Transaction signature method and device based on intelligent password key, equipment and medium
By verifying the integrity verification data in the transaction signature request in the intelligent password key, to ensure the corresponding relationship between the character coding and the dot -matrix font data, the problem of tampering caused by malicious software attacks caused the transaction to be tampered with. accuracy.
Patent Information
- Application Number
- CN202411192372.9
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-28
- Publication Date
- 2025-01-21
AI Technical Summary
In the prior art, due to malware attacks in the upper computer, the displayed characters do not match the content of the transaction packet to be signed, resulting in the problem of transactions being tampered with.
By receiving the signature request of the transaction, verify the complete verification data of the integrity, ensure the completeness of the corresponding relationship between the character coding and the dot -matrix font data, and display the transaction information and signature under the verification conditions.
It greatly reduces the risk of tampering due to malware attacks in the upper aircraft, ensuring that the displayed characters are consistent with the contents of the transaction message to be signed.
Smart Images
Figure CN119338457A_ABST
Abstract
Description
Technical Field
[0001] The present disclosure relates to the field of information security technology, and in particular to a transaction signature method, device, equipment and medium based on an intelligent password key. Background Art
[0002] The display button type smart password key (Universal Serial Bus Key, USBKey) adds a screen display function based on the traditional USBKey product, which is used to display the transaction information to be signed, such as the transaction amount and account information, and requires the user to express the transaction intention by clicking the physical button.
[0003] When using a display button type USBKey to sign a transaction, the displayed characters may not match the content of the transaction message to be signed. This situation is usually caused by the host computer being attacked by malware, which will cause the transaction to be tampered with. Summary of the invention
[0004] In view of this, the present disclosure proposes a transaction signing method, device, equipment and medium based on a smart password key to solve the problem in the related art that the displayed characters do not match the content of the transaction message to be signed due to malware attacks in the host computer, resulting in transaction tampering.
[0005] The first embodiment of the present disclosure proposes a transaction signature method based on a smart password key, which is applied to a smart password key. The method includes:
[0006] receiving a transaction signature request; the transaction signature request comprising transaction information to be signed and a first data packet for displaying the transaction information; the first data packet comprising a character code corresponding to the transaction information, dot matrix font data corresponding to the character code, and integrity verification data, the integrity verification data being used to verify the integrity of the correspondence between the character code and the dot matrix font data;
[0007] Verifying the integrity check data using an integrity protection key;
[0008] Under the condition that the verification is passed, the transaction information to be signed is displayed on the screen of the smart password key using the dot matrix font data;
[0009] When a confirmation signal of the transaction information to be signed is received, the transaction information to be signed is signed using the user key.
[0010] The disclosed embodiment can ensure the correspondence between character encoding and dot matrix font data through integrity check data. On this basis, the integrity check data is verified through the integrity protection key, and the transaction information is displayed and signed under the condition that the verification is passed. This can greatly reduce the risk of transaction tampering due to malware attacks in the host computer causing the displayed characters to be inconsistent with the content of the transaction message to be signed.
[0011] In the disclosed embodiment, the transaction information corresponds to a plurality of character codes;
[0012] When there are a plurality of first data packets corresponding one-to-one to the plurality of character codes, each first data packet includes a character code, dot matrix font data corresponding to the character code, and integrity check data for verifying the correspondence between the character code and the dot matrix font data;
[0013] When there is a first data packet, the first data packet includes the multiple character codes, the dot matrix font data corresponding to each character code, and integrity verification data for verifying the correspondence between the multiple character codes and the multiple dot matrix font data.
[0014] The embodiment of the second aspect of the present disclosure provides a transaction signature method based on a smart password key, which is applied to an application end, and the method includes:
[0015] Determine a plurality of character codes according to the transaction information to be signed, and determine corresponding dot matrix font data according to each character code;
[0016] Generate integrity check data of the correspondence between the character code and the dot matrix font data using the integrity protection key;
[0017] Generate the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity verification data;
[0018] The transaction signature request is sent to the smart password key, so that the smart password key signs the transaction information to be signed according to the transaction signature method based on the smart password key described in the first aspect.
[0019] The disclosed embodiment uses an integrity protection key to generate integrity verification data of the correspondence between character encoding and dot matrix font data, which can ensure that the displayed characters are consistent with the content of the transaction message to be signed, thereby greatly reducing the risk of transaction tampering.
[0020] In the embodiment of the present disclosure, the integrity check data of the correspondence between the character code and the dot matrix font data is generated using the integrity protection key, including:
[0021] For any one of the multiple character codes, the integrity protection key is used to generate integrity verification data of the correspondence between the character code and the corresponding dot matrix font data; the integrity verification data is used to verify the integrity of the correspondence between the character code and the corresponding dot matrix font data.
