloses an NFC-based communication method, comprising:
  • the protocol module is used to parse communication data between the communication device and the another NFC device.
  • the NFC function of the security-related application is performed using the NFC module.
  • the security-related application is an application installed in a trusted execution environment or an application installed in a multimedia execution environment, and when the security-related application is a first application installed in a multimedia execution environment, The NFC module implements the NFC function of the first application via another application in the trusted execution environment corresponding to the first application.
  • the method further includes
  • the NFC hardware disposed in the trusted execution environment is simulated with the virtual NFC module to enable NFC functionality of an application in the multimedia execution environment to be processed by the NFC hardware.
  • an NFC routing table is also set in the protocol module, the routing table associating an application ID with a system environment, an application name.
  • the invention can improve the security of the NFC communication, and the NFC module that only implements part of the traditional protocol stack in the TEE reduces the storage burden of the TEE environment and increases the flexibility of the NFC communication.
  • FIG. 1 is a schematic diagram of an NFC-based communication device in accordance with an embodiment of the present invention.
  • FIG. 2 is a schematic diagram of an NFC-based communication device in accordance with an embodiment of the present invention.
  • an NFC-based communication device eg, an intelligent mobile communication terminal
  • an NFC-based communication device includes an NFC module to implement the NFC function of the communication device.
  • the NFC module is placed in a trusted execution environment of the communication device.
  • the trusted execution environment is independent of the multimedia execution environment of the communication device.
  • a Trusted Execution Environment (TEE) can be used to execute a specific application, such as a secure application.
  • a Multimedia Execution Environment (REE) such as the Android operating system can be used to execute other applications other than a particular application.
  • the NFC module includes a communication module and a protocol module, and the communication module is configured to establish a connection with another NFC device, where the protocol module is configured to parse communication data between the communication device and the another NFC device, and the protocol module uses The NFC protocol is implemented to implement NFC communication.
  • another NFC device in FIG. 1 may be any NFC-capable entity, such as an NFC-capable IC card, a bank card, a mobile communication device (eg, a mobile phone), a smart terminal (eg, a tablet), and the like. .
  • the second NFC module which is provided in the trusted execution environment of the communication device, can be used to perform NFC functions of the security-related application.
  • the security-related application is an application installed in a trusted execution environment, such as the second application in FIG. 2 or an application installed in a multimedia execution environment, such as the first application in FIG. 2.
  • the second NFC module can be called by calling the NFC application interface in the trusted execution environment framework.
  • the second NFC module implements the NFC function of the second application via the NFC application interface in the trusted execution environment framework.
  • the first application eg. the payment application
  • another application in the trusted execution environment corresponding to the first application may be invoked in the trusted execution environment framework, and then the other application
  • the application invokes the second NFC module via the NFC application interface.
  • the second NFC module implements the NFC function of the other application via the NFC application interface in the trusted execution environment framework.
  • an NFC application program interface API
  • Open NFC Open NFC
  • NCI protocol and the like
  • a virtual NFC module can be provided in the multimedia execution environment for emulating NFC hardware disposed in the trusted execution environment to enable The NFC function of the application in the multimedia execution environment can be processed by the NFC hardware.
  • a common application non-secure application
  • the first operating system for example, the Android system
  • the first NFC module may be a conventional NFC module that implements an NFC legacy protocol stack.
  • NFCC NFC controller
  • an NFC routing table may be further configured in the protocol module, where the routing table associates an application ID with a system environment and an application name.
  • the protocol module can quickly find the system environment in which the application is located according to the application ID (eg, multimedia execution environment, trusted implementation) Line environment, security carrier environment) and its application name to improve NFC communication efficiency. For example, after the NFC communication information arrives, the protocol module will parse it, obtain the application ID, and then query the system environment and application name of the application through the NFC routing table, so that the NFC controller can quickly establish a session with the application.
