Security downloading method and system of TMK

Abstract

The invention discloses a security downloading method of a TMK. The security downloading method comprises the steps that a POS terminal produces an asymmetric TK by calling a PIN pad, the asymmetric TK comprises a public key Pu and a private key Pr, the public key Pu is sent to a KMS, and the private key Pr is stored in the PIN pad; the KMS calls a hardware and security module, the public key is used for encrypting the TMK to produce master key ciphertext Ctmk_tk, and the master key ciphertext is sent to the POS terminal; the POS terminal uses the private key Pr for decrypting the master key ciphertext Ctmk_tk to obtain the TMK and stores the TMK in the PIN pad. The invention further provides a security downloading system of the TMK. The security downloading method and system of the TMK have the advantages that the TMK is encrypted by adopting the TK, the TMK is downloaded remotely by the POS terminal, great convenience is brought to downloading of the TMK, the TK is produced randomly, a transmission process is also closed, and therefore transmission security of the TMK is guaranteed effectively.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a method and system for safely downloading a terminal master key TMK. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PIN PAD) and hardware encryption machine (Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, It is a centralized management and transaction processing system that processes or forwards transaction requests from POS terminals and returns transaction r...

AI Technical Summary

Problems solved by technology

As a result, the workload of the maintenance center computer room is heavy; after the equipment leaves the factory, it needs to be transported to the security computer room of the management center to download the key before it can be deployed to the merchant, and the transportation cost increases; in order to centralize the download of the key, a lot of manpower and working time are required, and the maintenance cost is high. , long maintenance period, etc.

Images