Networking activation method and system of POS terminal

Abstract

The invention discloses a networking activation method and system for a POS terminal, and the method comprises the steps: building a link channel between a client and a registration gateway in a server, taking the link channel as a first safety channel, and transmitting the registration information and an activation request of the POS terminal to the server through the first safety channel; a link channel between the POS terminal and the service gateway of the server is established as a second secure channel, and the client is used as forwarding equipment in the second secure channel; a service gateway in the server side issues a service instruction to the POS terminal through the second secure channel according to the activation request; and the POS terminal performs activation operation according to the service instruction. The safety of the activation process can be ensured.

Description

Technical Field

[0001] The present invention relates to the technical field of electronic payment, and in particular to a method and system for activating a POS terminal through networking. Background Art

[0002] When the POS terminal is in a non-use state before leaving the factory or during maintenance, it needs to be activated to enter a normal use state. In the related art, the data of the POS terminal when activated is easily attacked by a third party during the transmission process, and the security is poor. Summary of the invention

[0003] The technical problem to be solved by the present invention is to provide a method and system for POS terminal network activation, which can ensure the security of the activation process.

[0004] In order to solve the above technical problems, the technical solution adopted by the present invention is: a method for activating a POS terminal through networking, comprising: Establishing a link channel between the client and the registration gateway in the server as a first secure channel, and sending the registration information and activation request of the POS terminal to the server through the first secure channel; Establishing a link channel between the POS terminal and the service gateway of the server as a second security channel, wherein the client acts as a forwarding device in the second security channel; The service gateway in the server sends a service instruction to the POS terminal through the second security channel according to the activation request; The POS terminal performs activation operation according to the business instruction.

[0005] The present invention also provides a network activation system for a POS terminal, comprising a server, a client and a POS terminal, wherein the server comprises a registration gateway and a service gateway; The client is used to establish a link channel between the client and the registration gateway as a first security channel, and send the registration information and activation request of the POS terminal to the service end through the first security channel; The POS terminal is used to establish a link channel between the POS terminal and the service gateway as a second security channel, wherein the client acts as a forwarding device in the second security channel; The service gateway is used to send a service instruction to the POS terminal through the second security channel according to the activation request; The POS terminal is also used to perform activation operations according to the business instructions.

[0006] The beneficial effects of the present invention are as follows: by establishing a first secure channel between the client and the registration gateway of the server, the data between the client and the server are transmitted in encrypted form; by establishing a second secure channel between the POS terminal and the business gateway, the client in the middle only performs transparent transmission, so that the data between the client and the POS terminal are also transmitted in encrypted form, thereby ensuring that all data in the activation process are transmitted in encrypted form and cannot be attacked by a third party, thereby ensuring the security of the activation process. BRIEF DESCRIPTION OF THE DRAWINGS

[0007] Figure 1 A flowchart of a method for activating a POS terminal through networking according to the present invention; Figure 2 This is a schematic diagram of the structure of the network activation system according to the first embodiment of the present invention; Figure 3 This is a flow chart of a method according to Embodiment 1 of the present invention.

[0008] Description of labels: 100, server; 200, client; 300, POS terminal; 101. Registration gateway; 102. Business gateway. DETAILED DESCRIPTION

[0009] In order to explain the technical content, achieved objectives and effects of the present invention in detail, the following is an explanation in combination with the implementation modes and the accompanying drawings.

[0010] Before the POS terminal leaves the factory, it needs to be activated in order to simulate the real usage environment for testing. Currently, the POS terminal and UKEY (USB Key) are generally plugged into a PC (Personal Computer) for activation, but the data transmission process from the PC to the POS terminal is sent in plain text, which is easy to be intercepted, modified and replaced, and has poor security.

[0011] In order to solve the above problems, the present invention provides a method and system for POS terminal network activation.

