Method and device for safely collecting and distributing transmission keys

Abstract

The invention relates to the field of electronic payment terminals and discloses a method and device for safely collecting and distributing transmission keys. The method includes the generation step and the distribution step. The generation step mainly includes the sub-steps that an operator card is authenticated, a complete machine serial number and a working certificate are loaded, and activation operation is performed on a POS terminal. The distribution step mainly includes the subs-steps that encryption equipment performs encryption and signature on SN-TK data packets in an MTMS system again, and then the SN-TK data packets are distributed to a KMS system. The method and device have the advantages that when each POS terminal is produced, a transmission key (TK) is generated at random, and it is guaranteed that TK data collected by each POS terminal have uniqueness; in the process of TK collection, strict permission verification is performed on an operator, so that safety is guaranteed; in the process of distribution, strict valid verification, and secondary switching encryption and signature are performed, so that accuracy of the collected TK data is guaranteed in the production process.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a method and device for securely collecting and distributing transmission keys. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PINPAD) and hardware encryption machine ( Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, Process or forward the transaction request of the POS terminal, and return the transaction result information to the POS terminal. It is a system f...

AI Technical Summary

Problems solved by technology

[0006] The above two solutions have the following disadvantages: the plain text of the terminal master key appears outside the security device. In order to prevent the risk of key leakage, the download of the terminal master key must be controlled in the security room of the management center. key

This has brought about a heavy workload in the maintenance center computer room. After the equipment leaves the factory, it needs to be transported to the management center security computer room to download the key before it can be deployed to the merchant, resulting in an increase in transportation costs. In order to centrally download the key, a large amount of manpower and working hours are required, resulting in cost and maintenance costs. Large size, long maintenance period, etc.

Images