  • the protocol module can also update the NFC routing table information when the application is updated.
  • the routing table can also associate other factors related to the application with the application ID.
  • the NFC module may further include an SE (Security Element) management module for implementing interaction of communication data with an SE (eg, a SIM card, an SSD card, etc.), for example, data storage. , key storage.
  • SE Security Element
  • the NFC module may further include an NFC management module for configuring and managing the NFC controller, such as starting and shutting down NFC functions, resetting NFC functions, and setting NFC service modes.
  • a protocol module in the NFC module can be used to implement a reader mode and a card emulation mode. And implementing the P2P mode through the traditional NFC protocol stack in the Multimedia Execution Environment (REE).
  • the NFC module of the present invention can be based on the core protocol stack of the traditional NFC protocol stack architecture. In one example, considering the security requirements of the TEE trusted execution environment and matching the storage conditions of the TEE trusted execution environment, the NFC protocol stack of the NFC module can be Part of the traditional NFC protocol stack architecture.
  • the protocol module can support both ISO7816 and ISO14443 protocols.
  • the ISO14443 protocol is used for non-contact communication between the NFC module and the external card reader
  • the ISO7816 protocol is used for data communication between the NFC module and the terminal SE (such as a SIM card, an SSD card, etc.).
  • the NFC module includes a communication module and a protocol module for establishing a connection with another NFC device for parsing communication data of the communication device with the other NFC device.
  • the communication module can also be used to determine an NFC based communication mode.
  • the protocol module receives read and write application data from the NFC trusted application on the TEE through the NFC API, and encapsulates the read and write application data according to the reader module data format.
  • the communication module then sends the encapsulated data to the NFCC.
  • the encapsulated data is sent by the NFCC to the external non-contact card through the antenna.
  • the NFCC at the TEE end receives the application data forwarded from the REE, and the NFCC processes the received application data and transmits it to the external non-card through the antenna.
  • the application data forwarded from the REE may be generated by a non-secure application in the Android system, which may be encapsulated by the protocol stack of the REE end and forwarded to the NFCC processing via the virtual NFC module.
  • the communication module receives data transmitted from the external card reader through the NFCC, and the protocol module can search for the corresponding application through the NFC routing table according to the application ID in the data.
  • the protocol module will parse the data sent by the reader in accordance with the card analog data format.
  • the request may be sent to the corresponding SE through the SE management module, and then the result is fed back to the external card reader through the SE management module.
  • This mode establishes a connection between two NFC devices in the following manner.
  • the NFC communication request sent by the external NFC device is received by the NFCC, and the protocol module in the NFC module parses the request.
  • the protocol module determines that the request belongs to the P2P mode
  • the request is forwarded to the virtual NFC module in the REE.
  • the virtual NFC module then forwards the request to the traditional NFC protocol stack in the REE.
  • the legacy protocol stack processes the request to establish a connection between two NFC devices.
  • the present invention also discloses an NFC-based communication method, comprising: setting an NFC module in a trusted execution environment of the communication device, the trusted execution environment being independent of a multimedia execution environment of the communication device, wherein in the NFC module A communication module and a protocol module are provided, and the communication module is used to establish a connection with another NFC device, and the protocol module is used to analyze communication data between the communication device and the another NFC device.
  • the NFC function of the security-related application is performed using the NFC module.
  • the security-related application is an application installed in a trusted execution environment or an application installed in a multimedia execution environment, and when the security-related application is a first application installed in a multimedia execution environment, The NFC module implements the NFC function of the first application via another application in the trusted execution environment corresponding to the first application.
  • the method further includes setting a virtual NFC module in the multimedia execution environment, using the virtual NFC module to simulate NFC hardware disposed in the trusted execution environment to cause in the multimedia execution environment
  • the NFC function of the application can be processed by the NFC hardware.
  • an NFC routing table is also set in the protocol module, the routing table associating an application ID with a system environment, an application name.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Mathematical Physics (AREA)
  • Telephone Function (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