[0022] In an embodiment of the present disclosure, generating the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity check data includes:
[0023] Generate a plurality of first sub-data packets; each first sub-data packet includes a character code, dot matrix font data corresponding to the character code, and integrity verification data of the correspondence between the character code and the dot matrix font data;
[0024] The transaction signature is generated based on the multiple first sub-data packets and the transaction information to be signed.
[0025] In the embodiment of the present disclosure, the integrity check data of the correspondence between the character code and the dot matrix font data is generated using the integrity protection key, including:
[0026] An integrity verification data of a one-to-one correspondence between the plurality of character codes and the plurality of dot matrix font data is generated using an integrity protection key; the integrity verification data is used to verify the integrity of the one-to-one correspondence between the plurality of character codes and the plurality of dot matrix font data.
[0027] In an embodiment of the present disclosure, generating the transaction signature request based on the multiple character codes, determining the corresponding dot matrix font data for each character code, and the integrity check data includes:
[0028] Generate a second sub-data packet; the second sub-data packet includes the multiple character codes, a plurality of dot matrix font data corresponding to the multiple character codes one by one, and the integrity check data;
[0029] The transaction signature is generated based on the second sub-data packet and the transaction information to be signed.
[0030] In the embodiment of the present disclosure, the method further includes: when the integrity protection key is a symmetric key, the integrity verification data is a message authentication code; when the integrity protection key is an asymmetric key; the integrity verification data is a digital signature value.
[0031] The embodiment of the third aspect of the present disclosure provides a transaction signature device based on an intelligent password key, comprising:
[0032] A request receiving module, used for receiving a transaction signature request; the transaction signature request includes transaction information to be signed and a first data packet for displaying the transaction information; the first data packet includes a character code corresponding to the transaction information, dot matrix font data corresponding to the character code, and integrity verification data, the integrity verification data is used for verifying the integrity of the correspondence between the character code and the dot matrix font data;
[0033] A data verification module, used to verify the integrity check data using an integrity protection key;
[0034] A transaction information display module, used to display the transaction information to be signed on the screen of the smart password key using the dot matrix font data under the condition that the verification is passed;
[0035] The transaction signing module is used to sign the transaction information to be signed using the user key when receiving a confirmation signal of the transaction information to be signed.
[0036] The embodiment of the fourth aspect of the present disclosure provides a transaction signature device based on an intelligent password key, comprising:
[0037] A dot matrix font data determination module, used to determine a plurality of character codes according to the transaction information to be signed, and to determine corresponding dot matrix font data according to each character code;
[0038] An integrity check data generation module, used to generate integrity check data of the correspondence between character encoding and dot matrix font data using an integrity protection key;
[0039] A transaction signature request generation module, configured to generate the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity verification data;
[0040] The transaction signature module is used to send the transaction signature request to the smart password key, so that the smart password key signs the transaction information to be signed according to the transaction signature method based on the smart password key described in the embodiment of the first aspect.
[0041] An embodiment of the fifth aspect of the present disclosure provides a computer device, which includes a memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the transaction signature method based on the smart password key described in the first aspect by executing the computer instructions.
[0042] An embodiment of the sixth aspect of the present disclosure provides a computer-readable storage medium, on which computer instructions are stored, and the computer instructions are used to enable a computer to execute the transaction signature method based on the smart password key described in the first aspect above.
[0043] Additional aspects and advantages of the present disclosure will be given in part in the following description and in part will become apparent from the following description or be learned through practice of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS
[0044] By reading the detailed description of the preferred embodiment below, various other advantages and benefits will become clear to those of ordinary skill in the art. The accompanying drawings are only used for the purpose of illustrating the preferred embodiment and are not considered to be limitations of the present disclosure. In addition, the same reference symbols are used to represent the same components throughout the accompanying drawings.
