Identity card information safety transmission method and system

Abstract

The invention provides an identity card information safety transmission method and system. The method comprises the steps that a card reader receives a card reading instruction and then transmits a transmission secret key generation request to a background server; the background server generates and transmits a first random factor; the card reader carries out the signing of first to-be-signed data, generates first signature data, and transmits first authentication data; the background server carries out the verification of the validity of a digital certificate of the card reader; and the flow is ended if the verification is not passed. After the card reader receives the first random factor, a private key is used at once to sign the first random factor, and the first random factor is transmitted to the server, thereby enabling the background server to receive and verify the first authentication data in shortest time, improving the authentication efficiency of the background server for the card reader. Therefore, the background server instantly determines whether the card reader is legal at the initial stage of the mutual authentication of the card reader and the background server or not. The flow is ended if the card reader is illegal, thereby preventing illegal transaction from occupying resources of the background server.

Description

technical field [0001] The invention relates to the field of electronic technology, in particular to a method and system for securely transmitting ID card information. Background technique [0002] The ciphertext of the ID card information is stored in the second-generation resident ID card, and the security control module authorized by the Ministry of Public Security is required to decrypt the ciphertext of the ID card information stored in the resident ID card. The card reader needs to exchange information with the background server to obtain the plaintext information of the ID card. At present, when going to a bank or a securities institution to handle business, it is necessary to read the information of the ID card multiple times. In the current technology, every time the ID card reader is read, it needs to perform interactive authentication with the background server. During the authentication process, the server will Random passwords are generated to encrypt interacti...

AI Technical Summary

Problems solved by technology

At present, when going to a bank or a securities institution to handle business, it is necessary to read the information of the ID card multiple times. In the current technology, every time the ID card reader is read, it needs to perform interactive authentication with the background server. During the authentication process, the server will Random passwords are generated to encrypt interactive information. However, this interactive authentication process is vulnerable to attacks. Attackers usually make dictionary guesses on random passwords. This is a "replay attack". When the server is attacked by replay, it can pass The random password generated by itself identifies the replay attack and terminates the process. However, in the current interactive authentication scheme, when the server identifies the replay attack, there are often many interactions and multiple interactions between the card reader and the server. That is to say, when the server recognizes that a certain transaction is an illegal transaction, the transaction has occupied a considerable amount of transaction time and system resources, resulting in waste of time and resources. In addition, due to the large amount of ID card information, In the process of reading the ID card information, the information reading is often interrupted due to factors such as the network or the card reader. Based on the reading mechanism of the ID card information, the card reader needs to re-read the ID card and reconnect with the server. Perform interactive authentication, further causing waste of time and resources

Images