System and method for implementing security protection of PIN code

Abstract

The invention discloses a system and a method used for protecting a PIN code. When the PIN code of the user requires verification, USB KEY hardware equipment generates random numbers and submits the numbers to completely-self-protected equipment, and then the completely-self-protected equipment sends the numbers into security equipment. The security equipment pops up a PIN code input prompt box into which the user inputs the PIN code by a keyboard. The security equipment guarantees the safety of data transmission between the user keyboard and the security equipment. After inputting the PIN code, the user clicks OK. The security equipment abstracts and processes the random numbers and the PIN code input by the user, and returns the outcome data after abstracting and processing to the completely-self-protected equipment. The completely-self-protected equipment sends the outcome data after abstracting and processing to the USB KEY hardware equipment for verification. The invention solves the potential safety hazards caused by a plaintext method adopted in the PIN code verification process of the existing USB KEY software equipment, thus realizing effective protection of the PIN code, and improving the safety of USB KEY further.

Description

technical field [0001] The invention relates to the technical field of network security authentication processing, in particular to a system and method for realizing security protection of a PIN code. Background technique [0002] With the rapid development of my country's online banking, various attack techniques and methods aimed at stealing funds emerge in an endless stream, and the attack methods are refurbished, which poses a serious threat to the security of online transactions. [0003] At present, the online banking of my country's commercial banks mostly uses digital certificates in terms of security authentication. The carriers of digital certificates currently include USB KEY, chip cards, etc. Device and method) patent application discloses a device and method for online banking security authentication using USB KEY digital certificates, such as figure 1 shown. This authentication method puts the customer's key in the chip encryption device of the USB KEY, and en...

AI Technical Summary

Problems solved by technology

[0013] In view of this, the main purpose of the present invention is to provide a system and method for implementing security protection of the PIN code, to overcome the defect of using plain text in the PIN code authentication process of the current USB KEY, and to solve the problem of PIN code input on the keyboard, customer Eliminate potential safety hazards in terminal memory storage and interface access, realize effective protection of PIN codes, and further improve USB KEY security

Images