Online banking transaction authentication system based on trusted computing platform

Abstract

The embodiment of the invention provides an online banking transaction authentication system based on a trusted computing platform. The system mainly comprises a trusted computing platform, a certification authority CA, an online banking authentication server, an online banking WEB side, a financial IC card, and a financial IC card reader. The trusted computing platform uses the CA to authenticate the online banking authentication server based on trusted boot. The online banking authentication server generates impact dependent on transport layer data, and authenticates a user logging into the online banking WEB side and the financial IC card reader of the user by using the impact. The financial IC card reader is connected with the online banking WEB side, reads information of the financial IC card, and is used as an information transmission medium between the financial IC card and the online banking WEB side. According to the embodiment of the invention, a bank, a cardholder and the financial IC card reader are all authenticated by using a PKI system and the financial IC card. A safe and trusted credible authentication process is realized, the demand of an online bank for providing services anytime and anywhere can be met, and both non-channel attack and channel attack can be defended.

Description

technical field [0001] The invention relates to the technical field of network security, in particular to an online banking transaction authentication system based on a trusted computing platform. Background technique [0002] Nowadays, online banking has become a convenient financial service tool that attracts more and more customers. However, the openness of the network makes the sensitive information involved in online banking extremely vulnerable to malicious attacks, and the attack methods are diverse. According to whether the attacker is separated from the session between the user and the bank, several common attacks can be divided into two categories: non-channel attack and channel attack. Non-channel attack means that the dialogue channel between the attacker and the customer or the bank is separated, mainly through the installation of malicious programs and other intrusion means to attack the user's computer, obtain the user's account number, password, private key ...

AI Technical Summary

Problems solved by technology

Channel attacks are usually based on SSL (Secure Sockets Layer) / TLS (TransportLayerSecurity) channel attacks. Attackers intervene in the SSL / TLS channel between the user and the online banking authentication server through address masquerading , pretending to be the online banking authentication server to talk to the user, and at the same time pretending to be a legitimate user to talk to the online banking authentication server, intercepting and tampering with the information, so as to control the entire transaction, so that neither the user nor the bank can detect

[0003] At present, the online environment has become more complex and there are various potential dangers, so it also poses challenges to online banking in terms of security.

Images