Smart Card
基于FS7802的Smart Card Reader设计与实现
Ｆ ＥＬ Ｎ Ｗ ＦＷ Ｐ Ｎ ＡＬＥ
ＣＬＥ
ＣＬＥ
其 读写 速度 分别 能够达 到３ ＭＢＳ ６ ／。 ８ ／和２ ＭＢＳ
接
２２ 主 控 芯 片 与 Ｓ ６ ５ 分 硬 件 设 计 ． Ｋ６ ２ 部
１ 相 关 芯 片介 绍
Ｆ ７ ０ 是 一 款 内 核 为 ８ 增 强 型 ５ 单 片 机 ．是 Ｆ ７ ０ ＭＣ Ｓ８２ 位 １ Ｓ ８５ Ｕ
Ｎ ＮＤ Ｆａｈ 由１２ 个块 组成 ， Ａ １ｓ ， ０ ４ 每块 ６ 页 ， ４ 每页２ ＋ ４ ｋ ６ 字节 ， 中 其 的２ 字节 是数 据存 储 区 ， ｋ 附加 的６ 字节 是扩 展 存储 区 ， 于保 ４ 用 存 一些 页面信 息及 Ｅ Ｃ Ｃ 校验 数据 等 。 Ｋ ６ ５ Ｓ ６ ２ 是专 门设计 来连 接 Ｎ Ｄ Ｆａｈ ，Ｋ ６ ５ 身能 够 同时接４ Ｆａｈ ＡＮ ｌｓ 的 Ｓ ６ ２ 本 块 ｌ ，本 设计 中只 ｓ
２ Ｓ ｒ ｒ ａ ｅ 硬 件 设 计 ｍａ ｔＣａ ｄ Ｒｅ ｄ ｒ
硬 件 方 面 通 过 Ｓ ６ ２ Ｎ ＮＤ Ｆａｈ 连 ． 主 控 芯 片 Ｋ ６ ５和 Ａ ｌｓ 相
Ｆ ７ ０ 通 过 Ｓ Ｄ Ｔ 线 与 Ｓ ６ ２ 以 实 现 相 互 之 间 的 通 信 。 外 Ｓ８２ Ｄ Ａ Ａ Ｋ６５ 另
种 类 的 Ｎ Ｎ ｌｓ ，包 括 Ｎ Ｄ Ｓ ＬＦａｈ Ｎ Ｎ Ｃ Ｆａｈ Ａ Ｄ Ｆａｈ ＡＮ Ｃ ｌｓ ， Ａ Ｄ ＭＬ ｌｓ 。
体 引脚 连接 如 图２ 示 。 所
ＳＫ６ ２５ ６ ＦＲＥ Ｎ ＲＥ Ｎ ＮＡＮＤ Ｆ ａ ｈ ｌ ｓ
Ｗ Ｅ Ｎ Ｗ Ｐ Ｎ Ａ ＬＥ
接 口将 Ｅ Ｐ Ｍ， ａｈ 的 代 码 自动 装 载 到 Ｆ ７ ０ 内 部 的 Ｃ ｄ Ｅ Ｒ０ Ｆ ｓ 中 １ Ｓ ８２ ｏｅ
activedirectory 验证方法
activedirectory 验证方法Active Directory 是由微软开发的一种目录服务，它提供了一种集中管理和组织网络中的用户、计算机和其他网络资源的方法。
在企业网络中，用户需要通过验证才能访问网络资源。
因此，Active Directory 验证方法是非常重要的。
本文将介绍几种常用的 Active Directory 验证方法。
1. 基本身份验证（Basic Authentication）基本身份验证是最简单的验证方法之一。
用户在登录时输入用户名和密码，并将其发送给 Active Directory 服务器进行验证。
如果用户名和密码正确，用户将获得访问权限；否则，将被拒绝访问。
2. NTLM 身份验证（NTLM Authentication）NTLM 身份验证是一种基于 Windows 操作系统的验证方法。
它使用单向散列函数来加密用户的密码，并将加密后的密码发送给服务器进行验证。
NTLM 身份验证支持单向和双向身份验证，在安全性和性能方面都有一定的优势。
3. Kerberos 身份验证（Kerberos Authentication）Kerberos 身份验证是一种网络身份验证协议，用于在非安全网络上进行安全身份验证。
它使用票据和票据授权服务器来验证用户的身份，并为用户生成访问票据，以便在网络上访问资源。
Kerberos 身份验证提供了更高的安全性和可扩展性。
4. Smart Card 身份验证（Smart Card Authentication）Smart Card 身份验证是一种基于智能卡的验证方法。
用户需要插入智能卡并输入密码才能进行身份验证。
智能卡中存储了用户的证书和私钥，用于加密和解密身份验证信息。
Smart Card 身份验证提供了更高的安全性，因为智能卡很难被伪造或盗用。
5. 多因素身份验证（Multi-Factor Authentication）多因素身份验证结合了多个验证方法，以提供更高的安全性。
银行卡的一些定义
10.什么是认同卡？
认同卡（AffinityCard）是由发卡银行和非盈利性的社会团体或机构联合发行的银行卡。认同卡的持卡人通过领卡和用卡对联名发卡的社会团体或机构所从事的活动表示认可和赞同，发卡银行通过持卡人的领卡和用卡以一定形式使联名的社会团体或机构得到经济上的支持，如中国建设银行发行的“南开龙卡” 等。
12.什么是智能卡？
芯片卡/智能卡（ChipCard/SmartCard）是当今信用卡领域的新产品。所谓“智能卡”，实际上就是在信用卡上安装一个拇指大小的微型电脑芯片，这个芯片包含了持卡人的各种信息。这种芯片与磁条相比，具有更高的防伪能力，一般不易伪造，因而更加安全。智能卡于20世纪70年代末在法国产生，其后各国都着手研制。目前，智能卡已经广泛的应用于我国银行、电信、交通等社会的各个方面，得到了快速的发展。
2.什么是信用卡？
信用卡（CreditCard）是银行或其它财务机构签发给那些资信状况良好的人士，用于在指定的商家购物和消费、或在指定银行机构存取现金的特制卡片，是一种特殊的信用凭证。
3.什么是贷记卡？
贷记卡是指发卡银行给予持卡人一定的信用额度，持卡人可在信用额度内先消费，后还款的信用卡。
注：专门用途是指在百货、餐饮、饭店及娱乐行业以外的用途。
8.什么是储值卡？
储值卡是发卡银行根据持卡人要求将其资金转至卡内储存，交易时直接从卡内扣款的预付钱包式借记卡。
9.什么是联名卡？
联名卡（Co-BrandedCard）是商业银行与盈利性机构合作发行的银行卡附属产品。目前最常见的是联名借记卡，即在借记卡的基础上开发的具有联名性质的银行卡。联名卡的运作形式是由发卡银行与诸如航空公司、电讯公司、商场等盈利机构联手发行一张卡片，凡持有该卡片的消费者在这些机构消费可以享受商家提供的一定比例的优惠。如中信实业银行发行的中信STAR高尔夫联名信用卡等。
关键的Smart Card服务
您或许已经完成了
.确认——驱动程序安装
.确认——读卡器识别
.确认——服务器证书安装
.确认——[smart card]服务存在且正常启动
但登陆系统时仍然“初始化端口1失败”
我们将建议您升级安装[smart card]服务
并对[smart card]服务进行配置
接着输入此命令 regsvr32 scardssp.dll
确认后，系统提示
"DllRegisterServer in scardssp.dll succeeded"
*注意*
您或许会发现"smart card holder"服务 或“智能卡助手”服
务在本文中它与"smart card"服务无关
这意味着：您的EP-600 \EP-801型智能卡读卡器无法正常工作
您或许已经顺利的安装了读卡器的驱动程序、
并且该设备连接/识别正常
在尝试登陆电子口岸系统时：系统仍然提示您
“初始化端口1失败”
您需要参考下文
转贴请注明出自 电子口岸数据中心
请提供错误银幕截图
发送电子邮件到 rexian@
<>如果没有找到该服务
<>试图打开、启用该服务时遇到异常情况
则您需要升级/安装smart card 服务
2. 如何升级或重新安装[smart card]服务
方法：
点击银幕左下角[开始]--[运行]
首先输入此命令 scardsvr reinstall
确认后，等待黑色窗体消失
第一步. 检查自己的Smart card服务是否存在
小区智能一卡通管理系统
智能一卡通管理中心Smart card management center管理中心产品特点1. 智能一卡通：管理使用脱机运行2. 开放式积木式扩展式3。
提供API OR SDK4. 智能一卡通：管理使用一卡一库一平台5. 模块化简单化智能化傻瓜化产品说明写卡器软件SOFTKEY多串口卡通讯转换器调试卡Features of the Management Center1 smart card：the management and use of offline operation2 Open building block extension type3 Provide API OR SDK4 Smart card: the management and use of a card，a library and a platform5 modular simplified intelligent foolProduct DescriptionSmart card deviceSoftwareSOFTKEYMultiport serial cardsCommunication converterDebug card什么是智能一卡通系统？What is a smart card system？“智能一卡通”是以IC卡技术为核心,以计算机和通信技术为手段，将智能建筑内部的各项设施连接成为一个有机的整体，用户通过一张IC卡便可完成通常的钥匙、资金结算、考勤和某些控制操作，如用lC卡开启房门、IC卡就餐、购物、娱乐、会议、停车、巡更、办公、收费服务等各项活动.而不必像以往携带多把沉重的钥匙开门，去各个对应部门交费等繁杂的操作。
