Method for realizing the security start-up verification of a payment terminal

Abstract

The invention discloses a method for realizing safe start-up verification of a payment terminal, which relates to the technical field of a mobile payment terminal. The implementation method is as follows: At that time of power-up of the payment terminal, the SP and NorFlash are connected, After SP Start, After the firmware uboot on the AP side is verified, the AP and SP are authenticated to each other, After certification, Verify the integrity and legitimacy of kernel and rootfs data, if verification is successful, start the AP, otherwise, the AP cannot be started, Therefore, the method provided by the present invention, Based on the common external memory between the two processors to achieve power-on, and to achieve mutual authentication between the two processors to ensure the safety ofthe entire system start-up verification and operation, so that in the use of a safe single-chip + a non-safe common MCU low-cost payment terminal, to achieve the safety start-up verification of the entire system.

Description

technical field [0001] The present invention relates to the technical field of mobile payment terminals, in particular to a method for realizing security start-up verification of payment terminals. Background technique [0002] At present, mobile payment terminals generally use dual CPUs to form the entire secure payment environment, one of which is a high-end secure MCU and the other is a secure single-chip microcomputer. The two processors do not share resources, and the two processors are based on their own security mechanisms. Ensure the safe operation of its own firmware. [0003] During the use of mobile payment terminals with this structure, two CPUs generally need to be powered on at the same time, and the high-end security MCU needs to run the operating system, and its boot speed is much slower than that of the single-chip microcomputer. Therefore, after the MCU is successfully powered on, the single-chip microcomputer is already ready. ; In addition, due to the ne...

AI Technical Summary

Problems solved by technology

[0003] During the use of mobile payment terminals with this structure, two CPUs are generally required to be powered on at the same time, and the high-end security MCU needs to run an operating system, and its boot speed is much slower than that of a single-chip microcomputer. Therefore, after the MCU is successfully powered on, the single-chip microcomputer is already ready. ; In addition, due to the need to use a high-end security MCU, the price is expensive, and because there is no hardware resource level sharing between the two processors during the startup process, mutual authentication between the two processors cannot be performed, resulting in security risks in the mobile payment environment

Images