CN103716321B - A kind of terminal master key TMK safety downloading method and systems - Google Patents

Abstract

The present invention discloses a kind of terminal master key TMK method for safely downloading, including step：POS terminal, which calls code keypad to produce, includes public key Pu and private key Pr asymmetric transmission cipher key T K, public key Pu is sent to KMS systems, and private key Pr is stored in code keypad；KMS systems call hardware encryption equipment to generate master key ciphertext Ctmk_tk using public key Pu ciphering terminal master keys TMK, and master key ciphertext is sent to POS terminal；POS terminal decrypts master key ciphertext Ctmk_tk acquisition terminal master key TMK using private key Pr and terminal master key TMK is stored in code keypad.The present invention also provides a kind of safe download systems of terminal master key TMK.Its advantage is：Terminal master key is encrypted using transmission cipher key T K by the present invention, and realize POS terminal remote download terminal master key TMK, the download of terminal master key is greatly facilitated, and cipher key T K is transmitted to randomly generate, transmitting procedure is also closing, therefore is effectively guaranteed terminal master key TMK transmission safety.

Description

A kind of terminal master key TMK safety downloading method and systems

Technical field

The present invention relates to e-payment field, more particularly to a kind of terminal master key TMK safety downloading method and systems.

Background technology

Bank card（BANK Card）Increasingly popularized as the means of payment, common bank card paying system includes salePoint terminal（Point Of Sale, POS）, POS receive single system（POSP）, code keypad（PIN PAD）With hardware encryption equipment（Hardware and Security Module, HSM）.Wherein POS terminal can receive bank card information, with communication work(Can, and receive the instruction completion financial transaction information and the equipment exchanged for information about of teller；POS receives single system to POS terminalManaged concentratedly, including parameter is downloaded, key is downloaded, the transaction request of receiving, processing or forwarding POS terminal, and whole to POSLoopback transaction results information is held, is the system of centralized management and trading processing；Code keypad（PIN PAD）It is that various finance are handed overEasily related key carries out safe storage protection, and PIN is encrypted the safety means of protection；Hardware encryption equipment（HSM）It is the peripheral hardware devices that transmission data are encrypted, the encryption and decryption, checking message and document source for PIN are justTrue property and storage key.Personal identification code（Personal Identification Number, PIN）, i.e. personal identification number isThe data message of holder's identity legitimacy is recognized in on-line transaction, any link does not permit in cyber-net systemPerhaps occur in clear text manner；Terminal master key（Terminal Master Key, TMK）, it is close to working when POS terminal worksThe master key that key is encrypted, encrypting storing is in system database；POS terminal is widely used in bank card and pays occasion, thanSuch as manufacturer's shopping, hotel accommodations, are a kind of indispensable modernization means of payment, have incorporated the various fields of people's lifeClose.Bank card, particularly debit card, are typically all provided with PIN by holder, and in payment process is carried out, POS terminal is except upperSend outside the data such as the magnetic track information of bank card, also want holder to input the identity legitimacy that PIN verifies holder for issuing bank,Ensure bank card safety of payment, protect the property safety of holder.In order to prevent PIN reveal or be cracked, it is desirable to from terminal toIt is whole that safe encipherment protection is carried out to PIN in the whole information interactive process of issuing bank, not in computer network systemAny link, PIN occurs in clear text manner, therefore the PIN of receiving input at present POS terminal requires outfit key management bodySystem.

The key code system of POS terminal is divided into two grades：Terminal master key（TMK）And working key（WK）.Wherein TMK enters to WKRow encipherment protection.Every POS terminal possesses unique TMK, it is necessary to have safeguard protection, it is ensured that can only write device and participate in meterCalculate, it is impossible to read；TMK is a very crucial root key, if TMK is intercepted, working key is just easier to be cracked, willIt is serious to threaten bank card safety of payment.So TMK can be downloaded safely to POS terminal, the pass as whole POS terminal securityKey.

