Bank USBKey certificate application tamper-proof protection method and system

Abstract

The invention discloses a bank USBKey certificate application tamper-proof protection method and system. The method comprises the steps that S100, an online banking application calls a certificate application module and transmits certificate request parameters; S200, the certificate application module acquires online banking certificate purpose information in the certificate request parameters andsends a key pair generation instruction to the USBKey; s300, the USBKey generates a corresponding key pair according to the key pair generation instruction, and binds the key pair with online bankingcertificate purpose information; s400, the certificate application module sends a signature generation instruction to the USBKey; s500, the USBKey analyzes and acquires a public key and E-bank certificate purpose information in the certificate request information original text, and acquires the E-bank certificate purpose information bound with the key pair according to the public key; s600, the USBKey compares the E-bank certificate purpose information in the certificate request information original text with the E-bank certificate purpose information bound with the key pair; and S700, the certificate application module organizes certificate request data and returns the certificate request data to the online banking application. According to the invention, the problem that the online banking certificate is tampered in the certificate issuing process can be solved.

Description

technical field [0001] The invention relates to the application field of bank online banking, in particular to a tamper-proof protection method and system for bank USBKey certificate application. Background technique [0002] Since the bank defines the application scenarios of the certificate and the purpose of the online banking certificate, that is, the transaction signature certificate can only be used to sign data in a specific format, and the ordinary signature certificate can only be used to sign data in a non-specific format. In the certificate request link during the certificate download process, the key pair generation process of the USBKey, and the purpose requested by the online banking application, there is a risk of tampering when generating the key pair. To avoid this risk, anti-tampering protection is required for the purpose. Contents of the invention [0003] In view of the defects existing in the prior art, the purpose of the present invention is to provi...

AI Technical Summary

Problems solved by technology

[0003] In view of the defects existing in the prior art, the purpose of the present invention is to provide a bank USBKey certificate application tamper-proof protection method and system, through which the method and system can solve the problem that the purpose of the online banking certificate is tampered in the process of issuing the certificate

Images