Method and system for sending transmission key and operation terminal

Abstract

The invention discloses a method and system for sending a transmission key. The method comprises the steps that an operation terminal collects the TK from a POS terminal; the operation terminal is used for packaging the TK so as to generate packaging data Pack; the operation terminal uses a private key WCRT_prk corresponding to a work certificate WCRT for conducting signature on the Pack and signature time Time_sign and attaching the WCRT to the Pack and the signature time Time_sign; a Hash value Hash 1 is calculated according to the Pack and the Time_sign; after ciphertext C_sign is generated by encrypting the Hash 1 by using the WCRT_prk corresponding to the WCRT and is sent to a server, the validity of the WCRT is verified; after the validity is verified, a public key WCRT_pu is extracted so as to decode the ciphertext C_sign, and plaintext Hash 2 is obtained; the Pack and the Time_sign are calculated to generate a Hash value Hash 3; the Hash 2 is compared with the Hash 3, it is determined that data are not tampered with if the Hash 2 and the Hash 3 are consistent, and it is determined that data are tampered with if the Hash 2 and the Hash 3 are not consistent.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a transmission key sending method and system, and an operation terminal. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PIN PAD) and hardware encryption machine (Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, It is a centralized management and transaction processing system that processes or forwards transaction requests from POS terminals and returns transactio...

AI Technical Summary

Problems solved by technology

[0006] The above two solutions have the following disadvantages: the plain text of the terminal master key appears outside the security device. In order to prevent the risk of key leakage, the download of the terminal master key must be controlled in the security room of the management center. key

As a result, "the workload of the maintenance center computer room is heavy; after the equipment leaves the factory, it needs to be transported to the security computer room of the management center to download the key before it can be deployed to the merchant, and the transportation cost increases; in order to centrally download the key, a lot of manpower and working time are required, and maintenance costs Large, long maintenance cycle" and other issues

Images