To take precautions against Key Exposure risk, the download of POS terminal master key must control the safe computer room in administrative center to enterOK, by manually concentrating download terminal master key.So as to bring maintenance centre's computer room workload big；Equipment needs transport after dispatching from the factoryTrade company can be just deployed to by downloading key to the safe computer room of administrative center, and cost of transportation rises；In order to concentrate lower dress key, it is necessary to bigThe human hand of amount and working time, the problems such as maintenance cost is big, maintenance period is long.

The content of the invention

In order to solve the above technical problems, one aspect of the present invention is：

A kind of terminal master key TMK method for safely downloading, terminal master key TMK method for safely downloading includes：S1、POSTerminal, which calls code keypad to produce, includes public key Pu and private key Pr asymmetric transmission cipher key T K, and public key Pu is sent to KMS systemsSystem, and private key Pr is stored in code keypad；S2, KMS system call hardware encryption equipment close using public key Pu ciphering terminal mastersKey TMK generates master key ciphertext Ctmk_tk, and master key ciphertext is sent to POS terminal；S3, POS terminal are solved using private key PrClose master key ciphertext Ctmk_tk obtains terminal master key TMK and terminal master key TMK is stored in code keypad.

The present invention, which also provides another technical scheme, is：

A kind of safe download systems of terminal master key TMK, it is characterised in that including KMS systems and KMS system communication linksThe POS terminal and hardware encryption equipment connect；The POS terminal includes TK generation modules, deciphering module, and the KMS systems includeTMK modules；TK generation modules are used to call code keypad generation to include public key Pu and private key Pr asymmetric transmission cipher key T K, andFor public key Pu to be sent to KMS systems, and private key Pr is stored in code keypad；The TMK modules are used to call hardwareEncryption equipment using public key Pu ciphering terminal master keys TMK generate master key ciphertext Ctmk_tk, and by master key ciphertext send toPOS terminal；The deciphering module is used to obtaining terminal master key TMK using private key Pr decryption master key ciphertext Ctmk_tk and willTerminal master key TMK is stored in code keypad.

Terminal master key is encrypted using transmission cipher key T K by the present invention, and realizes POS terminal remote download terminal masterCipher key T MK, has greatly facilitated the download of terminal master key, and transmits cipher key T K and randomly generate, and transmission whole process is allTransmitted in the way of ciphertext, and the TK is unsymmetrical key, therefore it is effectively guaranteed terminal master key TMK transmission peaceEntirely.Further, the identity of POS terminal is verified by digital signature, effectively prevents pseudo-terminal from stealing TMK；Pass through reportThe flag of literary interface judges whether data frame sends and received, and improves master key and successfully downloads.

Brief description of the drawings

Fig. 1 is a kind of structured flowchart of the safe download systems of terminal master key TMK of the invention；

Fig. 2 is a kind of method flow diagram of terminal master key TMK method for safely downloading of the invention.

Main element symbol description：

10：POS terminal；20：KMS systems；30：Hardware encryption equipment；101：TK generation modules；102 deciphering modules；103：TheTwo message interface modules；201：TMK modules；202：First message interface module.

Embodiment

To describe the technology contents of the present invention in detail, feature, the objects and the effects being constructed, below in conjunction with embodimentAnd coordinate accompanying drawing to be explained in detail.

First, abbreviation of the present invention and Key Term are defined and illustrated：

AUK：Authentication Key abbreviation, authentication authorization and accounting key, for PINPAD and key management system KMS itBetween two-way authentication；

CA centers：So-called CA（Certificate Authority）Center, it is to use PKI（Public KeyInfrastructure）Public key infrastructure technology, it is special that network ID authentication service is provided, it is responsible for signing and issuing and managing numberWord certificate, and with third party's trust authority of authoritative and fairness, card is issued in acting like for it in our actual livesThe company of part, such as passport handle mechanism；

HSM：High Security Machine abbreviation, high safety equipment is within the system hardware encryption equipment；

MAK：Mac Key abbreviation, i.e. MAC computation keys, consult to determine 24 byte symmetric keys, for MTMS with clientTK MAC value is calculated between system and KMS systems；

MTMS：Full name Material Tracking Management System, Tracing Material management system mainly existsUsed during plant produced；

KMS systems：Key Management System, key management system, for management terminal master key TMK；