[0045] In the attached picture:
[0046] Figure 1 A schematic diagram of a transaction signature method based on a smart password key provided in an embodiment of the present disclosure is shown;
[0047] Figure 2 A schematic diagram of generating a corresponding relationship between a single character code and corresponding dot matrix font data provided by an embodiment of the present disclosure is shown;
[0048] Figure 3 A schematic diagram of generating a relationship for representing a one-to-one correspondence between a plurality of character codes and a plurality of dot matrix font data provided by an embodiment of the present disclosure is shown;
[0049] Figure 4 A flow chart of another transaction signature method based on a smart password key provided by an embodiment of the present disclosure is shown;
[0050] Figure 5 A schematic diagram of a process of displaying transaction information to be signed on the screen of a smart password key using dot matrix font data provided by an embodiment of the present disclosure is shown;
[0051] Figure 6 A schematic diagram of a transaction signature process provided by an embodiment of the present disclosure is shown;
[0052] Figure 7 A schematic diagram of another transaction signature process provided by an embodiment of the present disclosure is shown;
[0053] Figure 8 A schematic diagram of the structure of a transaction signature device based on an intelligent password key provided by an embodiment of the present disclosure is shown;
[0054] Fig. 9 A schematic diagram of the structure of another transaction signature device based on a smart password key provided by an embodiment of the present disclosure is shown;
[0055] Fig.10 A schematic diagram of the structure of a computer device provided by an embodiment of the present disclosure is shown;
[0056] Fig.11 A schematic diagram of a storage medium provided by an embodiment of the present disclosure is shown. DETAILED DESCRIPTION
[0057] The exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although the exemplary embodiments of the present disclosure are shown in the accompanying drawings, it should be understood that the present disclosure can be implemented in various forms and should not be limited by the embodiments described herein. On the contrary, these embodiments are provided in order to enable a more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.
[0058] It should be noted that, unless otherwise specified, the technical terms or scientific terms used in the present disclosure should have the common meanings understood by those skilled in the art to which the present disclosure belongs.
[0059] The following describes the technical scenarios involved in the embodiments of the present disclosure.
[0060] In order to display transaction information on the screen, existing display button USBKey products will place independent memory chips on the motherboard to store font data. Depending on the number of characters in the font and the number of pixels in the dot matrix font, memory chips of different capacities are selected, such as 1MB, 2MB or 4MB memory chips.
[0061] The above-mentioned existing display button type USBKey products use a storage chip, which increases the hardware cost of the USBKey products.
[0062] To this end, the disclosed embodiment provides a method for displaying transaction information on a device screen when signing a transaction for a display button type USBKey. This allows the USBKey to not have to store a large amount of font data in the hardware, but to be input from the outside when signing, and at the same time, the transaction information can be displayed on the device screen in a safe and reliable manner. While ensuring the security of the transaction signature service, the demand for USBKey storage space is reduced, and the hardware cost of the product is reduced.
[0063] According to an embodiment of the present disclosure, an embodiment of a transaction signature method based on a smart password key is provided. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.
[0064] In this embodiment, a transaction signature method based on a smart password key is provided, which can be used for the application end and the smart password key of the smart password key. The transaction signature process is as follows:
[0065] When the user enters the transaction information to be signed on the application side of the smart password key, the application side will generate a transaction signature request based on the input transaction information to be signed and send it to the smart password key;
[0066] After receiving a transaction signature request, the smart password key will verify the first data packet in the transaction signature request to ensure that the character encoding of the actual signature and the dot matrix font data displayed on the smart password key are in correct correspondence; if the verification is passed, the dot matrix font data in the first data packet will be used to display the transaction information to be signed on the screen of the smart password key; when a confirmation signal from the user for the transaction information to be signed is received, the transaction information to be signed is signed using the user's key.
[0067] In this embodiment, a transaction signature method based on a smart password key is provided, which can be used for the application end of the smart password key (which can be understood as the application software supporting the smart password key USBKey). Figure 1 is a flow chart of a transaction signature method based on a smart password key according to an embodiment of the present disclosure, such as Figure 1 As shown, the process includes the following steps:
[0068] Step S101, determining a plurality of character codes according to the transaction information to be signed, and determining corresponding dot matrix font data according to each character code.
[0069] In some specific embodiments, multiple character codes corresponding to the transaction information can be obtained according to the preset coding rules. For example, the codes of the four Chinese characters "transfer information" are: 0xD7AA, 0xD5CB, 0xD0C5, 0xCFA2. The preset coding rules include but are not limited to Unicode coding rules and GB18030 coding rules.
[0070] In some specific embodiments, dot matrix font data corresponding to each character code can be obtained through a font data generation service that includes dot matrix font data for all characters. For example, the font data generation service includes a mapping table that defines the correspondence between character codes and dot matrix font data. The dot matrix font data corresponding to the character code can be extracted from the font data generation service through this mapping table. Among them, the dot matrix font data usually exists in the form of a two-dimensional array.
[0071] Step S102, use the integrity protection key to generate integrity verification data for the correspondence between the character code and the dot matrix font data.
