Multi-channel safety authenticating system and authenticating method based on U-Key

Abstract

The invention relates to a multi-channel safety authenticating system and an authenticating method based on a U-Key, aiming at ensuring safety of a network transaction; the authenticating system comprises the U-Key; a global system for mobile communications (GSM) module is added on the U-Key; one side of the GSM module is connected with a U-Key main control chip and the other is connected with a user mobile telephone and a bank network server through a wireless network; the U-Key comprises a display screen which is used for echoing a transaction account and amount transaction information, as well as a button for finishing an operation of confirming or canceling; data is transmitted to the user mobile telephone and the bank network server by the GSM module as authenticating a signature of the U-Key; with multi-channel transmission and multi-side authentication, risks that a user identity is falsely used and transmission data is interpolated are prevented; user transaction data is output by a USB (Universal Serial Bus) interface after authenticating a signature of the U-Key, and is then transmitted to a bank server by a user computer through a network and cached in the bank server; by checking and verifying the user identity and the transaction information through multiple channels, therefore, validity of the user identity and transmission security of the transaction data are effectively guaranteed.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a U-Key-based multi-channel security authentication system and authentication method for ensuring network transaction security. Background technique [0002] With the popularization of financial activities such as online banking and online transactions, using the Internet for transactions has the characteristics of fast and convenient payment, and has been widely welcomed by users. However, the network is open, and the application systems and data in the network are attacked by many hackers and viruses, and the user's transaction data is easily stolen and tampered with. [0003] The existing popular terminal device for protecting user transaction security is U-Key, U-Key, full name USB Key, which is a hardware storage device with USB interface. The appearance of the USB Key is similar to that of an ordinary U disk. The difference is that it stores a single-chip micr...

AI Technical Summary

Problems solved by technology

[0005] However, at present, online banking transaction data is transmitted through the only Internet network channel, and the authentication of transactions is limited to the corresponding relationship between the digital signature of the U-Key and the bank account. This authentication method has great security risks.

First, if the user forgets to unplug the U-Key after completing the transaction, hackers or computer viruses will simulate the user's behavior and transfer the account funds; Illegal operations, so that the legitimacy of the identity of the U-Key holder cannot be guaranteed; third, the transaction data is transmitted on the public network, and the signed data also has the risk of being cracked and tampered with. The tampered data, Bank authentication system is also difficult to identify

Therefore, the existing method of ensuring the security of network transactions through a single U-Key has relatively large security risks. It is necessary to provide a multi-channel security authentication method to ensure the authenticity of data, the legitimacy of user identities, and transaction data. in line with the wishes of the user

Images