PIK：Pin Key abbreviation, i.e. Pin encryption keys, are one kind of working key；

PINPAD：Code keypad；

PK：Protect Key abbreviation, that is, protect key, consults to determine with client, 24 byte symmetric keys.ForTK encrypted transmission between MTMS/TCS and KMS；

POS：Point Of Sale abbreviation, i.e. point-of-sale terminal

SNpinpad：The sequence number of code keypad, it is consistent with POS terminal sequence number SNpos when PINPAD is built-in；

SN：The sequence number of payment terminal；

TEK：Transmission Encrypt Key abbreviation, that is, transmit encryption key, and 24 byte symmetric keys are used forTMK encrypted transmission between PINPAD and key management system KMS；

TK：Transmission Key abbreviation, that is, transmit key.Transmission key is by transmission encryption key TEK and doubleConstituted to certification key A UK；

TMS：Terminal Management System abbreviation, i.e. terminal management system, for completing payment terminalThe function such as information management, software and parameter configuration, remote download, the management of terminal running state information, remote diagnosis；

TMK：Terminal Master Key abbreviation, i.e. terminal master key, single system is received for payment terminal and paymentBetween working key encrypted transmission；

Safe house：With higher security level not, for the room of service device, the room needs ability after authenticationEnter.

Intellective IC card：For CPU card, the integrated circuit in card includes central processor CPU, programmable read only memoryEEPROM, random access memory ram and card internal operating system COS (the Chip Operating being solidificated in read only memory ROMSystem), data are divided into outside read and inter-process part in card.

Symmetric key：Sending and receiving the both sides of data must use identical key that fortune is encrypted and decrypted to plaintextCalculate.Symmetric key encryption algorithm mainly includes：DES, 3DES, IDEA, FEAL, BLOWFISH etc..

Unsymmetrical key：Rivest, shamir, adelman needs two keys：Public-key cryptography（Private key Public key）With it is privately ownedKey（Public key Private key）.Public-key cryptography and private cipher key are a pair, if data are encrypted with public-key cryptography,It could only be decrypted with corresponding private cipher key；If be encrypted with private cipher key pair data, then only use corresponding public affairsOpening key could decrypt.Because encrypt with the decryption key that to use two different, this algorithm be called it is asymmetric plusClose algorithm.Rivest, shamir, adelman realizes that the basic process that confidential information is exchanged is：Party A generates a pair of secret keys and will be thereinOne discloses as Public key to other sides；Confidential information is encrypted using the key by the Party B for obtaining the Public keyAfter be then forwarded to Party A；Party A is decrypted private key to the information after encryption with oneself the another of preservation again.Party A canParty B is then forwarded to after confidential information is encrypted with the public key using Party B；Party B again with the private spoon of oneself to encryption afterInformation is decrypted.Main algorithm has RSA, Elgamal, knapsack algorithm, Rabin, D-H, ECC（Elliptic curve encryption algorithm）.

RSA：A kind of asymmetric key algorithm.RSA public key encryption algorithms are 1977 by Ron Rivest, AdiShamirh and Len Adleman exist（Massachusetts Institute Technology）Exploitation.RSA is named from the name for developing their threes.RSA is current most influential public key encryption algorithm, and it can resist up to the present known all cryptographic attacks, byISO is recommended as public key data encryption standard.It is true that RSA Algorithm is based on a foolproof number theory：Two Big primes are multipliedIt is very easy.RSA Algorithm is first and can be also easy to understand and operate while be used for the algorithm of encrypted and digitally signed.RSA isBe studied widest public key algorithm, from three ten years till now are proposed, experienced the test of various attacks, gradually forPeople receive, and are widely considered to be one of current classic public key scheme.

TDES Triple-DES：DES is a kind of symmetric encipherment algorithm, and key is 8 bytes.TDES is the encryption based on DESAlgorithm, its key is 16 bytes or 24 bytes.TDES/3DES is English TripleDES abbreviated expression（I.e. triple data encryption marksIt is accurate）, DES is then English Data Encryption Standard（Number encryption standard）Abbreviated expression.DES is that a kind of symmetric key addsClose algorithm, i.e. data encryption key and decruption key identical AES.DES is developed by IBM Corporation in 1970sAnd openly, then used for U.S. government, and recognized by NBS and ANSI (ANSI).TDES/3DES is a kind of pattern of des encryption algorithm, and it carries out Tertiary infilling using the data key of 3 64.It is DESA safer deformation.

