Method and system for controlling depositing and withdrawing safety based on safety core

Abstract

The invention discloses a method and a system for controlling depositing and withdrawing security based on a security core. A security chip is arranged in a depositing and withdrawing core and put in the safe case of an automatic teller machine. The core safety chip is called the security core for short; the security core communicates with an automatic teller machine pre-system (ATMP); the safe communication of the security core with the ATMP is realized by virtue of certificate issuing and key exchange; the ATMP authorizes the core to dispense cashes, and meanwhile, checks the amount deposited. According to the method and the system for controlling the depositing and withdrawing security based on the security core, due to the safe communication of the security core and the ATMP, the identity is authenticated, an instruction sent out is verified legally and a message sent out is encrypted, and then the ATMP authorizes the core to dispense cashes and checks the amount deposited; the method and the system have the advantages that authentication and encryption / decryption can be effectively authenticated to achieve integrity protection, prevent tampering and prevent replay attack protection, and therefore, the security of the ATM is improved.

Description

technical field [0001] The invention relates to a deposit and withdrawal security control method and system based on a security core. Background technique [0002] Along with the continuous progress of society and the continuous development of the financial industry, bank ATMs (automatic teller machines) based on various technologies such as electronic technology and computer technology have developed greatly. In my country, ATMs have spread all over the cities. Bank ATMs can conveniently provide customers with automatic withdrawal and deposit functions, saving a lot of manpower and material resources, and reducing the workload of banks. At present, bank ATM has increasingly become an indispensable means of service in banking services. [0003] At present, financial crimes related to ATMs are also increasing. In 2010, at the Global Hacking Conference, the world's best hacker Jack successfully demonstrated how to hack into ATMs with two different systems, and made the ATMs s...

AI Technical Summary

Problems solved by technology

[0005] (1) The existing ATM cash deposit and withdrawal modules are all controlled by ATMC through the WOSA communication protocol. Identity and command replay prevention lack effective prevention

[0006] (2) The existing ATM cash deposit and withdrawal module does not perform identity authentication, integrity authentication, and non-repudiation authentication on the operator, lacks software security protection, and lacks a third-party authentication agency, which allows hackers to take advantage of it. Loopholes in management lead to safety accidents caused by self-defense

For the existing deposit operation, the attacker attacks the industrial computer and ATMP, intercepts the ATM deposit message, and forges the deposit request

Images