Authorization use method and system of self-service equipment module

By binding the device's unique serial number with the host computer's hardware information using a dual identifier and employing national cryptographic algorithms, the security and compatibility issues of the self-service device authorization mechanism are resolved. This achieves a strong binding between the self-service device and the host computer, as well as dynamic command verification, thereby enhancing the device's security and compliance.

CN121333725APending Publication Date: 2026-01-13HUNAN GREATWALL INFORMATION FINANCIAL EQUIP
5 Cites 0 Cited by

Patent Information

Application Number
CN202511566617.4
Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Filing Date
2025-10-30
Publication Date
2026-01-13

AI Technical Summary

Technical Problem

The existing authorization mechanism of self-service equipment has problems such as insufficient authorization security, lack of dynamic verification and poor adaptability of encryption algorithms, which makes the equipment vulnerable to attacks and causes users to suffer property losses or information leaks.

Method used

It adopts a dual-identifier binding mechanism of unique device number and host computer hardware information, combined with SM2 asymmetric encryption and SM4 symmetric encryption algorithms, to achieve strong binding between device and host computer and dynamic command verification through information exchange between mobile terminal and self-service device module, which complies with national cryptographic standards.

Benefits of technology

It achieves strong binding between self-service devices and host computers, ensuring that unauthorized access and replacement are prevented. Dynamic command verification ensures security, reduces the risk of unauthorized operation, and complies with domestic security standards.

✦ Generated by Eureka AI based on patent content.
Patent Text Reader

Abstract

The invention discloses an authorized use method and system of a self-service equipment module, and the method comprises the steps: a mobile terminal obtains hardware information of an upper computer and a unique number of the self-service equipment module, and transmits the hardware information and the unique number to an authorization service; the authorization service calls the public key to encrypt the received information to generate an encrypted information packet, and returns the encrypted information packet to the mobile terminal; the upper computer obtains an encrypted information packet from the mobile terminal and sends the encrypted information packet to the self-service equipment module, and the self-service equipment module decrypts the encrypted information packet by using a private key to obtain an abstract of hardware information of the upper computer and stores the abstract to a firmware ROM (Read Only Memory); when the upper computer sends an instruction, hardware information of the upper computer is collected in real time, a communication random number and a unique number are obtained from the self-service equipment module, a working key is constructed to encrypt the instruction, and an encrypted instruction packet is sent to the self-service equipment module; the self-service equipment module constructs a decryption key according to the random number and the digest value called from the random number, and decrypts the encryption instruction packet; and if the decryption is successful, executing an instruction obtained by decryption, otherwise, returning abnormal information. According to the method, illegal upper computer access or equipment replacement is avoided, and unauthorized control is completely eradicated from the source.
Need to check novelty before this filing date? Find Prior Art