Referring to Fig. 1, be a kind of structured flowchart of the safe download systems of terminal master key TMK of an embodiment of the present invention,The system includes KMS systems 20, the POS terminal 10 communicated to connect with KMS systems 20 and hardware encryption equipment 30；The POS is wholeEnd 10 includes TK generation modules 101, deciphering module 102, and the KMS systems 20 include TMK modules 201.

TK generation modules 101 are used to call the generation of code keypad 30 to include public key Pu and private key Pr asymmetric transmission keyTK, and for public key Pu to be sent to KMS systems 20, and private key Pr is stored in code keypad；

The TMK modules 101 are used to call hardware encryption equipment 30 close using public key Pu ciphering terminal master keys TMK generation mastersKey ciphertext Ctmk_tk, and master key ciphertext is sent to POS terminal 10；

The deciphering module is used to obtaining terminal master key TMK using private key Pr decryption master key ciphertext Ctmk_tk and willTerminal master key TMK is stored in code keypad.

Wherein, the POS terminal 10 also includes Digital Signature module；

The Digital Signature module is used to by terminal serial number SN and terminal master key download request pack using privateKey Pr is digitally signed, and the terminal serial number SN and terminal master key download request and public key Pu mono- after signature is concurrentGive KMS systems 20.

Wherein, the KMS systems 20 also include authentication module；

The authentication module is used for the legitimacy that the digital signature is verified using the public key Pu,

And for when being verified, calling hardware encryption equipment 30 to use public key Pu ciphering terminal master keys TMK generation mastersKey ciphertext Ctmk_tk, and master key ciphertext is sent to POS terminal 10.

Before POS terminal 10 is sent to public key Pu to KMS systems 20 and terminal master key downloads application, pre-installed by burning pieceThe digital signature information of each POS terminal 10 is imported KMS systems 20 by mode, therefore is sent out when KMS systems 20 receive POS terminal 10When the public key Pu and master key download request that send, it becomes possible to obtain digital signature information with public key Pu decryption digital signature, so thatWhether the POS terminal 10 that terminal master key download can be sent is legal POS terminal 10, so as to effectively prevent pseudo-terminal from passing throughUpload public key Pu and steal terminal master key TMK.

Wherein, the POS terminal 10 also includes TR-31 packetization modules；

The TR-31 packetization modules are used to be packed TMK by TR-31 forms, are stored in after packing with ciphertext formIn code keypad.

Cutting memory cell or 3DES encryption unit by the TMK makes TMK be stored in POS terminal in the form of ciphertextIn key keyboard, so as to further strengthen securities of the TMK in POS terminal.

Wherein, the KMS systems 10 include the first message interface module 202, and the POS terminal also connects including the second messageMouth mold block 103, the POS terminal 10 carries out master key ciphertext with KMS systems 20 by first, second message interface moduleCtmk_tk is sent and received, and the first, second message interface module is provided with for detecting whether terminal master key TMK hasThe flag of subsequent frame.

KMS systems 20 by the first message interface module 202 to POS terminal 10 send terminal master key TMK when, by firstMessage interface module 202 judges whether the master key ciphertext Ctmk_tk has subsequent frame, when there is subsequent frame by home position 1And the end of current data frame is inserted in, by home position 0 and insert the end of current data frame when without subsequent frame；POS is wholeWhen end 10 receives the master key ciphertext Ctmk_tk by the second message interface module, the current data frame that judgement is receivedThe value of flag, so as to learn whether the master key ciphertext Ctmk_tk receives completely.Therefore first message interface is passed throughThe message interface module 103 of module 202 and second can conveniently learn whether terminal master key TMK successfully sends and receives.