[0012] Please refer to Figure 1 , a method for activating a POS terminal through networking, comprising: Establishing a link channel between the client and the registration gateway in the server as a first secure channel, and sending the registration information and activation request of the POS terminal to the server through the first secure channel; Establishing a link channel between the POS terminal and the service gateway of the server as a second security channel, wherein the client acts as a forwarding device in the second security channel; The service gateway in the server sends a service instruction to the POS terminal through the second security channel according to the activation request; The POS terminal performs activation operation according to the business instruction.

[0013] From the above description, it can be seen that the beneficial effect of the present invention is that the security of the activation process can be guaranteed.

[0014] Further, the link channel between the client and the registration gateway in the server is established as a first security channel, and the registration information and activation request of the POS terminal are sent to the server through the first security channel, including: When the client detects the POS access signal, it requests registration information from the POS terminal, wherein the registration information includes the CPUID and serial number of the POS terminal; The client performs two-way authentication with the registration gateway in the server, and when the two-way authentication is passed, the first security channel is established; The client sends the registration information and activation request to the registration gateway in the server through the first secure channel.

[0015] From the above description, it can be seen that the security of the client and the registration gateway is guaranteed through two-way authentication; the security of data transmission between the client and the server is guaranteed by establishing a secure channel between the client and the server.

[0016] Further, when the client detects the POS access signal, requesting registration information from the POS terminal includes: When the client detects a POS access signal, it authenticates the connected POS terminal; If the identity authentication is passed, the registration information is requested from the connected POS terminal.

[0017] From the above description, it can be seen that the legitimacy of the POS terminal is ensured by performing identity authentication on the POS terminal.

[0018] Furthermore, the client performs two-way authentication with the registration gateway in the server, and after the two-way authentication is passed, establishes a first security channel, including: The client receives a public key certificate and an authentication ciphertext sent by a registration gateway in the server, wherein the public key certificate is generated by the server according to a first public key, the authentication ciphertext is generated by the server according to a first private key, and the first public key and the first private key match each other; The client verifies the public key certificate according to the pre-stored root certificate, obtains the first public key, and authenticates the authentication ciphertext according to the first public key; If the authentication is successful, the first secure channel is established.

[0019] From the above description, it can be seen that the legitimacy and security of the client and the registration gateway are guaranteed through two-way authentication.

[0020] Furthermore, the link channel between the POS terminal and the service gateway of the server is established as a second security channel, including: The POS terminal performs one-way authentication with the business gateway in the client and server, and establishes a second security channel after the one-way authentication is passed.

[0021] From the above description, it can be seen that the POS terminal performs one-way authentication on the service gateway to ensure the legitimacy of the service gateway.

[0022] Furthermore, the POS terminal performs one-way authentication with the service gateway in the client and server, and after the one-way authentication is passed, establishes a second security channel, including: The POS terminal receives the public key sent by the service gateway in the server through the client, and authenticates the public key through the superior certificate stored in itself; If the authentication is successful, a link channel between the POS terminal and the service gateway is established as a second security channel.

[0023] From the above description, it can be seen that the security of the POS terminal and the business gateway is guaranteed through one-way authentication; by establishing a secure channel between the POS terminal and the server, the client is only used as a forwarding tool, so that the data between the client and the POS end is also encrypted, thereby ensuring the security of data transmission between the client and the POS terminal.

[0024] The present invention also provides a network activation system for a POS terminal, comprising a server, a client and a POS terminal, wherein the server comprises a registration gateway and a service gateway; The client is used to establish a link channel between the client and the registration gateway as a first security channel, and send the registration information and activation request of the POS terminal to the service end through the first security channel; The POS terminal is used to establish a link channel between the POS terminal and the service gateway as a second security channel, wherein the client acts as a forwarding device in the second security channel; The service gateway is used to send a service instruction to the POS terminal through the second security channel according to the activation request; The POS terminal is also used to perform activation operations according to the business instructions.

[0025] Furthermore, the client is specifically used to request registration information from the POS terminal when a POS access signal is detected, the registration information including the CPUID and serial number of the POS terminal; perform two-way authentication with the registration gateway in the server, and establish a first security channel after the two-way authentication is passed; and send the registration information and activation request to the registration gateway in the server through the first security channel.

