Method and system for collecting TK (transmission key)

Abstract

The invention discloses a method and a system for collecting a TK (transmission key). The method for collecting the TK comprises the following steps of S1, enabling an operation terminal to read an operation certificate stored in an operator card, and verifying the legality of the operation certificate; S2, when the operation certificate is legal during verification, enabling the operation terminal to obtain the TK sent by a POS (point of sale) terminal; S3, enabling the operation terminal to use a private key of the operation certificate in the operator card to carry out the signature operation on the TK, and sending the signed TK data to an MTMS (material tracking management system); S4, enabling the MTMS to verify the legality of the operation certificate and the signature data; if the operation certificate and the signature data are legal, storing the signed TK data into a database. The method and the system have the advantage that when the problem of the TK data corresponding to a main private key remotely downloaded by the corresponding POS terminal occurs, a specific operator can be found by the signature certificate of the TK data.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a method and system for collecting a transmission key TK. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PIN PAD) and hardware encryption machine (Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, It is a centralized management and transaction processing system that processes or forwards transaction requests from POS terminals and returns transaction result inform...

AI Technical Summary

Problems solved by technology

[0006] The above two solutions have the following disadvantages: the plain text of the terminal master key appears outside the security device. In order to prevent the risk of key leakage, the download of the terminal master key must be controlled in the security room of the management center. key

As a result, "the workload of the maintenance center computer room is heavy; after the equipment leaves the factory, it needs to be transported to the security computer room of the management center to download the key before it can be deployed to the merchant, and the transportation cost increases; in order to centrally download the key, a lot of manpower and working time are required, and maintenance costs Large, long maintenance cycle" and other issues

Images