Trusted two-dimensional code generation method and device, electronic equipment and storage medium

Abstract

The invention provides a trusted two-dimensional code generation method and device, electronic equipment and a storage medium. The method comprises the following steps: sending two-dimensional code service information to an application server through a two-dimensional code application, wherein the two-dimensional code service information is obtained after signature by using an application privatekey; receiving two-dimensional code information sent by the application server through the trusted two-dimensional code application, wherein the two-dimensional code information comprises a two-dimensional code URL, and the two-dimensional code information is obtained after the application server encrypts the two-dimensional code URL by using an application public key; decrypting the two-dimensional code information through a trusted two-dimensional code application according to an application private key to obtain the two-dimensional code URL; and generating a corresponding two-dimensional code according to the two-dimensional code URL through the trusted two-dimensional code application. According to the embodiment of the invention, the trusted two-dimensional code application running inthe TEE communicates with the application server, so that the generation of the two-dimensional code is realized, and the TEE provides a secure execution environment for authorizing security software, so that the security of the generation of the two-dimensional code is improved.

Description

technical field [0001] The present application relates to the field of communication technologies, and in particular, relates to a method, device, electronic equipment, and storage medium for generating a trusted two-dimensional code. Background technique [0002] As the core perception technology of the Internet of Things and an important information portal of the Internet, the two-dimensional code technology has developed rapidly and has gradually penetrated into various fields of the national economy and social life. At present, services such as user registration and payment in the TV system also mostly use QR code scanning. However, with the rapid popularization of QR codes, the security problems of QR codes are increasing day by day. Reports of economic losses caused by scanning QR codes containing security risks such as Trojan horses and viruses are often reported in the newspapers. [0003] At present, there are mainly two types of security risks of QR codes. The fir...

AI Technical Summary

Problems solved by technology

However, with the rapid popularization of QR codes, the security problems of QR codes are increasing day by day. Reports of economic losses caused by scanning QR codes containing security risks such as Trojan horses and viruses are often reported in the newspapers.

[0003] At present, there are mainly two types of security risks of QR codes. The first type is privacy issues, that is, whether private information of users will be leaked along with the spread of QR codes.

The second category is the problem of ultra vires, that is, whether there is an ultra vires operation that violates the user's intention

Although the currently commonly used two-dimensional code security strategies such as signature authentication, release pre-examination, and encryption can improve the security support capabilities of two-dimensional codes such as anti-tampering, anti-reversal, and traceability, they still cannot solve the problem of breaking through network access, hijacking or tampering with data communications. Security risk of means of intercepting and replacing QR codes

Images