整个系统可根据需要对各部门进行监控管理和决策, 各局部系统和终端可自动将收集到的信息整理归纳，供系统查询、汇总、统计、管理和决策。
通过IC卡可互相沟通，既满足各个职能管理的独立性，又保证整体管理的一致性。
计算机专业外文翻译--校园智能卡
外文原文SMART CARD for SMART CAMPUSKFUPM Case StudyTala1 Halawani and Mohamed MohandesKing Fahd University of Petroleum and Mineralsmohandes@. SaAbstractSmart card is the latest addition in the world of information technology. The vision of the smart card program is to provide access to services that is secure, fast,friendly, easy to use, flexible, personal, and is accessible by the users kom anyplace at any time. A smart card is of the size of a conventional credit card with an embedded computer chip that stores and transacts data between users and devices. This data is associated with either value or information or both and is stored and processed within the chip of the card. The card data is transacted via a card reader attached to a computing system as a peripheral device. Smart cards are extensively used through several key applications like education, healthcare, banking, entertainment, and transportation.1. IntroductionSmart card is a mini-computer capable of storing and processing data. Although, at -present, they are most popular as single-function cash cards and long-distance calling cards, their capabilities range from retaining tickets, money, frequent flyer miles, travel preferences, insurance information, key demographic data, links to a patient’s medical records, to allowing access into a building, logging onto a network, etc. The potential of the smart card is limitless. With the added bonus of these functions being performed on a single card, smart cards have the ability to become indispensable tools.Smart cards were first introduced in Europe a couple of decades ago as a stored value tool for pay phones to reduce theft [I]. As smart cards and other chip-based cards advanced, people found new ways to use them, such as charging cards for creditpurchases and for record keeping in place of paper. Smart cards provide tamper-proof storage of user and account identity. They provide protection against a full range of security threats, kom careless storage of user passwords to sophisticated system hacks. Smart card can be multi-functional through the use of several applications stored on the card. This paper starts with the history of smart cards and describes the different types of smart cards with characteristics of each type. Finally, the paper will detail KFUPM smart card system as an important case study in the field.2. The History of Smart CardsThe first plastic payment card for general use was issued by the Dinners Club in 1950. At first the card’s functions were quite simp le [2]. They initially served as data carriers that were secure against forgery and tampering. General information, such as the card issuer’s name, was printed on the surface while personal data elements, such as the cardholder’s name and the card number were embossed. Further more, many cards bad a signature field. Protection against forgery was provided by visual features. Therefore, the system’s security depended completely on the retail staff accepting the cards. However, this was not an overwhelming p roblem due to the card‘s initial exclusivity. There was a pressing need for machine-readable cards to reduce handling cost in addition to the fact that card issuer’s losses due grew from year to year due to fraud [2].The first improvement consisted of a