PIN anti-exhaustion method and system

Abstract

The invention discloses a PIN anti-exhaustion method and system, and the method comprises the steps: obtaining the current anti-exhaustion data stored in POS equipment when a PIN code input request is obtained; calculating a first time difference value between the current PIN input time and the current period reference time, and comparing the first time difference value with the current anti-exhaustion period; if the first time difference value is smaller than the current anti-exhaustion period, comparing the current period PIN input total number of times with the current period input number of times threshold value; if the total number of times of PIN input in the current period is smaller than the threshold value of the number of times of input in the current period, the PIN code input is allowed, and PIN counting information in the current exhaustion prevention data is updated; and if the current period PIN input total number of times is greater than or equal to the current period input number of times threshold, refusing the current PIN code input. According to the invention, the security of the PIN code is greatly improved, the transaction speed is improved, and the user experience is greatly improved.

Description

technical field [0001] The present invention relates to the field of transaction security, and further relates to a PIN anti-exhaustion method and system. Background technique [0002] Based on the consideration of security design, major manufacturers of POS equipment have made security solutions to prevent malicious programs from being used to decipher the cardholder's PIN code through exhaustion. [0003] At present, the commonly used method in the industry is the logic of 4 times of PIN code input in 2 minutes, that is, only a maximum of 4 times of PIN code input is allowed within 120 seconds. To enter the fifth PIN code, you must wait for more than 120 seconds. The method needs to record the current RTC time every time the PIN code is input, design a loop buf[4] with 4 members, record the current PIN code input index idx, and enter the time of the first PIN code input (idx=0) Write buf[0], the time of the second PIN code input (idx=1) is written into buf[1], and the tim...

AI Technical Summary

Problems solved by technology

[0004] In this solution, once the customer enters the wrong PIN code 4 times in a row within 2 minutes, he has to wait for 2 minutes before re-entering the PIN code (here, it is assumed that there is no upper limit for PIN code errors in the cash register background), resulting in poor user experience. , so there is a need for a PIN input protection method that can protect the PIN input and avoid affecting the user experience

Images