Electronic bank safety authorization system and method based on CPK

Abstract

A safety certification system of electronic bank based on CPK comprises an account number card with the first CPK safety chip for obtaining system completeness code through transaction data and for using private key to make signature, client end with the second CPK safety chip for obtaining client end transaction data and system completeness code as well as signature and for generating random number to encipher data then to encipher random number, bank end with the third CPK safety chip for deciphering data from client end and for verifying signature and completeness code.

Description

technical field [0001] The invention relates to the field of digital communication security authentication, in particular to an electronic bank security authentication system and method based on combined public key algorithm (CPK) security authentication. Background technique [0002] E-banking refers to an electronic business that deposits, withdraws, and transfers funds through ATMs and POS machines. [0003] So far, magnetic cards have been used in electronic banking systems, which has brought great convenience to payment and played a historical role. But security has also been greatly challenged. The magnetic card verification system is realized by symmetric key encryption, that is, the customer key is also available in the bank. Otherwise, the bank will not be able to decrypt the verification. This approach has the following two problems: [0004] One is because banks store all customer information, especially symmetric keys and passwords, so the loss of bank inform...

AI Technical Summary

Problems solved by technology

[0005] The second is that the bank keeps all the information of the customer, so it is quite easy for bank insiders to obtain the password and steal the customer's deposit

[0008] However, this method of passive security authentication for electronic banking systems requires a third-party certification mechanism and must be supported by an online operating certificate library. It maintains a database with a large amount of data, takes up a large amount of storage space, and is not efficient at runtime. , the processing speed is very slow, and it cannot adapt to the active protection requirements of public network security such as e-banking from passive protection to credible requirements, and cannot establish a trusted system in the ultra-large-scale public network such as e-banking

Images