Remote POS Terminal Secret Key Injection via Cryptographic Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The existing methods for acquiring a secret key for POS terminals are complex and inefficient, requiring physical transportation to a fixed secure location, which increases deployment costs and reduces key acquisition efficiency.

Innovation Solution

A method and apparatus for remotely acquiring a secret key using a POS terminal that generates a temporary key pair, performs signature authentication, and communicates with a remote injection server to securely acquire and store the injection key through a network, eliminating the need for physical transportation and simplifying the process.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If physical transportation to a fixed secure location is used for secret key injection, then security is improved, but deployment cost and process complexity increase

Engineering Contradiction:

ImprovesecurityVSAvoidprocess complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces the mechanical/physical system of transporting POS terminals to fixed secure locations with a remote electronic key injection system. The secret key is transmitted through network communication channels rather than physical transportation, eliminating the need for secure physical transport while maintaining security through cryptographic protocols and authentication mechanisms.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent introduces a key management center as an intermediary between the POS terminal and the secret key source. This intermediary handles key generation, packaging, and secure transmission, simplifying the overall process by centralizing key management functions and eliminating the need for direct physical transportation to multiple fixed locations.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If physical transportation to a fixed secure location is used for secret key injection, then security is improved, but acquisition efficiency decreases

Engineering Contradiction:

ImprovesecurityVSAvoidacquisition efficiency

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent replaces the slow physical transportation process with rapid electronic key transmission through network channels. The secret key can be injected remotely and instantaneously, dramatically improving acquisition efficiency while maintaining security through cryptographic protection and authentication protocols.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent performs preliminary actions by pre-generating secret keys at the key management center and preparing them for distribution before actual POS terminal deployment. This allows keys to be ready for immediate injection when needed, eliminating waiting time associated with physical transportation and improving overall acquisition efficiency.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If physical transportation to a fixed secure location is used for secret key injection, then security is improved, but deployment cost increases

Engineering Contradiction:

ImprovesecurityVSAvoiddeployment cost

Core Design Contradiction:

ReliabilityVSLoss of energy

Solution Approach 1:

The patent eliminates the need for expensive secure physical transportation services by replacing them with electronic key transmission through existing network infrastructure. This substitution dramatically reduces deployment costs while maintaining security through cryptographic protocols, eliminating costs associated with secure transport vehicles, personnel, and logistics.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent enables POS terminals to autonomously receive and process secret keys through remote injection without requiring manual intervention or physical transport to secure facilities. The terminal performs self-configuration and key injection automatically, reducing deployment costs by eliminating manual handling and secure transportation requirements.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS11050555B2Method for remotely acquiring secret key, POS terminal and storage medium

Publication Date: 2021.06.29 PAX COMP TECH SHENZHEN

AI summary

A method for remotely acquiring secret key, comprising steps of detecting an injection key acquisition instruction; generating a temporary key pair when the injection key acquisition instruction is detected; acquiring a locally stored private key in a random key pair, and using a private key in the random key pair to perform signature on a public key in the temporary key pair to generate a temporary key signature; acquiring a first identity authentication certificate; sending the temporary key signature and the first identity authentication certificate to a remote injection server; receiving an injection key ciphertext signature and a second identity authentication certificate which is returned by the remote injection server according to the temporary key signature and the first identity authentication certificate; and acquiring and storing an injection key according to the injection key ciphertext signature and the second identity authentication certificate.