本发明公开一种基于NFC的通信装置，包括：在所述通信装置的可信执行环境中设置的NFC模块，所述可信执行环境独立于该通信装置的多媒体执行环境，其中，该NFC模块包括通信模块和协议模块，该通信模块用于建立与另一NFC装置的连接，该协议模块用于解析所述通信装置与所述另一NFC装置的通信数据。 (图1)

Description

一种基于NFC的通信装置和方法 技术领域
本发明涉及NFC通信，并且尤其涉及基于NFC的通信装置和方法。
背景技术
可信执行环境TEE(Trusted Executive Environment)技术能够为诸如智能终端等通信装置提供受到硬件保护隔离的可信执行环境，在该环境下，智能终端上的与安全相关敏感性操作基于TEE完成，从而提高安全性。
近距离无线通信NFC(Near Field Communication)技术用于非接触式识别，使得能够在移动设备、消费类电子产品、PC和智能控件工具之间进行近距离无线通信。
现有技术中，NFC功能在多媒体执行环境(例如安卓、IOS等)下实现，这将破坏可信执行环境的安全闭环。例如，金融交易等安全支付信息需要经由不安全的多媒体执行环境传输到安全的可信执行环境，期间敏感信息可能会被窃取或者篡改。
发明内容
本发明公开基于NFC的通信装置，包括：在所述通信装置的可信执行环境中设置的NFC模块，所述可信执行环境独立于该通信装置的多媒体执行环境，其中，该NFC模块包括通信模块和协议模块，该通信模块用于建立与另一NFC装置的连接，该协议模块用于解析所述通信装置与所述另一NFC装置的通信数据。
在一个示例中，所述NFC模块用于执行安全相关的应用的NFC功能。
在一个示例中，安全相关的应用是安装在可信执行环境下的应用或者安装在多媒体执行环境下的应用，以及当该安全相关的应用是安装在多媒体执行环境下的第一应用时，该NFC模块经由与该第一应用对应的在可信执行环境下的另一应用来实现该第一应用的NFC功能。
在一个示例中，通信装置还包括，在所述多媒体执行环境中设置的虚拟NFC模块，该虚拟NFC模块用于模拟设置在所述可信执行环境中的NFC硬件，以便使得在所述多媒体执行环境中的应用的NFC功能能够由所述NFC硬件处理。
在一个示例中，所述协议模块中还设置NFC路由表，该路由表将应用ID与系统环境、应用名关联。
本发明还公开基于NFC的通信方法，包括：
在所述通信装置的可信执行环境中设置NFC模块，所述可信执行环境独立于该通信装置的 多媒体执行环境，其中，
在该NFC模块中设置通信模块和协议模块，
利用该通信模块建立与另一NFC装置的连接，
利用该协议模块解析所述通信装置与所述另一NFC装置的通信数据。
在一个示例中，利用所述NFC模块执行安全相关的应用的NFC功能。
在一个示例中，安全相关的应用是安装在可信执行环境下的应用或者安装在多媒体执行环境下的应用，以及当该安全相关的应用是安装在多媒体执行环境下的第一应用时，利用该NFC模块经由与该第一应用对应的在可信执行环境下的另一应用来实现该第一应用的NFC功能。
在一个示例中，方法还包括，
在所述多媒体执行环境中设置虚拟NFC模块，
利用该虚拟NFC模块模拟设置在所述可信执行环境中的NFC硬件，以便使得在所述多媒体执行环境中的应用的NFC功能能够由所述NFC硬件处理。
在一个示例中，还在所述协议模块中设置NFC路由表，该路由表将应用ID与系统环境、应用名关联。
本发明的能够提高NFC通信的安全性，通过在TEE中设置仅仅实现部分传统协议栈的NFC模块减轻了TEE环境的存储负担，增加了NFC通信的灵活性。
附图说明
在参照附图阅读了本发明的具体实施方式以后，本领域技术人员将会更清楚地了解本发明。本领域技术人员应当理解的是，附图仅仅用于配合具体实施方式说明本发明的技术方案，而并非意在对本发明的保护范围构成限制。
图1是根据本发明实施例的基于NFC的通信装置的示意图。
图2是根据本发明实施例的基于NFC的通信装置的示意图。
