Device for safeguarding operational security of client side

Abstract

An embodiment of the invention discloses a device for safeguarding operational security of a client side. The device comprises a security part, an unsecure operating system, a secure operating system, a first middleware proxy, a second middleware proxy and second middleware, wherein the first middleware proxy and the second middleware proxy operate in the unsecure operating system, and the second middleware operates in the secure operating system. Client-side applications are installed on the unsecure operating system and directly call first middleware and call the second middleware through the second middleware proxy. Sensitive data in the client-side applications are stored in the security part, the first middleware is used for completing a part of service functions in the client-side applications in the unsecure operating system, and the second middleware is used for completing another part of service functions of the client-side applications by interacting with the security part in the unsecure operating system. According to the embodiment, potential security hazards of operations completed by the client side are reduced or even avoided.

Description

technical field [0001] The invention relates to the field of embedded technology, in particular to a device for ensuring the running safety of a client. Background technique [0002] Application systems such as online banking systems or electronic financial systems are generally composed of: a server, an intermediate network layer and a client. The security of the entire application system needs to be guaranteed by the operation security of the above three parts. For example, in an online banking system, the server and the intermediate network layer are ensured by the bank to ensure the operational security, while the operational security of the client is guaranteed by an online banking security device. [0003] At present, the mainstream online banking security devices are: online banking shield (also known as USBKey, which looks like a portable U disk). As a terminal for user identity authentication and transaction signature, online banking shield has been used by online b...

AI Technical Summary

Problems solved by technology

[0006] However, in the process of realizing the present invention, the inventors of the present invention have found that at least the following problems exist in the prior art: since the client runs in an open execution environment (the execution environment includes operating system parts and corresponding hardware parts), However, the open execution environment itself is insecure and untrustworthy. Therefore, the operations completed by the client will have very large security risks.

For example, when the user enters the PIN code of the online banking shield on the client so that the client can submit it to the online banking shield for verification, since an open execution environment cannot prevent the attack of malicious software such as keyloggers, it is very likely that the PIN code will appear. Give way

Images