[0072] Specifically, integrity techniques can adopt message authentication codes (algorithms such as HMAC, CMAC, etc.) or digital signatures (algorithms such as RSA, ECC, SM2, etc.); when using a message authentication code, the integrity protection key is a symmetric key, and the corresponding integrity verification data is the message authentication code; when using a digital signature, the "integrity protection key" is an asymmetric key, and the corresponding integrity verification data is the digital signature value.
[0073] In some specific embodiments, integrity verification data can be generated for each character code and the dot matrix font data corresponding to the character code through the integrity protection key. The integrity verification data is used to represent the correspondence between a single character code and the corresponding dot matrix font data. As Figure 2 shown:
[0074] In "201", there is a character code "D7AA" corresponding to the character "transfer" in the transaction information, the corresponding dot matrix font data "0010......0000", and the integrity verification data "SM3-HMAC-1" used to ensure the correspondence between the character code "D7AA" and the dot matrix font data "0010......0000".
[0075] Preferably, the SM3-HMAC message authentication code can be used as the integrity verification data. Among them, the calculation range of each integrity verification data is the set of each character code and the dot matrix font data corresponding to the character code. As Figure 2 shown: The calculation range of the integrity verification data "SM3-HMAC-1" is the character code "D7AA" and the dot matrix font data "0010......0000".
[0076] In some specific embodiments, integrity verification data can also be generated for multiple character codes and multiple dot matrix font data corresponding one-to-one to the multiple character codes, which is used to represent the one-to-one correspondence between the multiple character codes and the multiple dot matrix font data. As Figure 3 shown:
[0077] In "301", there are multiple character codes "D7AA", "DSCB", "DOCS", and "CFA2" that correspond one-to-one with the characters "transfer", "account", "message", and "information" in the transaction information, dot matrix font data corresponding to each character code, and integrity check data "SM2 Sign WithSM3" for ensuring the integrity of the one-to-one correspondence between the multiple character codes and the multiple dot matrix font data.
[0078] Preferably, the SM2 Sign with SM3 digital signature can be used as the integrity check data. Among them, the calculation range of the integrity check data is the set of the above-mentioned multiple character codes and multiple dot matrix font data.
[0079] Step S103: Generate the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity check data.
[0080] In some specific embodiments, multiple first sub-packets can be generated, and a transaction signature is generated based on the multiple first sub-packets and the transaction information to be signed. Wherein, each first sub-packet includes a character code, dot matrix font data corresponding to the character code, and integrity check data for the corresponding relationship between the character code and the dot matrix font data. For example Figure 2 As shown: The first sub-packet 201 includes the coding information "D7AA" corresponding to the character "transfer" in the transaction information, the corresponding dot matrix font data "0010......0000", and the integrity check data "SM3-HMAC-1" for ensuring the correspondence between the coding information "D7AA" and the dot matrix font data "0010......0000". The same applies to the first sub-packets 202 - 204.
[0081] In some specific embodiments, a first sub-packet can be generated, and a transaction signature is generated based on the second sub-packet and the transaction information to be signed. Wherein, the second sub-packet includes the multiple character codes, multiple dot matrix font data corresponding one-to-one to the multiple character codes, and integrity check data for ensuring the one-to-one correspondence between the multiple character codes and the multiple dot matrix font data. For example Figure 3 As shown: The second sub-packet 301 includes multiple character codes "D7AA", "DSCB", "DOCS", and "CFA2" that correspond one-to-one with the characters "transfer", "account", "message", and "information" in the transaction information; dot matrix font data corresponding to each character code, and integrity check data "SM2 Sign With SM3" for ensuring the one-to-one correspondence between the multiple character codes and the multiple dot matrix font data.
[0082] Step S104: Send the transaction signature request to the smart cryptographic key so that the smart cryptographic key signs the transaction information to be signed.
[0083] In this embodiment, a transaction signature method based on a smart cryptographic key is provided, which can be used for a smart cryptographic key. Figure 4 It is a flowchart of the transaction signature method based on a smart cryptographic key according to an embodiment of the present disclosure. As Figure 4 shown, this process includes the following steps:
[0084] Step S201: Receive a transaction signature request.
[0085] Specifically, this transaction signature request is generated and sent by the application side of the smart cryptographic key USBKey. The specific generation process of the transaction signature request can refer to the specific embodiment of the application side above, and will not be elaborated here.
[0086] In some specific embodiments, the transaction signature request includes the transaction information to be signed and a first data packet for displaying the transaction information. Among them, the first data packet includes the character encoding corresponding to the transaction information, the dot matrix font data corresponding to the character encoding, and integrity verification data; the integrity verification data is used to ensure the corresponding relationship between the character encoding and the dot matrix font data.