magnetic strip on the back of the card. This allowed digital data to be stored on the card in a machine-readable form as a supplement to the visual data. Additionally, security is enhanced by the use of a secret personal identification number (PIN) that is compared to a reference number stored in the magnetic strip [3].Although the embossed card with a magnetic strip is still the most commonly used type of payment card, they suffer from a severe weakness in that data stored on the strip can be read, deleted and rewritten by anyone with access to the appropriate equipment. PIN must be stored in the host system in a secure environment, instead of on the magnetic strip. Most systems that employ magnetic strip cards have on-line connectionsto the system’s host computer for security reasons. However, this generates considerable data transmission costs.The development of the smart card, combined with the expansion of electronic data processing has created completely new possibilities for solving this problem. Progress in microelectronics in the 1970’s made it possible to integrate data storage and arithmetic logic on a single silicon chip measuring a few square millimeters [2]. The ideas of incorporating such an integrated circuit into an ID card was contained in a patent application filed in Japan by Kunitaka Arimura in Japan concerning “a plastic card incorporating one or more integrated circuit chips for the generationof distinguishing signals” in1970 [3]. However, the first real progress in the development of smart cards came when Ronal Moreno registered his smart card patent on “an independent electronic object with memory” in France in 1974.A breakthrough was achieved in 1984, when the French telecommunication authorities decided to use prepaid chip cards for public pay phones due to the increasing vandalism and theft. Chip cards were demonstrated to be a cost effective solution. The French example was followed by many other countries. Today, more than 100 countries use chip cards for their public phone systems. By 1990 the total number of smart cards reached 60 million cards [4]. Today, several billion smart cards are in use worldwide.3. Types of Smart CardsSmart cards are composed of a chip, an interface between the chip and the card reader, and a plastic body. Smart cards are classified according to the chip type; memory chip cards as well as microprocessor chip cards. They can also be classified according to the method of communication with the reader. Cards may communicate with readers either through direct physical contacts (contact cards) or through a radio kequency signals (contactless cards).3.1 Memory Chip CurdsMemory cards have no sophisticated processing power and cannot manage filesdynamically. They are used for data storage and applications. Data can consist of the identification number, serial number of the card, installed applications and the information required to a specific application in case of mudti-appliciation cards. The main use for memory smart cards is to store card’s operating sy stem, nm-time e:nvironment, issuer security domain, card issuer application, keys, and certificates for cryptography. Keys function as passwords to secure environments, and certificates verify the authenticity of keys. Memory smart cards are built wi.th erasable programmable read-only memory (EPROM) or electrically EPROM (EEPROM) chi,ps. EPROM is often used in prepaid service cards such as phone cards that count off minutes used and then are discarded. EEPROM, which can be changed up to 100,000 times, includes built-in logic that can be used to update a. counter