Information interaction method and system and smart key equipment

Abstract

The invention provides an information interaction method and system and smart key equipment. The information interaction method comprises the steps that a terminal generates and displays transaction order data and generates and issues a transaction request; a server receives the transaction request and generates transaction data; the server and the smart key equipment conduct session key negotiation operation, and a first session key and a second session key are generated respectively; the server uses the first session key to encrypt the transaction data, generates the encrypted transaction data and sends the encrypted transaction data to the terminal; the terminal receives the encrypted transaction data and sends the encrypted transaction data to the smart key equipment; the smart key equipment uses the second session key for decryption to obtain the transaction data, processes the transaction data, obtains second transaction key information and sends the second transaction key information to the terminal; the terminal displays the second transaction key information, generates a confirmation information after obtaining confirmation instruction and sends the confirmation information to the smart key equipment; the smart key equipment sends encrypted signature data to the terminal, and the terminals receives the encrypted signature data and sends the encrypted signature data to the server; the server uses the first session key to decrypt the encrypted signature data, obtains the signature data and conducts attestation operation.

Description

technical field [0001] The invention relates to the field of electronic technology, in particular to an information interaction method, system and intelligent key device. Background technique [0002] In recent years, with the rapid development of the Internet and financial informatization, online banking has been widely praised by users and the banking industry for its convenience and high efficiency. At the same time, transaction security issues have become increasingly prominent. Therefore, the best way to ensure transaction security In order to use the electronic key device while using online banking, at present, the electronic key device can be a smart key device, such as USB-KEY, audio KEY or Bluetooth KEY, etc., or a smart card, such as an IC card. [0003] From a technical point of view, the smart key device is a tool for electronic signature and data authentication. It has a built-in micro security chip and uses a key algorithm to encrypt, decrypt and digitally sign...

AI Technical Summary

Problems solved by technology

If the display screen and confirmation key are removed, the volume of the smart key device can be effectively reduced, but the smart key device cannot display the transaction data, and the terminal obtains the transaction data in plain text and displays it. If the terminal is hacked or infected by a virus, the transaction data is tampered with , the user cannot know that the transaction data has been tampered with, nor can he obtain the real transaction data. When the user confirms the operation based on the tampered transaction data displayed on the terminal, the smart key device essentially signs the illegal transaction data. caused the loss of the user's property

Images