[0087] In some specific embodiments, the number of the above first data packets can be one or more, specifically as follows:
[0088] When there are multiple first data packets, the multiple first data packets are in one-to-one correspondence with multiple character encodings corresponding to the transaction information. Each first data packet includes a character encoding, the dot matrix font data corresponding to the character encoding, and integrity verification data for verifying the corresponding relationship between the character encoding and the dot matrix font data. As Figure 2 shown: Generate a first data packet 201 for the Chinese character "转". The first data packet 201 contains the character encoding "D7AA" of "转", the dot matrix font data "0010......0000", and integrity verification data "SM3-HMAC-1" for verifying whether the character encoding corresponds to the corresponding dot matrix font data. Among them, the SM3-HMAC message authentication code can be used as the integrity verification data.
[0089] When there is one first data packet, the first data packet includes multiple character encodings corresponding to the transaction information (for example Figure 3"D7AA", "DSCB", "DOCS" and "CFA2" in the text file), dot matrix font data corresponding to each character code, and integrity verification data (e.g. Figure 3 SM2 Sign With SM3).
[0090] Step S202: verifying the integrity check data using an integrity protection key.
[0091] Specifically, the integrity protection key is a key used to protect the data integrity of the first data packet, which is securely stored in the security chip of the smart password key and is written into the security chip during the production stage of the smart password key. The integrity protection key is also stored in the font data service of the application end, and is used to generate integrity verification data of the correspondence between the character encoding and the dot matrix font data using the integrity protection key.
[0092] In some specific embodiments, when the integrity technology used is digital signature, the integrity protection key held by the application end is a private key, which is used to encrypt the correspondence between the character encoding and the dot matrix font data to obtain integrity verification data; the integrity protection key held by the smart password key is a public key, which is used to decrypt the integrity verification data to ensure the correct correspondence between the character encoding and the dot matrix font data.
[0093] In some specific embodiments, when the integrity technology used is a message authentication code, the integrity protection keys held by the application end and the smart password key are both symmetric keys. The application end encrypts the correspondence between the character encoding and the dot matrix font data through the symmetric key to obtain integrity verification data; the smart password key decrypts the integrity verification data through the symmetric key to ensure that the correspondence between the character encoding and the dot matrix font data is correct.
[0094] Step S203: under the condition that the verification is passed, the transaction information to be signed is displayed on the screen of the smart password key using the dot matrix font data.
[0095] Specifically, after the verification process, the transaction information can be displayed on the screen of the smart password key using the multiple dot matrix font data in the first data packet. Figure 5 As shown:
[0096] If there are multiple first data packets, the multiple first data packets are traversed and the integrity of each first data packet is verified; when the verification passes, the dot matrix font data corresponding to the character encoding in the first data packet is recorded; then the corresponding dot matrix font is displayed on the screen according to the dot matrix font data, thereby displaying the transaction information to be signed.
[0097] If there is a first data packet, the integrity of the first data packet is verified; after the verification is passed, multiple dot matrix font data corresponding to multiple character codes in the first data packet are recorded; then the corresponding multiple dot matrix fonts are displayed on the screen according to the multiple dot matrix font data, thereby displaying the transaction information to be signed.
[0098] In some specific embodiments, if any first data packet fails verification, the transaction signature is rejected.
[0099] Step S204: When a confirmation signal of the transaction information to be signed is received, the transaction information to be signed is signed using the user key.
[0100] Specifically, the user may click on a physical button of the smart password key to trigger a confirmation signal of the transaction information to be signed.
[0101] The embodiments of the present disclosure have the following technical effects:
[0102] 1. The smart password key in the embodiment of the present disclosure does not store the character library data in the hardware, but obtains the character library data from the host computer to reduce the storage hardware cost;
[0103] 2. During the transaction signing process, the host computer sends the transaction message and also sends the font data packet required to display the transaction information;
[0104] 3. Use message authentication codes or digital signatures to protect the integrity of font data, ensure that font data is not tampered with or replaced, and ensure the correct correspondence between character encoding and font data;
[0105] 4. The smart password key obtains the font data required to display transaction information from the data sent by the host computer and verifies its integrity before use;
[0106] 5. During the production phase of the smart password key, the key required to verify the integrity of the font data is pre-installed into the security chip.
[0107] The disclosed embodiment also provides a transaction signature process (online font library solution), such as Figure 6 As shown:
[0108] The online font library solution refers to the process in which the USBKey application software applies to the font data generation service for the font data packet required to display the transaction information during the transaction signature process. The USBKey application software counts all the characters that need to be displayed in the transaction information, uploads these character codes, and the font data generation service packages all the above character codes and the corresponding dot matrix font data, and then uses the integrity protection key to generate integrity verification data for the font data packet, and returns a font data packet containing the verification data.
