Method for safely downloading master key automatically in bank card payment system and system thereof

Abstract

The invention discloses a method for safely automatically downloading a terminal master key TMK in a bank card payment system and a system thereof. The bank card payment system comprises a point of sales (POS) terminal, a terminal management system (TMS), a password keyboard and a hardware security machine. The method comprises that: the TMS calls the security machine to generate a pair of public and private keys; the POS terminal calls the password keyboard to randomly generate the terminal master key TMK, and encrypts the TMK by using the public key of the TMS and uploads the encrypted TMK to the TMS; and the TMS calls the security machine and decrypts the TMK by using the private key and stores the decrypted TMK. The TMK is randomly generated, the transmission process is closed, a TMK plaintext cannot appear outside safe storage equipment and is encrypted by the public key in the transmission process, and a TMK ciphertext can only be decrypted in the security machine of the TMS, so that the method and the system have high safety.

Description

technical field [0001] The invention relates to a bank card payment system, in particular to a security protection method for a master key in the bank card payment system. Background technique [0002] Bank card (Bank Card) is becoming more and more popular as a payment tool. The usual bank card payment system includes point of sale terminal (Point Of Sale: POS), terminal management system (Terminal Management System: TMS), password keyboard (PIN PAD) and Hardware encryption machine (Hardware and SecurityModule: HSM). [0003] Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the exchange of financial transaction information and related information; the TMS system centrally manages the subordinate POS terminals, including parameter downloading, key downloading, A centralized management and transaction processing system that accepts, processes or forwards transaction requests from...

AI Technical Summary

Problems solved by technology

[0017] There are serious security holes in plaintext input, and it is easy to obtain, especially through manual operations

[0018] Although the import of IC ciphertext and parent POS has partially solved the security risks in the transmission process, there are still relatively large security risks in the storage and carrying of the transmission key IC card and parent POS

[0019] All the above TMK download methods require manual intervention to directly operate the POS terminal, that is, technical support personnel are required to go to the site where the POS terminal is deployed to complete the download task, and the labor cost is relatively high, especially when the number of POS terminals is relatively large and the fault terminal is serious in the case of

Images