Bidirectional authentication method and system for server and operating terminal

Abstract

The invention discloses a bidirectional authentication method and system for a server and an operating terminal. The bidirectional authentication method comprises the following steps that: the server sends a server public key to a CA (Certificate Authority) center, and the CA center signs the server public key by using a corresponding private key of a root certificate AuthRCRT to generate a server work certificate ServerWCRT; the CA center sends the work certificate ServerWCRT and the root certificate AuthRCRT to the server to store in a database; the operating terminal sends the public key to the CA center, the CA center signs the public key of the operating terminal by using the corresponding private key of the root certificate AuthRCRT to generate a work certificate OptmWCRT, and sends the OptmWCRT and the AuthRCRT to the operating terminal to store in an encryption module; bidirectional authentication is performed by using the generated certificates and the preset root certificate in a remote master private key download scheme, so that the system security is improved.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a method and system for two-way authentication between a server and an operating terminal. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PIN PAD) and hardware encryption machine (Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, It is a centralized management and transaction processing system that processes or forwards transaction requests from POS terminals and ...

AI Technical Summary

Problems solved by technology

[0006] The above two solutions have the following disadvantages: the plain text of the terminal master key appears outside the security device. In order to prevent the risk of key leakage, the download of the terminal master key must be controlled in the security room of the management center. key

As a result, "the workload of the maintenance center computer room is heavy; after the equipment leaves the factory, it needs to be transported to the security computer room of the management center to download the key before it can be deployed to the merchant, and the transportation cost increases; in order to centrally download the key, a lot of manpower and working time are required, and maintenance costs Large, long maintenance cycle" and other issues

Images