具体实施方式
下面参照附图，对本发明的具体实施方式作进一步的详细描述。应当理解的是，可对所描述的实施例进行结构的和功能的修改。另外，可针对任何给定的或特定的应用所期望和有利的那样，一个实施例的一个或多个特征可以与另一个实施例的一个或多个特征相组合。
图1是根据本发明实施例的基于NFC的通信装置的示意图。如图所示，基于NFC的通信装置(例如，智能移动通信终端)包括NFC模块以实现该通信装置的NFC功能。该 NFC模块被设置在通信装置的可信执行环境中。如图所示，可信执行环境独立于该通信装置的多媒体执行环境。可信执行环境(TEE)可以用于执行特定应用，例如安全应用。多媒体执行环境(REE)例如Android操作系统可以用于执行除特定应用的其它应用。其中，该NFC模块包括通信模块和协议模块，该通信模块用于建立与另一NFC装置的连接，该协议模块用于解析所述通信装置与所述另一NFC装置的通信数据，协议模块用于执行NFC协议以实现NFC通信。可以理解，图1中的另一NFC装置可以是任意具备NFC功能的实体，例如具备NFC功能的IC卡、银行卡、移动通信设备(例如，移动电话)、智能终端(例如，平板电脑)等。
图2是根据本发明实施例的基于NFC的通信装置的示意图。根据该实施例，设置在通信装置的可信执行环境中第二NFC模块可以用于执行安全相关的应用的NFC功能。安全相关的应用是安装在可信执行环境下的应用，例如图2中的第二应用或者安装在多媒体执行环境下的应用，例如图2中的第一应用。对于第二应用，当需要执行NFC功能时，可以在可信执行环境框架中调用NFC应用程序接口调用第二NFC模块。在该情况下，第二NFC模块经由可信执行环境框架中的NFC应用程序接口实现第二应用的NFC功能。对于第一应用(例如，支付应用)，当需要执行NFC功能时，可以在可信执行环境框架中调用与该第一应用对应的在可信执行环境下的另一应用，再由该另一应用经由NFC应用程序接口调用第二NFC模块。在该情况下，第二NFC模块经由可信执行环境框架中的NFC应用程序接口实现另一应用的NFC功能。这里，NFC应用程序接口(API)，例如Open NFC、NCI协议等相关API)可以根据实际使用情况被定制。
继续参照图2，根据本发明的一个实施例，可以在所述多媒体执行环境中设置的虚拟NFC模块，该虚拟NFC模块用于模拟设置在所述可信执行环境中的NFC硬件，以便使得在所述多媒体执行环境中的应用的NFC功能能够由所述NFC硬件处理。例如，如图所示第一操作系统(例如，Android系统)中的普通应用(非安全应用)，可以通过第一操作系统的NFC应用程序接口调用第一NFC模块来实现NFC功能。这里，第一NFC模块可以是传统NFC模块，其实现NFC传统协议栈。当该普通应用要执行NFC功能时，其请求通过虚拟NFC模块被发送至NFC控制器(NFCC)，由NFC控制器在可信执行环境下实现数据处理。
根据本发明的一个实施例，所述协议模块中还可以设置NFC路由表，该路由表将应用ID与系统环境、应用名关联。由此，经由NFC控制器的包括应用ID的信息传送，协议模块能够根据应用ID快速地寻找到该应用所在系统环境(例如，多媒体执行环境、可信执 行环境、安全载体环境)及其应用名，提高NFC通信效率。例如，在NFC通信信息到达后，协议模块将对其进行解析，获取应用ID，然后可以通过NFC路由表查询到该应用的系统环境和应用名，使得NFC控制器能够迅速与该应用建立会话。此外，协议模块还可以在应用被更新时，更新NFC路由表信息。此外，除了应用名与系统环境，路由表还可以将与应用相关的其它因素与应用ID关联。
根据本发明的一个或多个其它实施例，该NFC模块还可以包括SE(Security Element)管理模块，用于实现通信数据与SE(例如，SIM卡、SSD卡等)的交互，例如，数据保存、密钥存储。该NFC模块还可以包括NFC管理模块，用于对NFC控制器进行配置和管理，例如NFC功能的启动和关闭、NFC功能复位、NFC业务模式设置。