[0109] The USBKey application software sends a transaction signature request to USBKey, which includes the transaction information to be signed and a font data packet from the font data generation service.
[0110] USBKey uses the integrity protection key in the security chip to verify the data integrity of the font data packet. If the verification fails, the transaction signature is rejected. If the verification passes, the font data in the font data packet is used to display the transaction information on the device screen.
[0111] The disclosed embodiment also provides a transaction signature process (offline font library solution), such as Figure 7 As shown:
[0112] The offline font solution is divided into the development phase and the use phase.
[0113] During the development phase, the font data generation service generates a font data packet for each character in the complete font library that needs to be supported (e.g., GB18030 defines 88,000 characters). Each font data packet contains only the character encoding of one character and its dot matrix font data, as well as integrity check data. All font data packets are packaged and stored in the USBKey application software.
[0114] During the use phase, the USBKey application software counts the characters that need to be displayed in the transaction information, retrieves the font data package corresponding to each character from the local storage, initiates a transaction signature request to the USBKey, and sends the transaction information and all the font data packages required for display.
[0115] USBKey uses the integrity protection key in the security chip to verify the data integrity of each font data packet. If the verification fails, the transaction signature is rejected. If all verifications pass, the font data in the font data packet is used to display the transaction information on the device screen.
[0116] Corresponding to the implementation of the transaction signature method based on the smart password key, the embodiment of the present disclosure also provides a transaction signature device based on the smart password key, which is used to execute the transaction signature method based on the smart password key applied to the application end described in the above embodiment. Figure 8As shown, the transaction signature device based on the smart password key includes:
[0117] A dot matrix font data determination module, used to determine a plurality of character codes according to the transaction information to be signed, and to determine corresponding dot matrix font data according to each character code;
[0118] An integrity check data generation module, used to generate integrity check data of the correspondence between character encoding and dot matrix font data using an integrity protection key;
[0119] A transaction signature request generation module, configured to generate the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity verification data;
[0120] The transaction signature module is used to send the transaction signature request to the smart password key so that the smart password key signs the transaction information to be signed.
[0121] Optionally, the integrity check data generation module is also used to: for any one character code among the multiple character codes, use the integrity protection key to generate integrity check data of the correspondence between the character code and the corresponding dot matrix font data; the integrity check data is used to verify the integrity of the correspondence between the character code and the corresponding dot matrix font data.
[0122] Optionally, the transaction signature request generation module is also used to: generate multiple first sub-data packets; each first sub-data packet includes a character code, dot matrix font data corresponding to the character code, and integrity verification data of the correspondence between the character code and the dot matrix font data; generate the transaction signature based on the multiple first sub-data packets and the transaction information to be signed.
[0123] Optionally, the integrity check data generation module is also used to: use the integrity protection key to generate integrity check data for the one-to-one correspondence between the multiple character codes and the multiple dot matrix font data; the integrity check data is used to verify the integrity of the one-to-one correspondence between the multiple character codes and the multiple dot matrix font data.
[0124] Optionally, the transaction signature request generation module is also used to: generate a second sub-data packet; the second sub-data packet includes the multiple character codes, a plurality of dot matrix font data corresponding one-to-one to the multiple character codes, and the integrity verification data; generate the transaction signature based on the second sub-data packet and the transaction information to be signed.
[0125] The transaction signature device based on the smart password key provided by the above-mentioned embodiment of the present disclosure and the transaction signature method based on the smart password key provided by the embodiment of the present disclosure are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.
[0126] Corresponding to the implementation of the transaction signature method based on the smart password key, the embodiment of the present disclosure also provides a transaction signature device based on the smart password key, which is used to execute the transaction signature method based on the smart password key applied to the smart password key described in the above embodiment. Fig. 9 As shown, the transaction signature device based on the smart password key includes:
[0127] A request receiving module, used for receiving a transaction signature request; the transaction signature request includes transaction information to be signed and a first data packet for displaying the transaction information; the first data packet includes a character code corresponding to the transaction information, dot matrix font data corresponding to the character code, and integrity verification data, the integrity verification data is used for verifying the integrity of the correspondence between the character code and the dot matrix font data;
[0128] A data verification module, used to verify the integrity check data using an integrity protection key;
[0129] A transaction information display module, used to display the transaction information to be signed on the screen of the smart password key using the dot matrix font data under the condition that the verification is passed;
[0130] The transaction signing module is used to sign the transaction information to be signed using the user key when receiving a confirmation signal of the transaction information to be signed.
