Encryption device, system and method for encryption, identification using the encryption device

Abstract

The invention provides a USBKey encryption device, a system and a method using the USBKey encryption device for encryption and identification; wherein, the USBKey device comprises: a USB interface used for connection between an USB socket and a computer, an indicator used for indicting work status of the USBKey device and a built-in chip storing unique serial number of the USBKey device when leaving the factory and storing digital certificate and private key used for identifying identification of clients; the private key cannot be imported from the USBKey device. The invention is characterized in that: the USBKey device also comprises a visual screen used for displaying information under signing when digital signature is made for the USBKey device; the USBKey device also comprises one or a plurality of buttons for operations such as confirming or cancelling the information under signing; the visual screen can also be a touch panel.

Description

technical field [0001] The present invention relates to an information encryption device, a system and a method for encrypting and authenticating using the encryption device, in particular to a USBKey device, and a system and method for using the USBKey device to encrypt and authenticate online bank data. Background technique [0002] At present, online banks use ordinary USBKey devices to authenticate customers. The use of ordinary USBKey devices is described in detail in the patent No. 200410028723.9 of the same applicant. With the development of computer technology, the client environment varies greatly. When the client computer is attacked by malicious programs, the following two problems still exist in ordinary USBKey devices: [0003] 1. The problem of "remote control": "remote control" means that the ordinary USBKey device has been plugged into the client computer, and criminals use the method of remote control of the client computer to call the client's ordinary USBK...

AI Technical Summary

Problems solved by technology

[0003] 1. The problem of "remote control": "remote control" means that the ordinary USBKey device has been plugged into the client computer, and criminals use the method of remote control of the client computer to call the client's ordinary USBKey device to perform online operations without the client's knowledge. Banking transactions, causing loss of funds to customers

[0004] 2. The problem of "transaction hijacking and transaction tampering": "transaction hijacking and transaction tampering" means that criminals use malicious programs to steal customers' transactions when they use ordinary USBKey devices to conduct online banking transactions without the knowledge of customers. After the information is hijacked and tampered with, the tampered transaction information is digitally signed with an ordinary USBKey device and submitted to the bank's transaction system. Since the customer does not know that his transaction information has been tampered with, the bank's transaction system can only submit it to the client. The communication between the server and the server is guaranteed to be confidential and not tampered with. It is impossible to judge whether the information submitted by the client has been tampered with. Therefore, criminals can use this method to cause financial losses to customers.

Images