As shown in Fig. 2 being a kind of method flow diagram of terminal master key TMK method for safely downloading of the invention, terminal masterCipher key T MK method for safely downloading includes：

S1, POS terminal, which call code keypad to produce, includes public key Pu and private key Pr asymmetric transmission cipher key T K, by public keyPu is sent to KMS systems, and private key Pr is stored in code keypad；

S2, KMS system call hardware encryption equipment to generate master key ciphertext using public key Pu ciphering terminal master keys TMKCtmk_tk, and master key ciphertext is sent to POS terminal；

S3, POS terminal obtain terminal master key TMK and by terminal master using private key Pr decryption master key ciphertext Ctmk_tkCipher key T MK is stored in code keypad.

Wherein, the step S1 is specifically included：

POS terminal, which calls code keypad to produce, includes public key Pu and private key Pr asymmetric transmission cipher key T K, and by terminalSequence number SN and terminal master key download request are packed to be digitally signed using private key Pr, and by the terminal after signatureSequence number SN and terminal master key download request are sent to KMS systems in the lump with public key Pu.

Wherein, the step S2 is specifically included：

KMS systems verify the legitimacy of the signature using the public key Pu, if the verification passes, call hardware encryption equipmentMaster key ciphertext Ctmk_tk is generated using public key Pu ciphering terminal master keys TMK, and master key ciphertext is sent to POS terminal.

Before POS terminal is sent to public key Pu to KMS systems and terminal master key downloads application, by way of burning piece prepackageThe digital signature information of each POS terminal is imported into KMS systems, thus when KMS systems receive POS terminal transmission public key Pu andDuring master key download request, it becomes possible to digital signature information is obtained with public key Pu decryption digital signature, so as to send terminalWhether the POS terminal that master key is downloaded is legal POS terminal, so as to effectively prevent pseudo-terminal from stealing end by uploading public key PuHold master key TMK.

Wherein, the step S3 is specifically included：

POS terminal obtains terminal master key TMK using private key Pr decryption master key ciphertexts Ctmk_tk, and terminal master is closeKey TMK is packed by TR-31 forms, is stored in after packing with ciphertext form in code keypad.

Cutting memory cell or 3DES encryption unit by the TMK makes TMK be stored in POS terminal in the form of ciphertextIn key keyboard, so as to further strengthen securities of the TMK in POS terminal.

Wherein, the POS terminal carries out master key ciphertext Ctmk_tk in the way of message with KMS systems and sent and received,It is provided with whether terminal master key TMK has the flag of subsequent frame in the message interface of POS terminal and KMS systems.

When KMS system messages interface module is to POS terminal transmission terminal master key TMK, institute is judged by message interface moduleState whether master key ciphertext Ctmk_tk has subsequent frame, by home position 1 and the end of current data frame is inserted in when there is subsequent frameTail, by home position 0 and the end of current data frame is inserted when without subsequent frame；POS terminal is received by message interface moduleDuring the master key ciphertext Ctmk_tk, the value of the flag of the current data frame received is judged, so as to learn the master keyWhether ciphertext Ctmk_tk receives completely.Therefore whether terminal master key TMK can conveniently be learnt by the message interface moduleSuccessfully send and receive.

In the present invention, TK original uncommon Kazakhstan value is calculated when transmission cipher key T K is produced, when storing, transmit or use every time TKWhen first verify TK uncommon Kazakhstan value, TK can be just used after upchecking.It can prevent storage from setting by the uncommon Kazakhstan value for verifying TKThe standby abnormal error in data for causing to store, determines whether key is correct.

Terminal master key is encrypted using transmission cipher key T K by the present invention, and realizes POS terminal remote download terminal masterCipher key T MK, has greatly facilitated the download of terminal master key, and transmits cipher key T K and randomly generate, and transmission whole process is allTransmitted in the way of ciphertext, and the TK is unsymmetrical key, therefore it is effectively guaranteed terminal master key TMK transmission peaceEntirely.Further, master key TMK of the present invention is generated by KMS systems, therefore facilitates KMS systems to the follow-up of master key TMKMaintenance and management.Further, the identity of POS terminal is verified by digital signature, effectively prevents pseudo-terminal from stealingTMK；Judge whether data frame sends by the flag of message interface to receive, improve master key and successfully download.