in prepaid service cards.3.2 Microprocessor Chip CurdsThese cards have on card dynamic data processing capabilities. The chip contains a microprocessor or a microcontroller that manages memory allocations and file access. It manages data in organized file structures, via a card operating system (COS). Unlike other operating systems, this software controls access to the on card user memory. Thi,s capability permits different and multiple functions and/or different applications to reside on tkle card. The microprocessor chips used for cards are smaller, slower versions of the central processing units used in PCs. Their pro,gamming capability provides support to functionality of the card. Microprocessor smart cards are required for applications that manipulate or compare data, such as public key infrastructure (PKI), dataencryption, Java applets, and electronic purses. Every microprocessor smart card bas a COS on the chip to operate the internal functions of the application. The COS loads off the read-onlymemory (ROM), much like: a basic inputloutput system (BIOS) on a PC [Z].3.3 Contact Smart CmdsIn addition to the classification of smart card based on the chip type, smart cards can be classified based on communication type. Contact smart card requires a phyriical contact between card and the reader. They use an eight or six pin contacts on the top of the card to physically connect to the card reader. Their ch.ip could be memory or microprocessor type [5].3.4 Contactless Smart CurdsContactless smart cards use an antenna to communicate with the reader. They are powered from an RF field generated by the card reader. The RF field also transfers data between the card and the reader [4]. Employee identification badges for building access are typically contactless smart cards. Additionally, most cards used for transportation are contactless as well.3.5 Combination Smart CardsMultipurpose combination smart cards are a hybrid mix of the contact and contactless designs. They include contacts for communication with a contact type reader, and also include an antenna for communication with an RF type reader [5].4. KFUPM Smart Card SystemUniversities need simple identity cards for all employees and students who are granted access to certain data, equipment and departments according to their status. Multifunction, microprocessor based smart cards incorporate identity with access privileges and also stores value for use in various locations, such as cafeterias and stores. Numerous universities around the world are utilizing smart cards. KFUPM is one of the first universities in the area to adopt a comprehensive multifunctional smart card system. KFUPM card is a dual card that bas two chips; one for contact applications and the other is for contactless applications. The contact chip will be utilized to store cardholder photo in addition for future bank services while the contactless chip will be utilized for all other functions. The card systemwill provide the following functions:Photo IDLibrary borrowing privilegesElectronic purseRecreation center sewicesMedical center servicesE-LeamingAccess control to university facilities Logical access to PCs and the internet These functions are controlled from a control management center (CMC) as shown in Figure.1. The CMC will host a file database server that is connected to the university network, enabling the system to access the student information system (SIS) and personnel payroll databases (PPS). An additional database is created for the cardholder database and will be residing in the system's server. There are several components