A method for transmitting keys, a receiving terminal and a distributing terminal

Abstract

The invention relates to the field of data processing, in particular to a method for remote key transmission, a receiving terminal and a distribution terminal. The present invention obtains the first authentication message according to the unique identifier of the receiving terminal and the first random character string; sends the first authentication message to the distribution terminal, so that the distribution terminal verifies the identity of the receiving terminal according to the first authentication message legitimacy; verifying the second authentication message from the distribution terminal to obtain a first verification result; the first verification result includes passing the verification and failing the verification; the second authentication message includes the unique identifier of the distribution terminal, A second random character string, a second MAC value, and a specific key ciphertext; when the first verification result is that the verification is passed, decrypt the specific key ciphertext to obtain a specific key plaintext. To achieve improved efficiency of remote key transmission.

Description

technical field [0001] The invention relates to the field of data processing, in particular to a key transmission method, a receiving terminal and a distribution terminal. Background technique [0002] With the rapid development of the electronic payment industry, such as bank card payment, consumer card payment, industry card payment and other electronic payment technologies through the network, they are more and more popular due to their fast and convenient features. [0003] The electronic payment system includes components such as terminal equipment, acquiring platform and bank core system. In order to ensure the security of consumers' personal sensitive information during the payment process, it is required to encrypt the personal sensitive information during the transaction process, mainly through the key of Master Key / Session Key (MK / SK) system to complete. Taking POS (Point of Sale, POS) consumption transactions as an example, the principle of terminal equipment pr...

AI Technical Summary

Problems solved by technology

[0006] Disadvantage 1: In the safe room, the key is downloaded to the POS through serial communication, and the POS is required to be sent to the safe room uniformly. It requires a lot of manpower to complete the injection of MK, which greatly increases the operation and maintenance cost of the POS equipment.

[0007] Disadvantage 2: The terminal equipment leaving the factory should be sent to the terminal key management agency first, and then resent to the actual user of the terminal after completing the terminal key injection work, which has caused huge expenses for business development, including time costs and manpower costs, etc., while slowing down the speed of business expansion

[0008] Disadvantage 3: Due to the traditional method, POS is required to download MK directly to the device through physical means in the safe room, and the operation and maintenance cost of fixed MK regular replacement is huge. In order to save business costs, some customers will omit this transaction, and In the long run, this will pose a threat to the security of MK keys in POS devices

Images