根据本发明的一个或多个其它实施例，该NFC模块中的协议模块可以用于实现读写器模式和卡模拟模式。以及通过多媒体执行环境(REE)中的传统NFC协议栈实现P2P模式。本发明的NFC模块可以基于传统NFC协议栈架构的核心协议栈，在一个示例中，考虑TEE可信执行环境的安全需求和匹配TEE可信执行环境的存储情况，NFC模块的NFC协议栈可以是传统NFC协议栈架构的部分。
协议模块可以支持ISO7816和ISO14443两种协议。其中，ISO14443协议用于NFC模块与外界读卡器间的非接通讯，而ISO7816协议用于NFC模块与终端SE(如SIM卡、SSD卡等)间的数据通讯。
如上所述，该NFC模块包括通信模块和协议模块，该通信模块用于建立与另一NFC装置的连接，该协议模块用于解析所述通信装置与所述另一NFC装置的通信数据。通信模块还可以用于确定基于NFC的通信模式。以下将示例性地描述通过该NFC模块实现的几种NFC通信模式。
1.NFC读卡器模式
在该模式中，协议模块通过NFC API从TEE上的NFC可信应用接收读写应用数据，并且根据读卡器模块数据格式对读写应用数据进行封装。然后，通信模块将封装的数据发送给NFCC。最后，由NFCC通过天线向外部非接卡发送封装的数据。
2.REE端的读卡器模式
在该模式中，在TEE端的NFCC接收从REE转发的应用数据，NFCC将接收的应用数据处理后通过天线向外部非接卡发送。这里，从REE转发的应用数据可以由Android系统中的非安全应用生成，该应用数据可以由REE端的协议栈封装，并经由虚拟NFC模块被转发至NFCC处理。
3.NFC卡模拟模式
在该模式中，通信模块通过NFCC接收来自外部读卡器发送的数据，协议模块可以根据该数据中的应用ID通过NFC路由表查找相应的应用。然而，协议模块将按照卡模拟数据格式解析由读卡器发送的数据。可选地，当来自读卡器的请求需要SE参与时，可以通过SE管理模块将该请求发送给相应的SE，之后通过SE管理模块将结果反馈给外部读卡器。
4.NFC P2P模式
该模式可以通过以下方式在两个NFC设备之间建立连接。首先，由NFCC接收外部NFC设备发送的NFC通信请求，NFC模块中的协议模块解析该请求。当协议模块判断该请求属于P2P模式时，将该请求转发至REE中的虚拟NFC模块。虚拟NFC模块再将该请求转发至REE中的传统NFC协议栈。传统协议栈对该请求进行处理以建立两个NFC设备之间的连接。
根据上述公开，上述的一个或多个由模块实现的功能或者步骤可以在本发明的方法实施例中的一个或多个步骤中被实施。
本发明还公开基于NFC的通信方法，包括：在所述通信装置的可信执行环境中设置NFC模块，所述可信执行环境独立于该通信装置的多媒体执行环境，其中，在该NFC模块中设置通信模块和协议模块，利用该通信模块建立与另一NFC装置的连接，利用该协议模块解析所述通信装置与所述另一NFC装置的通信数据。
在一个示例中，利用所述NFC模块执行安全相关的应用的NFC功能。
在一个示例中，安全相关的应用是安装在可信执行环境下的应用或者安装在多媒体执行环境下的应用，以及当该安全相关的应用是安装在多媒体执行环境下的第一应用时，利用该NFC模块经由与该第一应用对应的在可信执行环境下的另一应用来实现该第一应用的NFC功能。
在一个示例中，方法还包括，在所述多媒体执行环境中设置虚拟NFC模块，利用该虚拟NFC模块模拟设置在所述可信执行环境中的NFC硬件，以便使得在所述多媒体执行环境中的应用的NFC功能能够由所述NFC硬件处理。
在一个示例中，还在所述协议模块中设置NFC路由表，该路由表将应用ID与系统环境、应用名关联。
通过以上实施方式的描述，本领域中的普通技术人员能够理解，在不偏离本发明的精神和范围的情况下，还可以对本发明的具体实施方式作各种变更和替换。这些变更和替换都落在本发明权利要求书所限定的范围内。

