A security enhancement method for information interaction between self-service vending equipment and servers for mobile payment

Abstract

The invention discloses a mobile payment oriented security enhancement method for information interaction between a self-service sell device and a server. The method comprises the steps that the automatic sell device and the server generate public keys and store respective public keys in a crossed mode; the automatic sell device generates and temporarily stores a first random number Nb, thereby transmitting the first random number to the server; the server generates and temporarily stores a second random number Na and returns the Na and a Sign (Na, Nb) to the automatic sell device; the automatic sell device checks the Sign (Na, Nb); the automatic sell device transmits a device ID and the Sign (Na, ID) to the server; the server receives and checks the Sign (Na, ID); the automatic sell device generates a conversation key and transmits the conversation key to the server; the server obtains the conversation key and starts information interaction; and the information interaction is stopped. According to the method, on the basis that two information interaction parties check the signs accurately, the rapid information interaction between an embedded device and the server can be realized conveniently, the method is safe and reliable and the method is easy to realize and popularize.

Description

technical field [0001] The present invention relates to a method for improving security of information interaction, and more specifically relates to a method for improving security of information interaction between a self-service vending device and a server for mobile payment. Background technique [0002] At present, in order to ensure the security of the communication process, the common practice is to introduce the TLS / SSL protocol, relying on the TLS / SSL certificate and the encryption and decryption mechanism to realize the secure transmission of data. The TLS / SSL protocol is rigorous and theoretically guarantees the security of communication, but in order to be universal, there are problems in the handshake process and the large amount of calculation. For traditional servers, the calculation amount of TLS / SSL is negligible, but the computing resources of self-service vending equipment are very limited. Therefore, the security authentication protocol must be customized...

AI Technical Summary

Problems solved by technology

However, the TLS / SSL protocol has a complex service certificate verification process, including whether the server certificate has expired, whether the CA that issued the server certificate is reliable, and whether the public key of the issuing CA can correctly unlock the digital signature of the issuing CA of the server certificate. , Whether the domain name on the server certificate matches the actual domain name of the server, the process is complicated, and the data transmitted, stored, and temporarily stored is a calculation and storage volume that is difficult for self-service vending equipment to accept and operate

Images