POS Terminal Key Download via Bidirectional Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current key downloading methods for POS terminals are inefficient and insecure, requiring physical movement of devices to a security machine room for key management, leading to high maintenance costs and labor, and lack effective identification of communication parties, risking security and increasing logistics costs.
Innovation Solution
A key downloading method employing non-symmetric key management technology for bidirectional authentication, where a POS terminal generates and sends random numbers and a hardware sequence number to a key server, which encrypts and decrypts the terminal master key using public and private keys, ensuring secure remote key distribution and storage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual text clear input solution is used for TMK downloading, then the downloading process is simple, but security is compromised as operators can easily intercept TMK clear text
Solution Approach 1:
The patent replaces manual text input (mechanical operation) with automated cryptographic operations. The terminal automatically generates random numbers, performs cryptographic calculations, and exchanges encrypted data with the key server, eliminating the need for operators to manually input clear text keys and thus preventing interception while maintaining operational simplicity.
Solution Approach 2:
The patent introduces cryptographic protocols and encrypted data as intermediaries between the terminal and key server. Instead of directly transmitting or inputting clear text TMK, the system uses random numbers, encrypted challenge-response pairs, and secure key exchange protocols to mediate the key downloading process, ensuring security while maintaining automation.
2Reliability
If IC card cipher text import solution is used, then security is improved compared to manual input, but management costs and workloads increase due to manual IC card insertion and PIN setting
Solution Approach 1:
The patent enables the terminal to autonomously complete the key downloading process without manual IC card insertion or PIN setting. The terminal automatically generates random numbers, performs cryptographic calculations, validates responses from the key server, and completes the key import process programmatically, making the system self-sufficient and eliminating manual management workloads.
Solution Approach 2:
The patent performs preliminary cryptographic setup during terminal initialization or manufacturing. The terminal pre-generates its identity, stores necessary cryptographic parameters, and prepares its key management system in advance, so that during actual key downloading operations, no manual configuration or IC card handling is needed, reducing operational complexity.
3Reliability
If local key parent POS solution is used, then security is maintained through physical control, but logistics costs and maintenance time increase due to required physical movement of devices
Solution Approach 1:
The patent replaces the mechanical requirement of physically moving terminals to a key parent POS device with a remote cryptographic key exchange system. The terminal can download keys remotely over a network connection through secure cryptographic protocols, eliminating the need for physical transport while maintaining security through encrypted communication and mutual authentication mechanisms.
Solution Approach 2:
The patent introduces a key server and encrypted communication channels as intermediaries between the terminal and the key management system. This allows secure key distribution to occur remotely without physical contact, with the cryptographic protocol acting as a secure mediator that maintains security guarantees while enabling remote operation and reducing logistics time.
4Productivity
If remote key downloading is implemented without bidirectional authentication, then logistics costs are reduced, but security is compromised due to inability to identify communication parties
Solution Approach 1:
The patent implements bidirectional authentication with challenge-response feedback mechanisms. The terminal sends a random challenge to the key server, receives an encrypted response, validates it against its own calculations, and similarly authenticates the key server. This feedback loop ensures both parties are verified before key exchange, maintaining security while enabling remote operation without physical logistics.
Solution Approach 2:
The patent uses asymmetric cryptography (public-key infrastructure) to enable secure bidirectional authentication. Each party has a public key for verification and a private key for signing responses. This asymmetric key system allows the terminal and key server to mutually authenticate themselves without sharing secret keys, ensuring communication security while enabling efficient remote key downloading without physical logistics.
Data Source
AI summary
Disclosed is a key downloading method. The method comprises: sending a hardware series number (SN) and a first random number (Rnd1) to a key server; receiving a second random number (Rnd2), a first encrypted text (C1) and a key server working certificate (KSWCRT) sent by the key server; authenticating the validity of KSWCRT by using a KSRCRT; if valid, extracting a public key (PuKS) from the KSWCRT, and decrypting the first encrypted text (C1) by using the PuKS to obtain a third random number (Rnd1′); determining whether Rnd1 is consistent with Rnd1′; if consistent, encrypting the second random number (Rnd2) by using a terminal authentication public key (TKP_Pu) to generate a third encrypted text (C2′), and sending the C2′ to the key server; receiving an key encrypted text (Ctmk) sent by the key server; and obtain a master key (TMK), and storing the TMK in a security control module.