Safety shield, and digital-certificate management system and method

Abstract

The invention provides a safety shield, and a digital-certificate management system and method. The safety shield includes a communication interface and an intelligent chip. The intelligent chip includes a storage unit which is connected with the communication interface and receives and stores an activation data subkey (ADK) subkey and a certificate public key (CPK); an activation unit which is connected with the communication interface so as to receive the activation data and use the ADK subkey to decipher the activation data so as to activate the intelligent chip; and a processing unit which is connected with the communication interface so as to receive an application installation certificate AIC and a public key infrastructure (PKI) application and verify the AIC according to the CPK and install the PKI application under a condition that the verification of the AIC is passed. Through use of the safety shield, and the digital-certificate management system and method, management of at least one digital certificate can be realized.

Description

technical field [0001] The invention relates to the financial field, in particular to a security shield, a digital certificate management system and method. Background technique [0002] In today's society, people use cash less and less for transactions, and instead use online banking and mobile banking for transactions. However, security issues restrict the further development of online banking and mobile banking. [0003] For online banking, the usual way is USB shield. However, the USB shields used in online banking are all issued by a bank. On the one hand, a user often has multiple USB shields at the same time, which is not conducive to management, and is also a huge waste of resources. [0004] For mobile banking, in order to ensure the security of mobile payment, some banks use a combination of mobile phone number and account number to ensure payment security by sending a combination of verification code and user password through SMS every time you spend, and set th...

AI Technical Summary

Problems solved by technology

[0005] Binding the mobile phone number with the user account can protect the security of mobile banking to a certain extent, but now there are many security loopholes in smart phones based on Android and IOS systems. There are many loopholes and uncontrollable. Its SMS content and mobile banking client application are very easy to be monitored and forged by attackers. The password, SMS verification code, account information, etc. entered by the user each time can be Under the monitoring of attackers, mobile banking can generally carry out large-amount transfer transactions, which has huge risks. Once information is leaked and further transferred by attackers, the user's losses are limitless

The introduction of digital certificates using SD cards also has the above-mentioned risks, because when digital certificates exist in the form of SD cards, they are connected to mobile phones most of the time. If an attacker obtains access to the SD card by monitoring access password or key, then the attacker can access the SD card without the user's knowledge, and cause corresponding security threats to the user

And the introduction of digital certificate mode in SD card mode, if the mobile phone is lost, will also cause huge potential risks to users

Moreover, the current security certificate based on the SD card mode only supports the security certification of one bank or one payment company. If the user's mobile phone is installed with mobile banking applications of different banks at the same time, it is bound to carry multiple SD cards, which is obvious. It will bring great inconvenience to users

Images