[0026] Furthermore, the POS terminal is specifically used to perform one-way authentication through the client and the service gateway in the server, and to establish a second security channel after the one-way authentication is passed.

[0027] Furthermore, the POS terminal is connected to the client via a wire, and the client is connected to the server via a wireless connection.

[0028] Embodiment 1 Please refer to Figure 2-3 , Embodiment 1 of the present invention is: a method for online activation of a POS terminal, the method is based on an online activation system, such as Figure 2 As shown, the system includes a server 100, a client 200 and a POS terminal 300. The server 100 includes a registration gateway 101 and a business gateway 102. The POS terminal 300 and the client 200 are connected by wire (such as via a USB cable), and the client 200 and the server 100 are connected by wireless (i.e., via a network).

[0029] like Figure 3 As shown, the method comprises the following steps: S1: When the client detects a POS access signal, it requests registration information from the POS terminal.

[0030] Specifically, the client queries the POS access signal. If the POS access signal is detected, it means that a POS terminal has been connected. The client performs identity authentication on the connected POS terminal, such as identifying the PID or UID of the POS terminal and judging whether it is in the preset whitelist. If it is, it means that the identity authentication is passed, otherwise it means that the identity authentication is not passed. After the identity authentication is passed, the client requests registration information from the connected POS terminal, including the CPUID and SN (Serial Number) of the POS terminal.

[0031] S2: The client performs two-way authentication with the registration gateway in the server, and when the two-way authentication is passed, the first security channel is established.

[0032] Specifically, the client selects an operation process (such as an activation operation) and performs two-way authentication with the registration gateway in the server through digital signature technology. If the two-way authentication passes, a link channel between the client and the registration gateway in the server is established as the first security channel.

[0033] The process of two-way authentication is as follows: the server generates a public key certificate based on the first public key, and generates an authentication ciphertext through the first private key. For example, the pre-generated authentication random number can be encrypted by the first private key to obtain the authentication ciphertext, wherein the first public key and the first private key match each other. Then the registration gateway in the server sends the public key certificate, the authentication ciphertext and the authentication random number to the client. The client verifies the public key certificate based on the pre-stored root certificate, obtains the first public key, and decrypts the authentication ciphertext through the first public key to obtain the authentication plaintext. Finally, the authentication plaintext and the authentication random number are compared. If they are consistent, it is determined that the two-way authentication is successful.

[0034] S3: The client sends the registration information and activation request to the registration gateway in the server through the first secure channel.

[0035] S4: The POS terminal performs one-way authentication with the business gateway in the client and server, and establishes a second security channel after the one-way authentication passes.

[0036] The POS terminal and the service gateway perform one-way authentication through digital signature technology (i.e., the POS terminal authenticates the service gateway). Specifically, the service gateway sends the public key to the POS terminal through the client (the client acts as a link forwarder and router), and the POS terminal authenticates the public key based on its own stored superior certificate (the superior certificate is pre-burned into the POS terminal). If the authentication is successful, the one-way authentication is determined to be successful, and a link channel between the POS terminal and the service gateway is established as the second security channel.

[0037] S5: The service gateway of the server sends a service instruction to the POS terminal through the second security channel according to the activation request.

[0038] By establishing a secure channel between the server and the POS terminal, the client in the middle adopts a transparent transmission method for the interactive data between the server and the POS terminal, so that the transmission between the client and the POS terminal is also encrypted, thus effectively ensuring security.

[0039] S6: The POS terminal performs activation operations according to the business instructions.

[0040] In summary, the present invention provides a method and system for online activation of a POS terminal, which establishes a first secure channel between the registration gateway of the client and the server, so that the data between the client and the server are transmitted in encrypted form; and establishes a second secure channel between the POS terminal and the business gateway, in which the client in the middle only performs transparent transmission, so that the data between the client and the POS terminal are also transmitted in encrypted form, thereby ensuring that all data in the activation process are transmitted in encrypted form and cannot be attacked by a third party, thereby ensuring the security of the activation process.

