Method and system for enhancing security of network transactions

Abstract

The invention discloses a method and a system for enhancing the security of network transactions, belonging to the field of information security. The method comprises the following steps: a client sends a service request to a first server, the first server sends first information to a second server, the second server generates second information, and the second information is returned to the client by the first server so as to be supplied to a user; a security device receives the first information and the second information input by the user and generates third information for the user; the client receives the third information input by the user, the first server sends the third information to the second server, when the second server receives the third information, the second server generates an authentication code by utilizing the same method that the security device generates the third information, the second server compares the authentication code with the third information for authentication and returns results to the first server, and the first server executes transactions when the authentication is success and returns the transaction result to the client. The system comprises the client, the security device, the first server and the second server. The invention greatly enhances the security in the transaction process.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and system for improving network transaction security. Background technique [0002] With the rapid development of computer technology, more and more users are accustomed to using the convenience and abundant resources of the network to complete various tasks. This saves time to a certain extent, improves work efficiency, and promotes the further development and improvement of the Internet. However, with the continuous development of high-tech means, while the Internet brings convenience and entertainment to people, there are also great potential safety hazards. Among them, the threat brought by criminals to computers connected to the Internet by taking advantage of the openness of the network and malicious attacks attracts the most attention. [0003] A dynamic password is also called a one-time password (One-time Password), which means that the user's password is ...

AI Technical Summary

Problems solved by technology

However, the smart key device cannot guarantee the security of data transmission outside the interactive channel, and cyber malicious actors can easily take advantage of this weakness of the smart key device to carry out illegal activities

It is mainly manifested in that the current computer is not an isolated computer, and almost all of them are connected to the Internet, making the personal computer a relatively open computer environment. Once the user's computer is implanted with a Trojan horse program, when the user uses the smart key on this computer When the device is installed, it is easy for network hackers to steal the operation commands and data sent by the user to the smart key device through the computer, tamper with the commands and data without the user's knowledge, and use the smart key device to perform various illegal operations at will. , the consequences of doing so are very likely to cause huge economic losses or mental losses to the legitimate users of the smart key device

For example, when an online bank user performs a remittance operation, if he connects the smart key device to a PC that has been implanted with a Trojan horse program, if the smart key device does not Disconnect from the PC in time, and hackers can easily use the Trojan horse program to steal the remittance information and remittance data sent by the user, and illegally tamper with it. When the above-mentioned user returns and continues to perform remittance operations, the remittance information is no longer The original data, once the user continues to use the smart key device to sign and send the tampered data, it is easy for network hackers to succeed in illegal transactions, and the result of doing so will bring incalculable losses to the above-mentioned users

Images