Internet bank security authentication method and system

Abstract

The invention discloses an internet bank security authentication method which comprises the steps of: providing a mobile terminal with a card reading function, wherein U-key assembly program is stored in the mobile terminal; providing an intelligent card stored with a digital certificate and a private key, wherein the digital certificate and the private key are used for identifying user identity, and the intelligent card is also used as a bank card for storing information of a user account; reading the intelligent card for storing the digital certificate and the private key by the mobile terminal, conducting identity authentication on a user between the intelligent card and an internet bank server side, wherein internet bank server side is used for storing a server certificate and a server private key; and after the identity authentication is passed, forming a safety data link between the internet bank server side and the intelligent card so as to conduct networked transaction. According to the invention, the safety information is stored in the intelligent card, safety and convenient transaction can be realized by the mobile terminal and user identity authentication between the intelligent card and the internet bank server side. The invention further discloses an internet bank security authentication system.

Description

Technical field [0001] The invention relates to a network bank safety authentication method and system using a smart card as a data carrier. Background technique [0002] With the development of e-commerce, online transactions have become more and more popular. In addition, as the price of smart phones has fallen, their sales have increased day by day. This has made the demand for online payments via mobile phones increasingly obvious, and major banks have also launched their own mobile banking. Currently, the common mobile phone-based mobile payment methods are: [0003] Method 1: Provide security authentication for remote payment through local file certificate. [0004] Method 2: Provide security authentication for remote payment through SMS code. [0005] Method 3: For some mobile phones that provide USB-OTG interface, a specific U-key is already available. Through this U-key to ensure the security of remote payment. [0006] Disadvantages of the above method: [0007] Disadvanta...

AI Technical Summary

Problems solved by technology

[0007] Disadvantages of Method 1 and Method 2: Since smartphones may be invaded by viruses and hackers, the file certificate or SMS code in Method 1 and Method 2 may be obtained by malicious software, thus endangering the security of network transactions

[0008] Disadvantage of method 3: the bank needs to issue U-key specially, and this U-key is usually only used for online transactions of one bank

This increases the operating cost of the bank, and also makes the user need to carry a variety of U-keys in addition to the bank card, which is very inconvenient to use

[0009] And at present, bank cards have begun to transition from magnetic stripe cards to smart cards (including contact and contactless), and the People's Bank of China requires that all bank cards issued by commercial banks should be financial IC cards from 2015. Smart cards have become the general trend. Banks issue U-Keys at the same time as issuing smart cards, which increases operating and maintenance costs.

Images