Claims (10)

  1. 一种基于NFC的通信装置，其特征在于，包括：
    在所述通信装置的可信执行环境中设置的NFC模块，所述可信执行环境独立于该通信装置的多媒体执行环境，其中，
    该NFC模块包括通信模块和协议模块，
    该通信模块用于建立与另一NFC装置的连接，
    该协议模块用于解析所述通信装置与所述另一NFC装置的通信数据。
  2. 如权利要求1所述的通信装置，其特征在于，所述NFC模块用于执行安全相关的应用的NFC功能。
  3. 如权利要求2所述的通信装置，其特征在于，安全相关的应用是安装在可信执行环境下的应用或者安装在多媒体执行环境下的应用，以及
    当该安全相关的应用是安装在多媒体执行环境下的第一应用时，该NFC模块经由与该第一应用对应的在可信执行环境下的另一应用来实现该第一应用的NFC功能。
  4. 如权利要求2所述的通信装置，其特征在于，还包括，
    在所述多媒体执行环境中设置的虚拟NFC模块，该虚拟NFC模块用于模拟设置在所述可信执行环境中的NFC硬件，以便使得在所述多媒体执行环境中的应用的NFC功能能够由所述NFC硬件处理。
  5. 如权利要求1所述的通信装置，其特征在于，
    所述协议模块中还设置NFC路由表，该路由表将应用ID与系统环境、应用名关联。
  6. 一种基于NFC的通信方法，其特征在于，包括：
    在所述通信装置的可信执行环境中设置NFC模块，所述可信执行环境独立于该通信装置的多媒体执行环境，其中，
    在该NFC模块中设置通信模块和协议模块，
    利用该通信模块建立与另一NFC装置的连接，
    利用该协议模块解析所述通信装置与所述另一NFC装置的通信数据。
  7. 如权利要求1所述的通信方法，其特征在于，利用所述NFC模块执行安全相关的应用的NFC功能。
  8. 如权利要求2所述的通信方法，其特征在于，安全相关的应用是安装在可信执行环境下的应用或者安装在多媒体执行环境下的应用，以及
    当该安全相关的应用是安装在多媒体执行环境下的第一应用时，利用该NFC模块经由与该第一应用对应的在可信执行环境下的另一应用来实现该第一应用的NFC功能。
  9. 如权利要求2所述的通信方法，其特征在于，还包括，
    在所述多媒体执行环境中设置虚拟NFC模块，
    利用该虚拟NFC模块模拟设置在所述可信执行环境中的NFC硬件，以便使得在所述多媒体执行环境中的应用的NFC功能能够由所述NFC硬件处理。
  10. 如权利要求1所述的通信方法，其特征在于，
    还在所述协议模块中设置NFC路由表，该路由表将应用ID与系统环境、应用名关联。
PCT/CN2015/096706 2014-12-29 2015-12-08 一种基于nfc的通信装置和方法 Ceased WO2016107381A1 (zh)

Priority Applications (4)

Application Number Priority Date Filing Date Title
DK15875059.6T DK3242494T3 (da) 2014-12-29 2015-12-08 Nfc-baseret kommunikationsenhed og metode
US15/532,390 US20170366925A1 (en) 2014-12-29 2015-12-08 Nfc-based communication device and method
JP2017531257A JP6573672B2 (ja) 2014-12-29 2015-12-08 Ｎｆｃによる通信装置及び方法
EP15875059.6A EP3242494B1 (en) 2014-12-29 2015-12-08 Nfc-based communication device and method