[0131] The disclosed embodiment also provides a computer device to execute the transaction signature method based on the smart password key. Fig.10 , which shows a schematic diagram of a computer device provided by some embodiments of the present disclosure. Fig.10 As shown, the computer device 10 includes: a processor 1000, a memory 1001, a bus 1002 and a communication interface 1003, wherein the processor 1000, the communication interface 1003 and the memory 1001 are connected via the bus 1002; the memory 1001 stores a computer program that can be run on the processor 1000, and when the processor 1000 runs the computer program, it executes the transaction signature method based on the smart password key provided in the aforementioned embodiment of the present disclosure.
[0132] The memory 1001 may include a high-speed random access memory (RAM), and may also include a non-volatile memory (non-volatile memory), such as at least one disk storage. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 1003 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.
[0133] The bus 1002 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. The memory 1001 is used to store a program, and the processor 1000 executes the program after receiving an execution instruction. The transaction signature method based on the smart password key disclosed in the above embodiment may be applied to the processor 1000, or implemented by the processor 1000.
[0134] The processor 1000 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the processor 1000. The above processor 1000 may be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field-programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The disclosed methods, steps and logic block diagrams in the embodiments of the present disclosure can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor. The steps of the method disclosed in conjunction with the embodiments of the present disclosure can be directly embodied as a hardware decoding processor to be executed, or a combination of hardware and software modules in the decoding processor can be executed. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 1001, and the processor 1000 reads the information in the memory 1001 and completes the steps of the above method in combination with its hardware.
[0135] The computer device provided by the embodiment of the present disclosure and the transaction signature method based on the smart password key provided by the embodiment of the present disclosure are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by them.
[0136] The present disclosure also provides a computer-readable storage medium corresponding to the transaction signature method based on the smart password key provided in the above embodiment. Fig.11 The computer-readable storage medium shown is a CD 30 on which a computer program (ie, a program product) is stored. When the computer program is run by a processor, the transaction signature method based on the smart password key provided in any of the aforementioned embodiments will be executed.
[0137] It should be noted that examples of the computer-readable storage medium may also include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other optical or magnetic storage media, which are not listed here one by one.
[0138] The computer-readable storage medium provided by the above-mentioned embodiments of the present disclosure and the transaction signature method based on the smart password key provided by the embodiments of the present disclosure are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.
[0139] It should be noted that:
[0140] In the description provided herein, a large number of specific details are described. However, it is understood that the embodiments of the present disclosure can be practiced without these specific details. In some instances, well-known structures and technologies are not shown in detail so as not to obscure the understanding of this description.
[0141] Similarly, it should be understood that in order to streamline the present disclosure and aid in understanding one or more of the various inventive aspects, in the above description of the exemplary embodiments of the present disclosure, the various features of the present disclosure are sometimes grouped together into a single embodiment, figure, or description thereof. However, the disclosed method should not be interpreted as reflecting the following schematic diagram: the claimed disclosure requires more features than the features explicitly recited in each claim. More specifically, as reflected in the claims below, the inventive aspects lie in less than all the features of the single embodiment disclosed above. Therefore, the claims that follow the specific embodiment are hereby expressly incorporated into the specific embodiment, with each claim itself serving as a separate embodiment of the present disclosure.
[0142] In addition, those skilled in the art will appreciate that, although some embodiments described herein include certain features included in other embodiments but not other features, the combination of features of different embodiments is meant to be within the scope of this disclosure and form different embodiments. For example, in the claims below, any one of the claimed embodiments may be used in any combination.
[0143] The above is only a preferred specific implementation of the present disclosure, but the protection scope of the present disclosure is not limited thereto. Any changes or substitutions that can be easily thought of by any technician familiar with the technical field within the technical scope disclosed in the present disclosure should be included in the protection scope of the present disclosure. Therefore, the protection scope of the present disclosure should be based on the protection scope of the claims.
Claims
1. A transaction signature method based on an intelligent password key, characterized in that: Applied to a smart password key, the method includes: receiving a transaction signature request; the transaction signature request comprising transaction information to be signed and a first data packet for displaying the transaction information; the first data packet comprising a character code corresponding to the transaction information, dot matrix font data corresponding to the character code, and integrity verification data, the integrity verification data being used to verify the integrity of the correspondence between the character code and the dot matrix font data; Verifying the integrity check data using an integrity protection key; Under the condition that the verification is passed, the transaction information to be signed is displayed on the screen of the smart password key using the dot matrix font data; When a confirmation signal of the transaction information to be signed is received, the transaction information to be signed is signed using the user key.
