Online Banking Transaction Authentication System Based on Trusted Computing Platform
A technology of trusted computing and transaction authentication, applied in the field of network security, it can solve problems such as undetectable, dangerous and complex problems for users and banks
Active Publication Date: 2018-10-23
AEROSPACE INFORMATION
View PDF5 Cites 0 Cited by
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Channel attacks are usually based on SSL (Secure Sockets Layer) / TLS (TransportLayerSecurity) channel attacks. Attackers intervene in the SSL / TLS channel between the user and the online banking authentication server through address masquerading , pretending to be the online banking authentication server to talk to the user, and at the same time pretending to be a legitimate user to talk to the online banking authentication server, intercepting and tampering with the information, so as to control the entire transaction, so that neither the user nor the bank can detect
[0003] At present, the online environment has become more complex and there are various potential dangers, so it also poses challenges to online banking in terms of security.
Method used
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
View moreImage
Smart Image Click on the blue labels to locate them in the text.
Smart ImageViewing Examples
Examples
Experimental program
Comparison scheme
Effect test
Embodiment Construction
[0069] In order to facilitate the understanding of the embodiments of the present invention, several specific embodiments will be taken as examples for further explanation below in conjunction with the accompanying drawings, and each embodiment does not constitute a limitation to the embodiments of the present invention.
[0070] A schematic structural diagram of an online banking transaction authentication system based on a trusted computing platform according to the present invention is as follows: figure 1 As shown, it includes the following modules: trusted computing platform, CA (certificate Authority, certification center), online banking authentication server, online banking WEB terminal, financial IC card and financial IC card reader. Among them,
[0071] The trusted computing platform, in order to ensure that the systems of both parties participating in the authentication are on a safe platform, a TPM (Trusted Platform Module, trusted platform module) chip is embedded ...
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More PUM
Login to View More Abstract
The embodiment of the invention provides an online banking transaction authentication system based on a trusted computing platform. The system mainly comprises a trusted computing platform, a certification authority CA, an online banking authentication server, an online banking WEB side, a financial IC card, and a financial IC card reader. The trusted computing platform uses the CA to authenticate the online banking authentication server based on trusted boot. The online banking authentication server generates impact dependent on transport layer data, and authenticates a user logging into the online banking WEB side and the financial IC card reader of the user by using the impact. The financial IC card reader is connected with the online banking WEB side, reads information of the financial IC card, and is used as an information transmission medium between the financial IC card and the online banking WEB side. According to the embodiment of the invention, a bank, a cardholder and the financial IC card reader are all authenticated by using a PKI system and the financial IC card. A safe and trusted credible authentication process is realized, the demand of an online bank for providing services anytime and anywhere can be met, and both non-channel attack and channel attack can be defended.
Description
technical field [0001] The invention relates to the technical field of network security, in particular to an online banking transaction authentication system based on a trusted computing platform. Background technique [0002] Nowadays, online banking has become a convenient financial service tool that attracts more and more customers. However, the openness of the network makes the sensitive information involved in online banking extremely vulnerable to malicious attacks, and the attack methods are diverse. According to whether the attacker is separated from the session between the user and the bank, several common attacks can be divided into two categories: non-channel attack and channel attack. Non-channel attack means that the dialogue channel between the attacker and the customer or the bank is separated, mainly through the installation of malicious programs and other intrusion means to attack the user's computer, obtain the user's account number, password, private key ...
Claims
the structure of the environmentally friendly knitted fabric provided by the present invention; figure 2 Flow chart of the yarn wrapping machine for environmentally friendly knitted fabrics and storage devices; image 3 Is the parameter map of the yarn covering machine
Login to View More Application Information
Patent Timeline
Login to View More Patent Type & Authority Patents(China)
IPC IPC(8): H04L29/06H04L9/32G06Q40/02
Inventor 王国文罗世新何丽尹刚袁松龙
Owner AEROSPACE INFORMATION