System and method for performing transaction security authentication in mobile device

Abstract

The invention relates to a system and a method for performing transaction security authentication in a mobile device. The system provided by the invention is characterized by comprising a mobile client having a communication unit, an information input unit and a security component SDK; a security authentication platform having a communication unit, a voice call-out module for performing secure voice communication with an information channel, an authentication logic module 1 for completing authentication logic of the mobile client, a security algorithm module 1 for achieving an encryption algorithm, and a secret key management module for securely storing and managing one or more secret keys of the plurality of mobile clients; the security component SDK comprises an authentication logic module 1, a security algorithm module 2, a secure operation module for preventing the SDK from being decompiled or dynamically debugged, and a secure storage module for ensuring that the secret keys are securely stored at the mobile client. The system and method have the advantages that the secret key can be generated by voice calling, the secret key can also be securely stored and applied to related encryption and security authentication operations, and thus the security of virtual payment is improved.

Description

technical field [0001] The present invention generally relates to the field of secure device transactions, and more particularly, to a system and method for transaction security authentication in mobile devices. Background technique [0002] With the rapid development of the mobile Internet, virtual payments using mobile devices have become a common means of transaction in people's daily lives. Therefore, how to protect the security of this virtual payment has become an increasingly important issue in this field. In the micropayment transactions of financial institutions such as banks, SMS verification codes are the most common virtual transaction authentication method. However, in recent years, a large number of SMS verification code security breaches have occurred, and user data has been leaked without their knowledge, and their deposits have been stolen or swiped. In some major cases, the amount of user data leaked reached hundreds of millions, and the amount of user de...

AI Technical Summary

Problems solved by technology

[0006] In order to solve the problem in the prior art that the short message verification code is easily intercepted by a third party and cause virtual payment to be unsafe, the purpose of the present invention is to provide a system for transaction security authentication in mobile devices, which can use voice calls to generate encryption keys, The key can also be safely stored and used in related encryption and security authentication operations to improve the security of virtual payments

Images