2. The method according to claim 1, characterized in that The transaction information corresponds to multiple character codes; When there are a plurality of first data packets corresponding one-to-one to the plurality of character codes, each first data packet includes a character code, dot matrix font data corresponding to the character code, and integrity check data for verifying the correspondence between the character code and the dot matrix font data; When there is a first data packet, the first data packet includes the multiple character codes, the dot matrix font data corresponding to each character code, and integrity verification data for verifying the correspondence between the multiple character codes and the multiple dot matrix font data.
3. A transaction signature method based on an intelligent password key, characterized in that: The method is applied to an application end, and the method includes: Determine a plurality of character codes according to the transaction information to be signed, and determine corresponding dot matrix font data according to each character code; Generate integrity check data of the correspondence between the character code and the dot matrix font data using the integrity protection key; Generate the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity verification data; The transaction signature request is sent to the smart password key, so that the smart password key signs the transaction information to be signed according to the transaction signature method based on the smart password key according to any one of claims 1-2.
4. The method according to claim 3, characterized in that The integrity check data of the correspondence between the character encoding and the dot matrix font data is generated using the integrity protection key, including: For any one of the multiple character codes, the integrity protection key is used to generate integrity verification data of the correspondence between the character code and the corresponding dot matrix font data; the integrity verification data is used to verify the integrity of the correspondence between the character code and the corresponding dot matrix font data.
5. The method according to claim 4, characterized in that Generating the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity verification data includes: Generate a plurality of first sub-data packets; each first sub-data packet includes a character code, dot matrix font data corresponding to the character code, and integrity verification data of the correspondence between the character code and the dot matrix font data; The transaction signature is generated based on the multiple first sub-data packets and the transaction information to be signed.
6. The method according to claim 3, characterized in that The integrity check data of the correspondence between the character encoding and the dot matrix font data is generated using the integrity protection key, including: An integrity verification data of a one-to-one correspondence between the plurality of character codes and the plurality of dot matrix font data is generated using an integrity protection key; the integrity verification data is used to verify the integrity of the one-to-one correspondence between the plurality of character codes and the plurality of dot matrix font data.
7. The method according to claim 6, characterized in that Based on the multiple character codes, determining the corresponding dot matrix font data for each character code, and the integrity check data, generating the transaction signature request includes: Generate a second sub-data packet; the second sub-data packet includes the multiple character codes, a plurality of dot matrix font data corresponding to the multiple character codes one by one, and the integrity check data; The transaction signature is generated based on the second sub-data packet and the transaction information to be signed.
8. The method according to claim 4 or 6, characterized in that: The method further comprises: When the integrity protection key is a symmetric key, the integrity verification data is a message authentication code; When the integrity protection key is an asymmetric key, the integrity verification data is a digital signature value.
9. A transaction signature device based on an intelligent password key, characterized in that: The device comprises: A request receiving module, used for receiving a transaction signature request; the transaction signature request includes transaction information to be signed and a first data packet for displaying the transaction information; the first data packet includes a character code corresponding to the transaction information, dot matrix font data corresponding to the character code, and integrity verification data, the integrity verification data is used for verifying the integrity of the correspondence between the character code and the dot matrix font data; A data verification module, used to verify the integrity check data using an integrity protection key; A transaction information display module, used to display the transaction information to be signed on the screen of the smart password key using the dot matrix font data under the condition that the verification is passed; The transaction signing module is used to sign the transaction information to be signed using the user key when receiving a confirmation signal of the transaction information to be signed.
10. A transaction signature device based on an intelligent password key, characterized in that: The device comprises: A dot matrix font data determination module, used to determine a plurality of character codes according to the transaction information to be signed, and to determine corresponding dot matrix font data according to each character code; An integrity check data generation module, used to generate integrity check data of the correspondence between character encoding and dot matrix font data using an integrity protection key; A transaction signature request generation module, configured to generate the transaction signature request based on the multiple character codes, the dot matrix font data corresponding to each character code, and the integrity verification data; The transaction signature module is used to send the transaction signature request to the smart password key, so that the smart password key signs the transaction information to be signed according to the transaction signature method based on the smart password key according to any one of claims 1-2.
11. A computer device, characterized in that: include: A memory and a processor, wherein the memory and the processor are communicatively connected to each other, the memory stores computer instructions, and the processor executes the method according to any one of claims 1 to 8 by executing the computer instructions.
12. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores computer instructions, and the computer instructions are used to enable a computer to execute the method according to any one of claims 1 to 8.