Virtual special terminal, network service system and service access method

Abstract

The invention provides a virtual specialized terminal used in network service system of server containing terminal as client-side and for providing network service, comprising a VT virtual machine, a specialized operation system on the VT virtual machine; a specialized client-side software operated on the specialized operation system; and a hardware part containing safety chip and hardware part of specialized hardware, wherein the said safety chip stores a terminal identification for terminal authentication and the said specialized hardware stores authentication information for authenticating. The said VT virtual machine makes the specialized hardware virtual for the specialized operation system therefore the said specialized operation system can visit to the specialized hardware, so that the specialized client-side software is accessed to network service using terminal identification and authentication information in the specialized hardware.

Description

technical field [0001] The present invention relates to the field of network services, in particular, to a virtual dedicated terminal adopted in a network service system, a network service system, and a service access method. According to the present invention, virtualization technology is used to virtualize a terminal into a virtual dedicated terminal. Therefore, the server can reliably implement security authentication on the virtual private terminal to provide service access. Background technique [0002] Fig. 1 shows the structure of the current private network interactive service system (taking the banking system as an example). As shown in Figure 1, the private network interactive service system includes: a terminal (client) and a bank system server. The terminal is connected to the bank system server through a dedicated line, and the terminal and the bank system server use DES / 3DES algorithm for encrypted transmission. The terminal is installed with dedicated hardwa...

AI Technical Summary

Problems solved by technology

However, in order to solve the security problem of online banking, it is not feasible to simply transplant the above-mentioned private network interactive service system (for the bank's POS / ATM system)

The reason is that because the current online banking system uses an untrusted network, the terminal must be authenticated, and the current POS solution does not support such authentication

In addition, due to the use of an untrusted network, only using symmetric algorithms such as DES / 3DES does not meet the security requirements of network transmission.

In addition, since the terminal is an ordinary PC, the dedicated hardware loaded on the terminal is easily accessed / attacked by malware, and the dedicated client software of the terminal is also vulnerable to malware attacks (as shown in Figure 2)

Images