of the CMC.Figure.1 Card Management CenterThe function of the card issuing System (CIS) is to capture the digital photograph and the biometrics template of the cardholder [6-71. As can be seen in Figure.2, the CIS consists of a card printer, biometrics scanner, digital camera, and a workstation. The CIS workstation is connected to the network to access the databases for the required information and data. However, records under processing could be stored for a sbort period in the CIS local database before it is passed onto the cardholder database to reduce the load on KFUPM network.Figure.2 Card Issuance CenterCard personalization system (CPS) performs the chip personalization in addition to defining the door access level for the cardbolder. CPS works on a cliendserver configuration, where the application used for the personalization process resides on the server. Therefore, each defined CPS workstation uses the KFUPM network to access and invoke the CPS application in the server. The CPS application can access the SIS and PPS through the KFUPM network. CPS consists of biometrics scanner, contact card reader and contactless reader as seen in Figure.3.Figure.3 Card Personalization SystemDue to the presence of contact and contactless chips, personalization has to be performed twice. Once the personalization process is complete, the system performs a biometrics verification process to insure that biometrics templates match the actual physical cardholder.Access control system (ACS) is responsible for controlling all defined accesscontrolled areas. It is also used to define the various group levels, which allow proper control of the movement of students and personnel in the university. This system provides access control to the university gates, buildings,Laboratories, library, recreation centers and car parks, as shown in Figure.4. ACS tracks and records movement of staff and students in controlled regions.Figure.4 Access control systemPayment management system (PMS) is responsible for collecting the various E-purse and university account transactions performed at the point of sale (POS) terminals. These POS terminals would be available at restaurants, library, recreation center, medical center, and coffee shops. The POS system accepts cash payments, make payments via university account, and make payments and provide refunds using the E-Purse system. Figure.5 shows the POS system.Figure5 Point of Sale SystemConclusionsThis paper introduced smart card technology. It presented the history and Ines of smart cards. Additionally, it highlighted the important points of KFUPM smart card system. Upon completion of the system, it is hoped that KFUPM smart card project will be an important case study for other universities in the are.% to follow.中文译文校园智能卡摘要智能卡的诞生是对世界信息技术的一种补充。
HID OMNIKEY Smart Card Reader 安装手册说明书
This guide describes the HID OMNIKEY Smart Card Reader installation. Reference your driver documentation (readme) for a list of supported windows versions.Three types of installation exist:• Unattended (preferred installation)• Automatic (internet connection required)• Manual UnattendedThe Unattended installation is the preferred method. Unattended installation files are found at /omnikey . Optionally, obtain these files from an installation CD (if available).1. T o download the latest HID OMNIKEY Unattended setupdrivers, go to: /omnikey , and select Download OMNIKEY drivers .2. Select your OMNIKEY product and operating system.3. From the list, select the Unattended Setup Installer andconfirm the license agreement.4. Double-click the executable file and follow the