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201410830958.3 2014-12-29
CN201410830958.3A CN105592403B (zh) 2014-12-29 2014-12-29 一种基于nfc的通信装置和方法

Publications (1)

Publication Number Publication Date
WO2016107381A1 true WO2016107381A1 (zh) 2016-07-07

Family

ID=55931552

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/096706 Ceased WO2016107381A1 (zh) 2014-12-29 2015-12-08 一种基于nfc的通信装置和方法

Country Status (6)

Country Link
US (1) US20170366925A1 (zh)
EP (1) EP3242494B1 (zh)
JP (1) JP6573672B2 (zh)
CN (1) CN105592403B (zh)
DK (1) DK3242494T3 (zh)
WO (1) WO2016107381A1 (zh)

Families Citing this family (9)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106547618B (zh) * 2016-10-19 2019-10-29 沈阳微可信科技有限公司 通信系统和电子设备
CN107240157B (zh) * 2017-05-12 2020-08-21 南京心视窗信息科技有限公司 近场通信安全控制方法、移动终端及计算机可读存储介质
KR102280272B1 (ko) * 2017-09-15 2021-07-21 삼성전자주식회사 릴레이 통신을 수행하는 방법 및 그 전자 장치
US11443323B2 (en) * 2018-03-07 2022-09-13 Samsung Electronics Co., Ltd. System and method for secure transactions with a trusted execution environment (TEE)
CN109151777B (zh) * 2018-06-11 2020-11-24 中国银联股份有限公司 一种非接通信方法以及通信装置
CN109495774A (zh) * 2018-12-04 2019-03-19 广州长嘉电子有限公司 一种4k智能电视外设配对方法及系统
CN114286345B (zh) * 2021-12-27 2024-04-02 无锡融卡科技有限公司 智能终端内的nfc通信装置及方法
CN115550913B (zh) * 2022-12-01 2023-02-24 北京紫光青藤微系统有限公司 用于控制nfc功能的方法及装置、电子设备、存储介质
CN115942290B (zh) * 2022-12-26 2026-01-13 深圳市新国都支付技术有限公司 Nfc通信方法、设备、系统及存储介质

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080155257A1 (en) * 2006-12-20 2008-06-26 Spansion Llc Near field communication, security and non-volatile memory integrated sub-system for embedded portable applications
CN103544599A (zh) * 2012-07-09 2014-01-29 马克西姆综合产品公司 用于在移动终端内认证、存储和交易的嵌入式安全元件
CN103745155A (zh) * 2014-01-03 2014-04-23 东信和平科技股份有限公司 一种可信Key及其安全操作方法

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE502005007568D1 (de) * 2005-05-12 2009-08-06 Swisscom Ag Verfahren und System zur gesicherten Übertragung von Daten über eine NFC-Schnittstelle
US11018724B2 (en) * 2006-09-24 2021-05-25 Rfcyber Corp. Method and apparatus for emulating multiple cards in mobile devices
WO2010011055A2 (en) * 2008-07-20 2010-01-28 Samsung Electronics Co., Ltd. Method and system for managing multiple applications in near field communication
US9092772B2 (en) * 2009-02-16 2015-07-28 Xius Corp. Integrated system and method for enabling mobile commerce transactions using “contactless identity modules in mobile handsets”
US8342415B2 (en) * 2010-03-17 2013-01-01 Inside Secure Method of conducting a transaction using an NFC device
DE102011115135A1 (de) * 2011-10-07 2013-04-11 Giesecke & Devrient Gmbh Mikroprozessorsystem mit gesicherter Laufzeitumgebung
CN102411742A (zh) * 2011-12-27 2012-04-11 大唐微电子技术有限公司 移动终端
CN103268249B (zh) * 2012-03-04 2016-11-16 深圳市可秉资产管理合伙企业（有限合伙） 在移动装置中模拟多张卡的方法和装置
US8712407B1 (en) * 2012-04-05 2014-04-29 Sprint Communications Company L.P. Multiple secure elements in mobile electronic device with near field communication capability
EP2775739B1 (en) * 2013-03-05 2018-06-13 Nxp B.V. Near-field communications and routing
US9621252B2 (en) * 2013-03-11 2017-04-11 Nagravision S.A. Method and apparatus for selecting an application of a device having an NFC interface
DE102013010262A1 (de) * 2013-06-18 2014-12-18 Giesecke & Devrient Gmbh Verfahren zur Nutzung eines weiteren Verbindungskanals zur Übertragung von Daten
CN104253840B (zh) * 2013-06-28 2017-12-12 中国银联股份有限公司 用于支持多种类型安全载体之间通信的装置及其通信方法
EP3116161B1 (en) * 2014-04-01 2018-03-14 Huawei Device (Dongguan) Co., Ltd. Security unit management method and terminal
US10929843B2 (en) * 2014-05-06 2021-02-23 Apple Inc. Storage of credential service provider data in a security domain of a secure element
US11620654B2 (en) * 2014-12-04 2023-04-04 Mastercard International Incorporated Methods and apparatus for conducting secure magnetic stripe card transactions with a proximity payment device

