Authentication management method and related equipment

Abstract

The invention relates to an authentication management method, an empowerment server, a terminal device and an authentication management system, and belongs to the field of data processing. The methodcomprises: an empowerment server obtaining a first serial number sent by a terminal device, and the first serial number being identification information of an authentication module on the terminal device; the empowerment server judging whether an authentication key corresponding to the first serial number exists in a pre-stored management information file or not, wherein the management informationfile comprises a corresponding relationship between the serial number and the authentication key; if an authentication key corresponding to the first serial number exists in the management information file, deducting the authorization frequency in the management information file by the authorization server, and generating an authentication ciphertext by using the authentication key; and the empowerment server sending the authentication ciphertext to the terminal device, so that the terminal device executes a preset operation after successfully verifying the authentication ciphertext through the authentication module. By adopting the method provided by the invention, the security of authentication management can be improved.

Description

technical field [0001] The invention belongs to the field of data processing, and in particular relates to an authentication management method, an authorization server, terminal equipment and an authentication management system. Background technique [0002] At present, most security authentication modules are used in offline mode, and the authentication process of these security authentication modules involves key management. [0003] The security protection of the security authentication module set on the terminal device in offline mode is currently only realized through the internal key management mechanism of the security authentication module, for example, through the control of the number of wrong key attempts, or through the mechanism of physical anti-disassembly to prevent The security authentication module was forcibly removed. [0004] However, the existing key management mechanism of the security authentication module cannot deal with illegal authentication occas...

AI Technical Summary

Problems solved by technology

[0004]However, the existing key management mechanism of the security authentication module cannot deal with illegal authentication occasions after being stolen

Moreover, the non-networked key management of many public utility applications across the country, including public transport, is in a dangerous situation of "with technology, without management, with application, without supervision", and there are no corresponding management regulations to clarify the responsibilities, division of labor, and obligations of each unit , rights, and key usage management norms and business processes, further causing loopholes in the current key management

For example: the key medium management represented by the point-of-sale terminal security access module (Purchase Secure Access Module, PSAM) card is not standardized, which has caused the loss of part of the key medium. Once an illegal person obtains the PSAM card, it can be used to modify the key medium. The inbound information of the Electronic Toll Collection (ETC) user card in the system can achieve the purpose of evading tolls, and can also maliciously deduct fees from customers or even clear the files of ETC user cards. At the same time, some provinces entrust Banks and other agency issuers use PSAM cards to issue second on-board unit (OBU) offline. Once the issued PSAM cards are lost, there are risks such as directly modifying the OBU model (big car and small label)

Images