instructionsdisplayed in the setup window.Note: In addition, download API drivers. The SYNC-API is required for applications with memory or contactless (iCLASS ®) cards. The CT-API is often required for PIN Pad readers (electronic signature applications), as well as health care applications.In standard installations, installing these APIs is suggested.For driver installation local administration rights may be required.Do not plug in the OMNIKEY reader into your computer until setup is complete.5. Execute the Unattended Setup.EXE file and follow theInstall Wizard instructions.Note: For uninstalling the OMNIKEY drivers, restart the setup or (from the control panel) use Add/Remove Programs .6. After finishing the installation, plug in your reader to the port(USB, ExpressCard ®, or PCMCIA).7. Windows automatically detects and installs the newhardware connected to the port (USB, ExpressCard, or PCMCIA).Proceed to the OMNIKEY Workbench section for testing and installation.AutomaticEnsure your computer has an online connection to the Internet.1. Connect the reader to the computer port (USB,ExpressCard, or PCMCIA).2. Windows detects the new hardware connected to the port(USB, ExpressCard, or PCMCIA) and requests the drivers.3. After the Windows Hardware Wizard opens, Windowsrequests to connect to Windows Update to search for software, click Yes, this time only .4. The OMNIKEY reader automatically is recognized and theappropriate driver installed through Windows Update.The OMNIKEY reader is ready for use.Note: If your OMNIKEY reader is CCID compliant, use a native Windows CCID driver to operate the reader. However thenative driver does not allow you to utilize the readers advanced features and functions.Proceed to the OMNIKEY Workbench section for testing the installation.ManualFor manual driver installation, local administration rights may be required.Original OMNIKEY drivers must be locally available on your computer (for example, after internet download or from a CD).1. T o download the latest OMNIKEY drivers, go to:/omnikey , and select Download OMNIKEY drivers .2. Select your OMNIKEY product and operating system.3. From the list, select the driver for download and confirm thelicense agreement.Note: In addition, download API drivers. The SYNC-API is often required for applications with memory or contactless cards (HID iCLASS). While the CT-API is often required for PIN Pad reader use (electronic signature applications), as well as health care applications.In standard installations, installing these APIs is suggested.4. After downloading the self-extracting file, execute the file toextract the drivers to the local hard drive (default path c:\HID Global ).Note: Drivers have not yet been installed.5. Select the driver location, click Next .OMNIKEY ®Smart Card Readers(USB, ExpressCard and PCMCIA)Base Models: 1021, 3021, 3121, 4040, 4121, 4321, 5021, 5025, 5121,5125, 5127, 5321, 5325, 5326, 5421, 5427, 6121, 6221, 6321U ser G Uide3121-905-ENEN, Rev A.7December 2013© 2008 - 2013 HID Global Corporation/ASSA ABLOY AB. All rights reserved.15370 Barranca Parkway Irvine, CA 92618-2215USAPage 2December 2013© 2008 - 2013 HID Global Corporation/ASSA ABLOY AB. All rights reserved.OMNIKEY Smart Card Readers (USB, ExpressCard, and PCMCIA) User Guide, 3121-905-ENEN, A.76. Once the drivers are stored on the computer, connectthe OMNIKEY reader to the port (USB, ExpressCard, or PCMCIA) and start the installation process. When the Windows Hardware Wizard requests for the driver, select Install from a list or specific location .7. Check Include this location in search and specify thelocation