IC (integrated circuit) card paying system and method as well as multi-application IC card and payment terminal

Abstract

The invention provides an IC (integrated circuit) card paying system and method as well as a multi-application IC card and a payment terminal. The invention has the following advantages: during offline transaction, the terminal and the IC card adopt an asymmetric key algorithm to authenticate offline data, and if the offline transaction is not approved, the terminal and the IC card carry out online transaction via a host, so the IC card paying system and method as well as the multi-application IC card and the payment terminal, which are disclosed by the invention, can be applied to machines and tools without online transaction environment and machines and tools, with online transaction environment, of standard merchants.

Description

technical field [0001] The present invention relates to a payment system and method, an IC card, and a payment terminal, and more particularly, relates to an IC card off-line payment system and method, a multi-application IC card, and an off-line payment terminal. Background technique [0002] At present, with the continuous increase and popularization of IC card applications, there have been many applications that use IC cards for small offline payments, such as electronic wallet systems. The general transaction process is as follows: the terminal sends an initialization command to the card to start the transaction; The card processes the initialization command, checks whether it supports the key index number contained in the initialization command and whether there is sufficient balance; then, generates a pseudo-random number and process key (SESPK), which is used to verify the first message authentication code (MAC1), and send it to the terminal as a response; the secure ...

AI Technical Summary

Problems solved by technology

However, the existing electronic wallet system uses a symmetric key system, which has the following disadvantages: 1. The key transmission process is complicated: due to the use of symmetric keys, the key itself is confidential and sensitive data, which must be transmitted during transmission. Designed with a safe and reliable mechanism to ensure its safe delivery

At the same time, the corresponding management mechanism is also very complicated; 2. There are defects in the security of the security authentication module: under the symmetric key system, in order to authenticate the legitimacy of the IC card, it must be deployed in the terminal (such as a SAM card), however, in reality In this case, the card issuer's management of the terminal users is loose, so it is difficult to ensure the security of the security authentication module (such as SAM card), so there is a security risk of an attacker's illegal attack on the security authentication module (such as SAM card) 3. Difficulty in renewing the key: because the key to the user's IC card authentication is stored in the security authentication module (such as the SAM card), if a new key needs to be enabled, the security authentication module (such as the SAM card) must be updated. However, the update of the key in the security authentication module (such as SAM card) is generally carried out by means of cipher text plus authentication, so the process is very complicated and difficult to implement

In addition, from the perspective of business functions, the e-wallet system only provides a small amount of offline payment solution, and cannot provide the function of large amount of online transactions

Images