Internet bank U disc KEY ciphering, authentication device and method

Abstract

The utility model discloses an encryption and authentication method for U disk KEYS used at the internet banking, which comprising following steps: 1) a digital certificate is generated according to the information of the users; 2) the generated digital certificate in the first step and a public key, together with a private key, and a management software are stored in the U disk KEY allocated to the users; 3) when used, data processing at the internet banking is done after the users are identified with the U disk KEY. The utility model also discloses an encryption and authentication apparatus for the U disk KEY at the internet banking, mainly comprising a U disk KEY, a mainframe, a networked computer and an application server. Through the utility model, the ordinary USB KEY and the U disk memory chip are organically integrated as a whole which has a memory function of the U disk; the necessary management software for the use of the USB KEY and other programs are stored and used as a whole, and the process of the software installation is rapid and simple just by maintaining the necessary selection procedures in the installation process of the users, moreover, coding rules for passwords are not constrained and the ways for certificates management are more reasonable and easy to be operated.

Description

technical field [0001] The invention relates to a device and method for encrypting and authenticating network data, more precisely a method for encrypting and authenticating online bank data by using a U disk KEY. Background technique [0002] At present, USB KEY, as the digital certificate storage medium for operator identity authentication, has gradually replaced the existing "IC card + card reader" as the storage medium, and USB KEY is widely used in the user identity of online banking in the banking system Identity verification in areas such as identification, online tax declaration for corporate financial personnel, and online electronic tax payment for companies. [0003] Existing USB KEY products generally only contain 16K, 32K or at most 64K smart card storage chips, which are specially used to store the public key and private key of digital certificates, such as "A Device for Encrypting and Authenticating Internet Banking Data" with the publication number CN1556449A...

AI Technical Summary

Problems solved by technology

[0003] Existing USB KEY products generally only contain 16K, 32K or at most 64K smart card storage chips, which are specially used to store the public key and private key of digital certificates, such as "A Device for Encrypting and Authenticating Internet Banking Data" with the publication number CN1556449A and method", and "Internet Bank Using USBkey Encryption and Authentication Device" disclosed in Chinese patent CN200420000949.3, these encryption and authentication devices and methods must be installed with the USB KEY on the installation CD before using the dedicated USB KEY. The environment software and the certificate management software provided by the certificate authority, the operation and shutdown of the certificate management software need to be manually operated, which is relatively cumbersome, and the certificate management software can only recognize the correct digital certificate password, and the user is not allowed to change the coding rules and mandatory passwords of the password at will. Complexity, such as: the digital certificate provided by a digital certificate certification center needs to set a password with at least 8 characters of uppercase and lowercase letters and numbers, which will inevitably increase the difficulty of memory for users. Although this encoding rule increases security, it cannot be universal Be applicable

[0004] In addition, the digital certificate certification center has great limitations on the security level of the digital certificate password. For the password lock of the digital certificate in the USB KEY, the password reset and the identity of the operator authority of the digital certificate damage, digital certificate replacement, etc. Identification is very inconvenient, and certificate management software generally uses a single software to clear the digital certificate storage area in the user's USB KEY, and it is difficult for this software to guarantee its security and prevent it from being spread

Images