Terminal Access Key Management for Secure Bank Intranet Links
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security risks associated with mobile terminals accessing a bank's intranet through the Internet, as existing security measures primarily focus on data transmission and do not provide comprehensive security protection for the entire access link.
Innovation Solution
A security management system that includes a first server generating a unique encryption key based on terminal device registration time, identification, and fingerprint information, using a second key for encryption, and implementing a symmetric encryption mechanism between the terminal and server to ensure secure access and communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If mobile terminals access the bank's intranet through the Internet, then network accessibility and service availability are improved, but security risks and vulnerability to unauthorized access increase
Solution Approach 1:
The system performs preliminary security actions by generating device fingerprints before access, creating cryptographic keys in advance, and establishing trusted device profiles. The server generates a first key based on registration time, identification information, and fingerprint information before the actual access occurs, preparing security credentials beforehand to enable both accessibility and security.
Solution Approach 2:
The patent introduces cryptographic keys and device fingerprints as intermediary elements between the mobile terminal and the bank's intranet. These intermediaries act as mediators that enable secure communication without direct exposure, with the first key serving as a secret intermediary that establishes trusted connections while preventing unauthorized access.
2Reliability
If comprehensive security protection is implemented for the entire access link, then security reliability is improved, but system complexity and implementation difficulty increase
Solution Approach 1:
The patent applies local quality by implementing security measures at specific critical points rather than uniformly across the entire system. Device fingerprints are generated locally on the terminal device, the first key is created based on local registration information, and encryption/decryption operations occur at specific interfaces. This localized approach provides comprehensive security while avoiding the complexity of uniform security implementation throughout the entire access link.
Solution Approach 2:
The system changes parameters by transforming device identification information into cryptographic keys through hash algorithms. The first key is generated by changing parameters based on registration time, identification information, and fingerprint information. This parameter transformation approach provides robust security through cryptographic operations without requiring complex security infrastructure, as the security strength derives from parameter transformation rather than system complexity.
Data Source
AI summary
A security management system includes a first server. The first server is configured to: obtain access information of a terminal device; generate, if the access information of the terminal device meets an access condition, a first key based on a registration time of the terminal device, identification information of the terminal device, and fingerprint information of the terminal device; encrypt the first key using a second key, the first key being different from the second key; and send the encrypted first key to the terminal device, so that the terminal device decrypts the encrypted first key using the second key.