[0041] The above descriptions are merely embodiments of the present invention and are not intended to limit the patent scope of the present invention. Any equivalent transformations made using the contents of the present invention's specification and drawings, or directly or indirectly applied in related technical fields, are also included in the patent protection scope of the present invention.

Claims

1. A method for POS terminal network activation, characterized in that: include: Establishing a link channel between the client and the registration gateway in the server as a first secure channel, and sending the registration information and activation request of the POS terminal to the server through the first secure channel; Establishing a link channel between the POS terminal and the service gateway of the server as a second security channel, wherein the client acts as a forwarding device in the second security channel; The service gateway in the server sends a service instruction to the POS terminal through the second security channel according to the activation request; The POS terminal performs activation operation according to the business instruction.

2. The method for POS terminal network activation according to claim 1, characterized in that: The step of establishing a link channel between the client and a registration gateway in the server as a first security channel, and sending the registration information and activation request of the POS terminal to the server through the first security channel includes: When the client detects the POS access signal, it requests registration information from the POS terminal, wherein the registration information includes the CPUID and serial number of the POS terminal; The client performs two-way authentication with the registration gateway in the server, and when the two-way authentication is passed, the first security channel is established; The client sends the registration information and activation request to the registration gateway in the server through the first secure channel.

3. The method for POS terminal network activation according to claim 2, characterized in that: When the client detects the POS access signal, requesting registration information from the POS terminal includes: When the client detects a POS access signal, it authenticates the connected POS terminal; If the identity authentication is passed, the registration information is requested from the connected POS terminal.

4. The method for activating a POS terminal through networking according to claim 2, characterized in that: The client performs two-way authentication with the registration gateway in the server, and after the two-way authentication is passed, establishes a first security channel, including: The client receives a public key certificate and an authentication ciphertext sent by a registration gateway in the server, wherein the public key certificate is generated by the server according to a first public key, the authentication ciphertext is generated by the server according to a first private key, and the first public key and the first private key match each other; The client verifies the public key certificate according to the pre-stored root certificate, obtains the first public key, and authenticates the authentication ciphertext according to the first public key; If the authentication is successful, the first secure channel is established.

5. The method for POS terminal network activation according to claim 1, characterized in that: The step of establishing a link channel between the POS terminal and the service gateway of the server as a second security channel includes: The POS terminal performs one-way authentication with the business gateway in the client and server, and establishes a second security channel after the one-way authentication is passed.

6. The method for POS terminal network activation according to claim 5, characterized in that: The POS terminal performs one-way authentication with the service gateway in the client and server, and after the one-way authentication is passed, establishes a second security channel, including: The POS terminal receives the public key sent by the service gateway in the server through the client, and authenticates the public key through the superior certificate stored in itself; If the authentication is successful, a link channel between the POS terminal and the service gateway is established as a second security channel.

7. A network activation system for a POS terminal, characterized in that: It includes a server, a client and a POS terminal, wherein the server includes a registration gateway and a business gateway; The client is used to establish a link channel between the client and the registration gateway as a first security channel, and send the registration information and activation request of the POS terminal to the service end through the first security channel; The POS terminal is used to establish a link channel between the POS terminal and the service gateway as a second security channel, wherein the client acts as a forwarding device in the second security channel; The service gateway is used to send a service instruction to the POS terminal through the second security channel according to the activation request; The POS terminal is also used to perform activation operations according to the business instructions.

8. The POS terminal networking activation system according to claim 7, characterized in that: The client is specifically used to request registration information from the POS terminal when a POS access signal is detected, wherein the registration information includes the CPUID and serial number of the POS terminal; perform two-way authentication with the registration gateway in the server, and establish a first security channel after the two-way authentication is passed; The registration information and activation request are sent to the registration gateway in the server through the first secure channel.

9. The POS terminal networking activation system according to claim 7, characterized in that: The POS terminal is specifically used to perform one-way authentication through the client and the service gateway in the server, and to establish a second security channel after the one-way authentication is passed.

10. The POS terminal networking activation system according to any one of claims 7 to 9, characterized in that: The POS terminal is connected to the client via a wire, and the client is connected to the server via a wireless connection.

Images