Secure communication method and secure communication system of self-service device, and self-service device

Abstract

The invention discloses a secure communication method and a secure communication system of a self-service device, and the self-service device, wherein the method comprises the following steps: a step1, a security module and a trusted end perform interactive identity authentication through issuing certificates and verifying signatures, and after passing identify authentication, the security moduleobtains an encryption secret key and a MAC secret key from the trusted end; a step 2, when the security module receives a service instruction, the security module identifies whether the service instruction is a preset critical service instruction, if so, the security module extracts sensitive data in the service instruction, and performs encryption treatment and security verification through theencryption secret key and the MAC secret key; a step 3, if the security verification in the step 2 is passed, the security module sends the service instruction to a matched critical service module. According to the invention, by the method, security services are provided for the critical service module on the self-service device, and security level of the self-service device is improved.

Description

technical field [0001] The invention belongs to the technical field of safety communication, and in particular relates to a safety communication method for self-service equipment, a safety communication system and self-service equipment. Background technique [0002] With the development of informatization and the advancement of financial market-oriented reforms, the direction of banking services, marketing channels, and customer financial needs are undergoing profound changes, and self-service equipment has also undergone earth-shaking changes. Bank self-service equipment not only realizes cross-bank and cross-region cash transaction business, but also realizes various self-service services such as issuing bank cards, issuing UKey, printing receipts, etc. The types of bank self-service equipment have increased from early ATM machines to multi-functional ones now Card issuing machine, Key issuing machine, self-service single machine, ticket machine and other types. [0003]...

AI Technical Summary

Problems solved by technology

Because the key business modules on the bank self-service equipment lack basic security functions, the communication between the main control module and the key business modules on the existing self-service equipment lacks authentication mechanisms and security protection mechanisms, resulting in attackers being able to intercept and replay communication messages , so as to control key business modules to achieve the purpose of spitting money, spitting out bank cards, spitting out Ukey, illegal stamping, etc.

Although there is a proposal for ATM equipment, built-in security chips in the core (money output module, deposit module) to solve security problems, but this solution can only be aimed at newly produced ATM equipment, and there is no way to realize the transformation of ATM equipment that has been put into use Upgrade, and the security chip customization solution built into the core cannot provide security services for other types of self-service equipment, and cannot be promoted and used on other types of self-service equipment of different types

Images