where the drivers are stored (for example: C:\HID Global\5x21_V1.2.9.2). Click Next . When installation is complete, click Finished .Note: If using unsigned BETA drivers, choose the Don’t search, I will choose the driver to install radio button.After finishing the installation your OMNIKEY Smart Card Reader is ready for use.Installation CheckEnsure your device is recognized and listed in the Windows Device Manager dialog, for example OMNIKEY 5x21, in the Smart Card Reader section.Note: If you are using an OMNIKEY reader with a native CCID driver, the reader is listed as a CCID compliant device.1. Open Windows Explorer. Click Start > Programs >Accessories > Click Windows Explorer .2. Open the Device Manager. Right-click Computer >Properties > click Device Manager .3. Expand the Smart card readers and ensure the OMNIKEYreader is found.Proceed to the OMNIKEY Workbench section for testing the installation.Release NotesWhen installing with Unattended or Manual options, theReadme, and Driver Release Notes are installed by default at C:\Program Files\HID Global\HID OMNIKEY Workbench .OMNIKEY Workbench1. Download the latest OMNIKEY Workbench , by goingto: /omnikey . Select Driver Downloads .2. Select your OMNIKEY product and operating system.Choose to download the OMNIKEY Workbench and confirm the license agreement. When download is complete, click Run .Note: The OMNIKEY Workbench only works with OMNIKEY readers. Older drivers use a Diagnostic tool which is available from the control panel.Start the OMNIKEY Workbench from the program shortcut. Go to Start > Programs > HID Global > OMNIKEY Workbench .OMNIKEY Workbench provides various applications. On startup the Diagnosis application shows the General Settings view with different tabs for smart card reader service status. Alsoshown is the driver file and API DLL information.The Diagnosis application also lists all connected OMNIKEY smart card reader details (per the available contact andcontactless interface).For a functional test, insert a working smart card into the reader.As a result, an ATR string and other card details will display.。
智能卡概述
SmartCard
智能卡的外观
ISO 7811-4和ISO7811-5规定的磁条位置 （磁道1，2，3）
签名条 集成电路 芯片位置 ISO 7811-3规定的冲压 凸型字符位置
SmartCard
SmartCard
1.2 智能卡分类
根据卡与外界数据交换界面的不同分类
接触式IC卡(contact card)
SmartCard
个人身份认证：城市流动人口管理（IC卡暂住证）， IC卡身份证 社会保险：医疗保险，养老保险等 工商税务：税务自动申报，工商企业监管 金融：信用卡(Credit Card,for example VISA CARD,Master Card)，扣款卡(Cash Card) or (ED— Electronic Deskbook)，电子钱包(EP—Electronic Purse,for example Mondex Card)，POS、ATM 电子标签：车辆识别、防伪、仓储管理、生产管理、 集装箱管理、汽车钥匙等 网络安全：密码钥匙Ekey
SmartCard
CPU卡
输入/输出接口 I/O 触点 微处理器 CPU 协处理器 CAU
ROM 只读存储器
RAM 随机存储器 图 4.2 CPU 卡结构示意图
EEPROM 可编程存储器
SmartCard
CPU卡
CPU 卡硬件构成包括： CPU 、存储器（含 RAM 、 ROM 、 EEPROM等）、卡与读写终端通讯的I/O接口及加密运算 协处理器CAU，ROM中则存放有片内操作系统COS。
（1）公开的存储区：内含公用信息，如发行标志符、持卡 人帐号等。 （2）外部不可读的存储区：存储的内容是供内部决策用的， 如PIN值，密钥。输入正确PIN值后可修改但永不可读。 （3）保密存储区：内含账面余额、允许卡使用的服务类型 及限额等。输入正确的PIN值后，可读（读余额）可改写 （修改余额）。 （4）记录区：内含每次交易细节，称为“日志”，可供查 询
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
Smart Card中文名: IC卡外文名: Smart Card类型: 接触式、非接触式、双界面接口标准: ISO7816、ISO14443分类：接触式IC卡(ISO/IEC 7816)非接触式IC卡(ISO/IEC 14443、ISO10536)双界面卡（同时具备接触式与非接触式通讯接口)基本简介IC卡(Integrated Circuit Card，集成电路卡)，也称智能卡(Smart card)、智慧卡(Intelligent card)、微电路卡(Microcircuit card)或微芯片卡等。
它是将一个微电子芯片嵌入符合ISO 7816标准的卡基中，做成卡片形式。
IC卡与读写器之间的通讯方式可以是接触式，也可以是非接触式。
IC卡由于其固有的信息安全、便于携带、比较完善的标准化等优点，在身份认证、银行、电信、公共交通、车场管理等领域正得到越来越多的应用，例如二代身份证，银行的电子钱包，电信的手机SIM卡，公共交通的公交卡、地铁卡，用于收取停车费的停车卡等，都在人们日常生活中扮演重要角色。
IC卡是继磁卡之后出现的又一种信息载体。
一般常见的IC卡采用射频技术与支持IC卡的读卡器进行通讯。
IC卡与磁卡是有区别的，IC卡是通过卡里的集成电路存储信息，而磁卡是通过卡内的磁力记录信息。
IC卡的成本一般比磁卡高，但保密性更好。
非接触式IC卡又称射频卡，成功地解决了无源（卡中无电源）和免接触这一难题，是电子器件领域的一大突破。
