Signature method of payment terminal application program based on signature machine

Abstract

The invention relates to a payment terminal application program signature method based on a signature machine. According to the method, a pair of public and private keys are generated through interaction of the signature machine and a PC tool, the public key is uploaded to a PC, and the private key is encrypted and saved in the signature machine and saved as an encrypted backup in an IC card; then the corresponding private key is selected to perform decryption through the signature machine, and the decrypted private key is applied to sign application program data to be signed which is issued by the PC tool; and finally the signature result is uploaded to the PC tool. Besides, the signature machine also supports downloading of the private key and importing and exporting of the private key, and the private key can be downloaded through a private key download function or the backup private key can be imported from the IC card if the private key is lost due to security attack of the signature machine or other reasons. New public and private key pairs can be conveniently generated by a third-party payment mechanism itself and safety hidden trouble caused by the fact that current payment terminal manufacturers generate the public and private key pairs instead of the third-party payment mechanism can be avoided, and all the private keys are encrypted and saved in the signature machine so that loss caused by disclosure of the private keys is not liable to occur.

Description

technical field [0001] The invention relates to a method for signing payment terminal application programs based on a signing machine. Background technique [0002] Payment terminals of different third-party payment institutions can only download and install applications signed with the private key of the third-party payment institution to ensure that the interests of the third-party payment institution are not damaged. [0003] At present, the private keys of third-party payment institutions are generated by the payment terminal manufacturers on their behalf, which has potential security risks, and the signature method is to use the PC tool to use the private key stored on the PC to sign the application program, although this method can be convenient. Sign the application, but because the private key is stored on the PC, it is easy to be obtained by others to sign their own application and downloaded to the payment terminal, resulting in the loss of property of the third-pa...

AI Technical Summary

Problems solved by technology

[0003] At present, the private keys of third-party payment institutions are generated by the payment terminal manufacturers on their behalf, which has potential security risks, and the signature method is to use the PC tool to use the private key stored on the PC to sign the application program, although this method can be convenient. Sign the application, but because the private key is stored on the PC, it is easy to be obtained by others to sign your own application and download it to the payment terminal, resulting in property loss to the third-party payment institution

In addition, due to accidental factors such as misoperation or damage to the PC disk, the private key stored on the PC may be lost, and a new public-private key pair must be replaced, resulting in unnecessary losses

Images