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20080155257A1 (en) * 2006-12-20 2008-06-26 Spansion Llc Near field communication, security and non-volatile memory integrated sub-system for embedded portable applications
CN103544599A (zh) * 2012-07-09 2014-01-29 马克西姆综合产品公司 用于在移动终端内认证、存储和交易的嵌入式安全元件
CN103745155A (zh) * 2014-01-03 2014-04-23 东信和平科技股份有限公司 一种可信Key及其安全操作方法

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See also references of EP3242494A4 *

Also Published As

Publication number Publication date
JP2018507575A (ja) 2018-03-15
DK3242494T3 (da) 2020-09-21
EP3242494B1 (en) 2020-07-15
JP6573672B2 (ja) 2019-09-11
EP3242494A1 (en) 2017-11-08
EP3242494A4 (en) 2018-07-18
US20170366925A1 (en) 2017-12-21
CN105592403A (zh) 2016-05-18
CN105592403B (zh) 2020-03-31

Similar Documents

Publication Publication Date Title
CN105592403B (zh) 一种基于nfc的通信装置和方法
CN104471600B (zh) 一种安全单元的管理方法及终端
US10223096B2 (en) Logging operating system updates of a secure element of an electronic device
US9351164B2 (en) Secure NFC routing
CN205407821U (zh) 近场通信设备
US20160299754A1 (en) Method for Updating Application Program, and Terminal
US10243619B2 (en) NFC “split stack” architecture
US10091652B2 (en) Relay device
CN105472546A (zh) 近场通信方法及移动终端
US10708744B2 (en) NFC-based communication method and apparatus
EP3007066A1 (en) Method for using shared device in apparatus capable of operating two operating systems
KR20190064792A (ko) 원격 결제를 처리하는 전자 장치 및 결제 방법
WO2012037791A1 (zh) 射频识别应用信息的显示方法、装置和系统
CN103544114A (zh) 基于单cpu卡的多m1卡控制系统及其控制方法
JP2016092818A (ja) モバイル装置、トランザクションを促進する方法、コンピュータプログラム及び製品
TWI657389B (zh) 行動終端及其交易確認方法、裝置
HK1224879B (zh) 一种基於nfc的通信装置和方法
HK1224879A1 (zh) 一種基於nfc的通信裝置和方法
HK1224879A (zh) 一种基於nfc的通信装置和方法
CN205847259U (zh) 一种蓝牙设备和蓝牙系统
US20160050232A1 (en) Security information interaction system, device and method based on active command of secure carrier

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15875059

Country of ref document: EP

Kind code of ref document: A1

WWE Wipo information: entry into national phase

Ref document number: 15532390

Country of ref document: US

ENP Entry into the national phase

Ref document number: 2017531257

Country of ref document: JP

Kind code of ref document: A

REEP Request for entry into the european phase

Ref document number: 2015875059

Country of ref document: EP

NENP Non-entry into the national phase

Ref country code: DE