Method and system enabling safe operation of POS terminal to be achieved

Abstract

The invention relates to the field of electronic payment terminals and discloses a method enabling safe operation of a POS terminal to be achieved. The method includes the steps that the POS terminal generates random numbers and transmits the random numbers to an operating terminal; the operating terminal reads an operator card to generate a ciphertext and sends information of the operator card and the ciphertext to the POS terminal; the POS terminal verifies the received information and the content of the ciphertext. The invention further discloses a system enabling safe operation of the POS terminal to be achieved. The method and system have the advantages that triple verification is carried out in the verifying process, firstly, the validity of an operator certificate is verified, secondly, it is verified that whether the random numbers sent to the operating end and sent back after encryption are consistent to the random numbers originally generated by the POS terminal, and finally, it is verified that whether consumed time in the verifying process is within preset time or not; through the steps, it can be ensured that an operator of the operating terminal has a permission, and the safety of generating a TK by controlling the POS terminal through the operating terminal can be guaranteed.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a method and system for realizing safe operation of POS terminals. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PIN PAD) and hardware encryption machine (Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, It is a centralized management and transaction processing system that processes or forwards transaction requests from POS terminals and returns transaction resu...

AI Technical Summary

Problems solved by technology

[0006] The above two solutions have the following disadvantages: the plain text of the terminal master key appears outside the security device. In order to prevent the risk of key leakage, the download of the terminal master key must be controlled in the security room of the management center. Keys, resulting in "the workload of the maintenance center computer room is heavy; after the equipment leaves the factory, it must be transported to the management center security computer room to download the key before it can be deployed to the merchant, and the transportation cost increases; in order to centrally download the key, a lot of manpower and working time are required. , high maintenance cost, long maintenance cycle” and other issues

Images