Handset sim card paster based mobile authentication method of banking businesses

Abstract

The invention discloses a handset sim card paster based mobile authentication method of banking businesses. A paster which can store a user certificate and carry out digital signature is inserted into a handset sim card slot of a user; when the user initiates the fund change of a transaction account, a background transaction system sends transaction information to a mobile authentication gateway, and the mobile authentication gateway sends the transaction information to a handset of the user to request the digital signature; after a request is received by the paster and then displayed to the user, the user verifies the signature and then returns a signature result to the mobile authentication gateway and transmits the signature result to the background transaction system; and the background transaction system verifies the signature result and the content of the signature request and correspondingly operates the transaction account of the user after determining that the signature is effective. The mobile authentication method can request the digital signature of the user in time when user funds are changed, ensure the security of the user funds and provide the convenience when the user goes out and has non-repudiation property, thereby ensuring the transaction security of both parties.

Description

technical field [0001] The invention relates to a mobile authentication method for bank system identity authentication by using a mobile phone patch device, in particular to a mobile authentication method for banking services based on a mobile phone SIM card patch. Background technique [0002] At present, there are two main ways for banks to authenticate customers' identities, one is to verify the user's signature or seal when trading over the counter, and the other is to verify the user's password or digital certificate containing the user's digital certificate when trading in the electronic system. USBKey. These models mainly have the following problems: when the customer entrusts others to handle the business on an agency basis, the customer needs to hand over the seal, etc. to the agent, but it is impossible to restrict the agent in real time to use the seal to conduct transactions. In reality, this problem also generally plagues small and medium-sized business owners. ...

AI Technical Summary

Problems solved by technology

These models mainly have the following problems: when the customer entrusts others to handle the business on an agency basis, the customer needs to hand over the seal, etc. to the agent, but it is impossible to restrict the agent in real time to use the seal to conduct transactions. In reality, this problem also generally plagues small and medium-sized business owners. ;When the user goes out without carrying a computer, because the mobile phone does not have a USB port, the USBKEY cannot be used and most mobile phones cannot support the digital certificate in the form of a file issued by the bank, so transactions that require strong identity verification, such as large-value transfers, cannot be performed; the user's bank If the card is lost or copied, and the password is peeped by others, criminals can use this information to withdraw funds from the user account from the ATM, which can easily cause the loss of user funds

Mobile phone dynamic password technology can alleviate this problem to a certain extent, help users confirm the operation of their accounts, and provide convenience in mobility, but dynamic passwords do not have the function of non-repudiation, and the security level is relatively low

All of these restrict the development of banking business