Method and system for key protection

Abstract

The invention provides a method for key protection and a system for the key protection. The method for the key protection includes that a mobile terminal receives a registration instruction and generates a user public key and a user private key according to the registration instruction; when the mobile terminal is subjected to identification authentication by a mobile banking server and a bank comprehensive front server, the mobile banking server sends the user public key to a third-party e-commerce authentication server for certified signing so as to generate a user public key certificate and store the user public key certificate; the mobile banking server carries out an authentication process to encrypted user transaction information sent by the mobile terminal according to the user public key certificate, and when the authentication is passed, the bank comprehensive front server executes a transaction; and after the transaction is finished, the mobile terminal generates an updated private key protecting parameter and sends the updated private key protecting parameter to the mobile banking server, and then the mobile terminal receives an update success result from the mobile banking server and encrypts and stores the user private key according to the updated private key protecting parameter. The method for the key protection and the system for the key protection can increase attack difficulty and improve safety.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a key protection method and a key protection system. Background technique [0002] In recent years, with the rapid development of the Internet and financial informatization, online banking has been widely praised by users and the banking industry due to its convenience and high efficiency. Digital certificates are the identification of users and bank servers when conducting transactions through online banking. Can guarantee the security of online transactions. [0003] At present, the generation of the user's public key certificate is completed by the bank server, and then issued to the terminal used by the user after being authenticated by the third-party e-commerce authentication server. The problem is that when the bank server issues the user public key certificate to the terminal, the bank server may not know the specific terminal it is sending, so it may be int...

AI Technical Summary

Problems solved by technology

The problem is that when the bank server issues the user public key certificate to the terminal, the bank server may not know the specific terminal it is sending, so it may be intercepted, and the user public key certificate may be stolen during the process of issuing the user public key certificate. There are hidden security risks in the transaction process, and the security of the user's private key cannot be guaranteed during the transaction process, and there are security risks

Images