A smart card with password protection and data verification method

Abstract

The invention discloses a smart card having password protection and a data verification method. The method comprises the following steps that: 1) the smart card is connected with a client, and the client makes a signature request to the smart card; 2) the smart card accepts the request and reminds a user of inputting a password; 3) the smart card verifies the password, if the password passes the verification, the smart card performs digital signature on data transmitted by the client, and transmits a preparatory message subjected to digital signature to the client for confirmation, if the preparatory message passes the confirmation, a second confirmation is performed by the smart card, if the preparatory message passes the second confirmation, the smart card transmits the data subjected to digital signature to the client; and the smart card has a password input keyboard, and the password input in the step 2) is input through the password input keyboard. By the method, the security of the smart card is enhanced, the risk produced by smart card loss under the condition that a host is controlled is avoided, encryption strength is improved by utilizing the algorithm of mixed message digest, users can conveniently understand the status of the smart card by utilizing three indicator lamps of three different colors, and the expansion of an application level is facilitated by utilizing the standard of a Java smart card.

Description

technical field [0001] The invention relates to smart card technology, mainly a method for realizing a USB smart card with a password password key. Background technique [0002] Smart card technology is an important means to ensure online banking transactions. The smart card calculation process is carried out in the card, and the key does not enter the host system, which has high security. It adopts asymmetric encryption algorithm to sign the transaction data. The data is unforgeable and undeniable features. At present, many banks have launched USB smart cards (also known as U-shields) on the market. These numerous smart cards all use USB interfaces, and are controlled by installing a driver program that manages USB smart cards in the host computer. It is all done by inputting the password in the host interface, sending the password and password to the smart card for verification, after the verification is passed, the smart card will sign, and the signature data will be sen...

AI Technical Summary

Problems solved by technology

In this case, there are insecure factors in this design, which cannot resist the following attacks: when the computer is controlled by an illegal attacker (this phenomenon is very common in the current network environment), the user enters Password, the password is obtained by an illegal program. After the user completes the transaction, as long as the user's smart card is connected to the computer, the attack may use the obtained password to steal the smart card and realize the illegal transaction.

Another situation is that when the user accidentally loses the smart card, and the smart card password is obtained by hackers in a certain transaction, the user account security will also have a major risk

Images