Embodiments of the invention are the foregoing is only, are not intended to limit the scope of the invention, it is every to utilize this hairEquivalent structure or equivalent flow conversion that bright specification and accompanying drawing content are made, or directly or indirectly it is used in other related skillsArt field, is included within the scope of the present invention.

Claims (6)

1. a kind of terminal master key TMK method for safely downloading, it is characterised in that including step：

S1, POS terminal, which call code keypad to produce, includes public key Pu and private key Pr asymmetric transmission cipher key T K, and public key Pu is sent outKMS systems are delivered to, and private key Pr is stored in code keypad；

The step S1 is specifically included：

POS terminal, which calls code keypad to produce, includes public key Pu and private key Pr asymmetric transmission cipher key T K, and by terminal serialNumber SN and terminal master key download request are packed and are digitally signed using private key Pr, and by the terminal serial after signatureNumber SN and terminal master key download request are sent to KMS systems in the lump with public key Pu；

S2, KMS system call hardware encryption equipment to generate master key ciphertext Ctmk_tk using public key Pu ciphering terminal master keys TMK,And send master key ciphertext to POS terminal；

The S2 is specifically included：

KMS systems verify the legitimacy of the signature using the public key Pu, if the verification passes, call hardware encryption equipment to usePublic key Pu ciphering terminal master keys TMK generates master key ciphertext Ctmk_tk, and master key ciphertext is sent to POS terminal；

S3, POS terminal obtain terminal master key TMK and by terminal master key using private key Pr decryption master key ciphertext Ctmk_tkTMK is stored in code keypad.

2. terminal master key TMK method for safely downloading according to claim 1, it is characterised in that the step S3 is specificIncluding：

POS terminal obtains terminal master key TMK using private key Pr decryption master key ciphertext Ctmk_tk, and by terminal master key TMKPacked, be stored in after packing with ciphertext form in code keypad by TR-31 forms.

3. terminal master key TMK method for safely downloading according to claim 1, it is characterised in that the POS terminal withKMS systems are carried out master key ciphertext Ctmk_tk in the way of message and sent and received, and are connect in the message of POS terminal and KMS systemsIt is provided with whether terminal master key TMK has the flag of subsequent frame in mouthful.

4. a kind of safe download systems of terminal master key TMK, it is characterised in that communicated to connect including KMS systems, with KMS systemsPOS terminal and hardware encryption equipment；The POS terminal includes TK generation modules, deciphering module, and the KMS systems include TMKModule；

TK generation modules are used to call code keypad generation to include public key Pu and private key Pr asymmetric transmission cipher key T K, and are used forPublic key Pu is sent to KMS systems, and private key Pr is stored in code keypad；

The TMK modules are used to call hardware encryption equipment to generate master key ciphertext using public key Pu ciphering terminal master keys TMKCtmk_tk, and master key ciphertext is sent to POS terminal；

The deciphering module is used to obtain terminal master key TMK and by terminal using private key Pr decryption master key ciphertext Ctmk_tkMaster key TMK is stored in code keypad；

The POS terminal also includes Digital Signature module；

The Digital Signature module is used for private key that terminal serial number SN and terminal master key download request are packed and usedPr is digitally signed, and the terminal serial number SN and terminal master key download request after signature are sent in the lump with public key PuGive KMS systems；

The KMS systems also include authentication module；

The authentication module is used for the legitimacy that the digital signature is verified using the public key Pu,

And for when being verified, calling hardware encryption equipment close using public key Pu ciphering terminal master keys TMK generation master keysLiterary Ctmk_tk, and master key ciphertext is sent to POS terminal.

5. the safe download systems of terminal master key TMK according to claim 4, it is characterised in that the POS terminal is also wrappedInclude TR-31 packetization modules；

The TR-31 packetization modules are used to be packed TMK by TR-31 forms, are stored in and are stored with ciphertext form after packingIn code keypad.

6. the safe download systems of terminal master key TMK according to claim 4, it is characterised in that the KMS systems includeFirst message interface module, the POS terminal also includes the second message interface module, and the POS terminal and KMS systems pass through theFirst, the second message interface module progress master key ciphertext Ctmk_tk sends and receives, the first, second message interface moduleIt is provided with for detecting whether terminal master key TMK has the flag of subsequent frame.