主要用于公交、电信、银行、车场管理等领域。
主要的功能包括安全认证，电子钱包，数据储存等。
常用的门禁卡、二代身份证属于安全认证的应用，而银行卡、地铁卡等则是利用电子钱包功能。
产品原理IC卡工作的基本原理是：射频读写器向IC卡发一组固定频率的电磁波，卡片内有一个LC串联谐振电路，其频率与读写器发射的频率相同，这样在电磁波激励下，LC谐振电路产生共振，从而使电容内有了电荷；在这个电容的另一端，接有一个单向导通的电子泵，将电容内的电荷送到另一个电容内存储，当所积累的电荷达到2V时，此电容可作为电源为其它电路提供工作电压，将卡内数据发射出去或接受读写器的数据。
制作流程关键技术IC卡核心是集成电路芯片，是利用现代先进的微电子技术，将大规模集成电路芯片嵌在一块小小的塑料卡片之中。
其开发与制造技术比磁卡复杂得多。
IC卡主要技术包括硬件技术、软件技术及相关业务技术等。
硬件技术一般包含半导体技术、基板技术、封装技术、终端技术及其他零部件技术等；而软件技术一般包括应用软件技术、通信技术、安全技术及系统控制技术等。
●EEPROM技术●RFID技术●加密技术●接口标准产品分类按结构分存储器卡其内嵌芯片相当于普通串行EEPROM存储器，这类卡信息存储方便，使用简单，价格便宜，很多场合可替代磁卡，但由于其本身不具备信息保密功能，因此，只能用于保密性要求不高的应用场合。
逻辑加密卡加密存储器卡内嵌芯片在存储区外增加了控制逻辑，在访问存储区之前需要核对密码，只有密码正确，才能进行存取操作，这类信息保密性较好，使用与普通存储器卡相类似。
CPU卡CPU卡内嵌芯片相当于一个特殊类型的单片机，内部除了带有控制器、存储器、时序控制逻辑等外，还带有算法单元和操作系统。
由于CPU卡有存储容量大、处理能力强、信息存储安全等特性。
广泛用于信息安全性要求特别高的场合。
超级智能卡在卡上具有MPU和存储器并装有键盘、液晶显示器和电源，有的卡上还具有指纹识别装置等。
按界面分接触式IC卡该类卡是通过IC卡读写设备的触点与IC卡的触点接触后进行数据的读写。
国际标准ISO7816对此类卡的机械特性、电器特性等进行了严格的规定。
非接触式IC卡该类卡与IC卡设备无电路接触，而是通过非接触式的读写技术进行读写（例如光或无线技术）。
其内嵌芯片除了CPU、逻辑单元、存储单元外，增加了射频收发电路。
国际标准ISO10536系列阐述了对非接触式IC卡的规定。
该类卡一般用在使用频繁、信息量相对较少、可靠性要求较高的场合。
应用领域IC卡虽然进入中国较晚，但在政府的大力支持下，发展迅速。
1995年底，国家金卡办为统筹规划全国IC卡的应用，组织拟定了（金卡工程非银行卡应用总体规划）。
为保证IC卡的健康发展，在国务院金卡办的领导下，信息产业部、公安部、卫生部、国家工商管理局等各个部委纷纷制定了IC卡在本行业的发展规划。
银行业IC卡既可以由银行独自发行，又可以与各企事业单位合作发行联名卡。
这种联名卡形成银行IC卡的专用钱包账户。
例如，医疗保险专用钱包不得消费，不得提取现金，只能在指定医院等场所使用。
当前，联名卡主要有保险卡、财税卡、交通卡、校园卡等多种。
由于IC卡既方便又快捷，因此在发达国家已相当流行。
亚特兰大奥运会期间，大量采用IC卡电子钱包，以支付交通、通讯、税收等费用。
电信行业电信通用版IC卡IC电话卡收费系统IC卡收费系统包括电费、水费、煤气费、通信费、停车费等各种消费资源费用的收取停车管理专业车场管理系统，大部分都是采用IC卡管理车辆进出，作为车辆出入凭证。
医疗保险居医疗IC卡除了具有医疗费用的支付功能外，卡内还可以存储病人的病历。
病人看病可以到不同的医院，医生可根据卡内的病历信息快速进行诊断和治疗。
公共交通乘客持公交管理部门发行的预先付费IC卡乘车，上车时只需在汽车门口的收费机前晃一下，收费机自动完成收费。
这样，能有效地减少上下车时间，加快车辆周转速度，提高管理效益，杜绝贪污、假币现象。
还有交警管理系统、工商管理系统、IC卡电子门锁、IC卡税务管理系统、高速公路收费系统等多种IC卡应用系统。
产品优劣卡片优点IC卡的外形与磁卡相似，它与磁卡的区别在于数据存储的媒体不同。
磁卡是通过卡上磁条的磁场变化来存储信息的，而IC 卡是通过嵌入卡中的电擦式可编程只读存储器集成电路芯片（EEPROM）来存储数据信息的。
因此，与磁卡相比较，IC卡具有以下优点：1、存储容量大。
磁卡的存储容量大约在200个字符；IC卡的存储容量根据型号不同，小的几百个字符，大的上百万个字符。
2、安全保密性好，不容易被复制，IC卡上的信息能够随意读取、修改、擦除，但都需要密码。
3、CPU卡具有数据处理能力。
在与读卡器进行数据交换时，可对数据进行加密、解密，以确保交换数据的准确可靠；而磁卡则无此功能。
4、使用寿命长，可以重复充值。
5、IC卡具有防磁、防静电、防机械损坏和防化学破坏等能力，信息保存年限长，读写次数在数万次以上。
6、IC卡能广泛应用于金融、电信、交通、商贸、社保、税收、医疗、保险等方面，几乎涵盖所有的公共事业领域。
卡片缺点IC卡的缺点是制造成本高。
国际标准物理特性符合ISO7816：1987中规定的各类识别卡的物理特性和ISO7813中规定的金融交易卡的全部尺寸要求，此外还应符合国际标准ISO7816- 1：1987规定的附加特性、机械强度和静电测试方法。
触点尺寸与位置应符合国际标准ISO7816-2：1988中的规定。
电信号与传输协议IC卡与接口设备之间电源及信息交换应符合ISO/IEC7816- 3：1989的规定。
行业间交换用命令有相应的国际标准ISO/IEC7816-4：1994。
但该版本尚未正式通过。
应用标识符的编号系统和注册过程应符合国际标准ISO/IEC7816- 5：1994中的规定感应式智能卡的国际标准有：ISO\IEC10536-1：1992、ISO\IEC10536-2：1995、ISO\IECDIS10536-3：1995、ISO14443-2等。
安全措施作为电子货币的IC卡，其上记录有大量重要信息，安全性是很重要的，作为IC卡应用系统开发者必须为IC卡系统提供合理有效的安全措施，以保证IC卡及其应用系统的数据安全。
常用的安全技术有身份鉴别和IC卡合法性确认，指纹鉴别技术，数据加密通讯技术等。
这些技术采用可以保证IC卡的数据在存储和交易过程中的完整性，有效性和真实性，从而有效地防止对IC卡进行非法读写和修改。
总体上，IC卡的安全包括物理安全和逻辑安全两方面：物理安全物理安全包括：IC卡本身的物理特性上的安全性，通常指对一定程度的应力、化学、电气、静电作用的防范能力；对外来的物理攻击的抵抗能力，要求IC卡应能防止复制、窜改、伪造或截听等。
常采用的措施有：采用高技术和昂贵的制造工艺，使无法伪造；在制造和发行过程中，一切参数严格保密；制作时在存储器外面加若干保护层，防止分析其中内容，即很难破译；在卡内安装监控程序，以防止处理器或存储器数据总线和地址总线的截听。
逻辑安全常用的逻辑安全措施有：存储器分区保护，一般将IC卡中存储器的数据分成3个基本区：公开区、工作区和保密区；用户鉴别，用户鉴别又叫个人身份鉴别，一般有验证用户个人识别PIN，生物鉴别，手写签名。
用IC卡保存指纹特征数据、使用人员信息、私钥等关键信息、通过指纹识别认证持卡人真实身份，解决网络信息安全瓶颈最有效的手段，是对信息安全（软件）认证、密钥体系最有效的补充。
既是IC卡应用更高层次的系统创新，又是用户真实身份认证领域的一次。
智能卡读卡器验证卡的有效性，后指纹身份验证，通过双重验证，确保系统安全可靠。
银联颁布“独立IC卡技术规范”检测中心推独立IC卡测试近期，中国银联颁布了“中国银联独立IC卡技术规范”，提出了一种在移动支付设备中支持独立金融应用模块的方案。
检测中心现已针对该方案，向客户提供中国银联移动支付独立IC卡卡片和中国银联移动支付独立IC卡手机的测试。
两项测试的对象分别是IC卡卡片和持有独立IC卡槽的手机，测试内容分别如下：1、中国银联移动支付独立IC卡卡片测试主要包含：SWP/HCI协议测试、接触式电气特性及通讯协议测试、PBOC3.0借记贷记应用测试、QPBOC测试、UPCard应用测试、卡片物理特性、卡机兼容性测试和非接触通讯协议测试。
2、中国银联移动支付独立IC卡手机测试主要包含：SWP/HCI协议测试、非接触通讯协议测试、电气参数测试、卡机兼容性测试、交易性能测试、非接触通讯信号抗干扰与兼容性测试。
Reference:/view/4189.htm/view/369695.htm。