WO2017050186A1

WO2017050186A1 - Application permission management method and smart pos terminal

Info

Publication number: WO2017050186A1
Application number: PCT/CN2016/099200
Authority: WO
Inventors: 王琪; 才华; 张少飞
Original assignee: 中国银联股份有限公司
Priority date: 2015-09-22
Filing date: 2016-09-18
Publication date: 2017-03-30
Also published as: CN105931042A

Abstract

The present invention relates to an application permission management method and a smart POS terminal. The application permission management method comprises: signing an operating system kernel that succeeds in authentication by using an operating system kernel signature certificate; and when installing and/or repairing an application on a POS terminal that succeeds in authentication, calling a signed operating system kernel, authenticating the application by using an application signing certificate, and only allowing the application that succeeds in authentication to perform corresponding operation on the POS terminal. The present technical scheme can conveniently perform business development while meeting a traditional acquiring function. In order to ensure the security of an operating system kernel of a smart POS terminal, an application that does not succeed in signature authentication is not allowed to do any repair on the operating system kernel, thereby ensuring the security of the operating system kernel.

Description

Application rights management method and intelligent POS terminal

The present application claims the priority of the Chinese Patent Application No. 201510607164.5, filed on Sep. 22, 2015, entitled,,,,,,,,,,,,,,,,,,,,,,,,,

Technical field

The present invention relates to the technical field of payment terminal systems, and in particular, to an application rights management method and an intelligent POS terminal.

Background technique

In China, traditional POS terminals still use a relatively backward technology architecture. Before each terminal is deployed, a professional service organization or an acquirer can burn programs and applications to the POS terminal at one time to meet business needs.

Before the traditional financial POS terminal is deployed, the specialized service organization or the acquiring institution needs to take the program and data corresponding to each POS terminal to a safe area to program and data. When the program or data in the POS terminal needs to be updated, the professional service organization or the acquirer also needs to re-program the program and data corresponding to the POS terminal. There are the following disadvantages when using this method:

1. The burning of POS terminals by specialized service agencies or acquirers increases the cost of labor and operations;

2, the use of manual burning, the entire cycle is long, and need to invest a lot of manpower;

3. The update to the POS terminal is also a long cycle and wastes manpower.

Summary of the invention

To solve the problems of the prior art, the present invention provides an application rights management method and an intelligent POS terminal. The technical solution can expand the service conveniently and efficiently while satisfying the traditional acquiring function. In order to ensure the security of the operating system kernel of the smart POS terminal, the application that has not passed the signature authentication is not allowed to make any modifications to the operating system kernel, thereby ensuring the security of the operating system kernel.

To achieve the above objective, the present invention provides an application rights management method, including:

The operating system kernel passed the authentication is signed using the operating system kernel signing certificate;

When the application is installed and/or modified on the POS terminal that passes the authentication, the signed operating system kernel is invoked, and the application is verified by using the application signature certificate. Only the authenticated application allows the corresponding operation to be performed on the POS terminal.

Correspondingly, in order to achieve the above object, the present invention further provides an intelligent POS terminal, and the smart POS terminal passes the authentication, including:

Application layer and operating system layer; among them,

The operating system layer is configured to run an operating system through which the authentication is performed, and the operating system is signed by an operating system kernel signature certificate;

The application layer is configured to run an installed application under the operating system call, and when installing, and/or modifying an application; the application invokes a signed operating system kernel, using an application signature certificate to install, and / or modified application to verify, only the authenticated application allows the corresponding operation on the POS terminal.

The above technical solution has the following beneficial effects:

1. Using the technical solution described in this paper, the professional service organization or the acquiring institution only needs to perform a burning process for the POS terminal, and then burn the operating system to the hardware device to perform installation, modification, deletion, etc. on the application. Only for the application area, does not involve burning. Therefore, it is only necessary to perform a burn once when the terminal is shipped from the factory. It facilitates service expansion and deployment of POS terminals and greatly reduces the cost of operation and maintenance.

2. When the operating system of the terminal hardware device is burned, the operating system kernel signature public key certificate and the application signature verification certificate are written into the security module (signed by different root certificates), and subsequently verified by the application signature certificate to satisfy the POS terminal. The extension protects the security of the operating system kernel by verifying the signature certificate of the operating system kernel. Only need to perform a burn when the terminal is shipped from the factory to ensure the subsequent security. Moreover, using the hardware security module to save the signature certificate of the terminal operating system kernel and the application's signature certificate can prevent the certificate file from being tampered with.

3, using the operating system kernel signature verification and application signature verification, to ensure scalability, while ensuring the security of the operating system kernel, the application permissions are properly controlled.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is a logic architecture diagram of an intelligent POS terminal according to the present invention;

2 is a second schematic diagram of a logical architecture of an intelligent POS terminal according to the present invention;

FIG. 3 is a flowchart of an application rights management method according to the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The implementation of the technical solution involves the following main components: a customized operating system kernel, an operating system kernel signing certificate and an application signing certificate issued by a trusted authority, and a smart POS terminal hardware security module.

The core of the technical solution is: separating the application layer from the operating system layer by signature, preventing the application of the signature from tampering with the operating system, and protecting the security of the operating system layer. Signatures require an operating system kernel signing certificate or an application signing certificate.

The transformation of the operating system kernel mainly includes the customization of security functions and the development of dedicated component drivers. The customized operating system kernel needs to pass the security detection and certification to confirm that the system functions meet the POS collection requirements. The authenticated operating system kernel is signed with the operating system kernel certificate issued by the trusted authority to ensure that the operating system is not easily tampered with. Moreover, the application allows the application to be installed or updated on the smart POS terminal only by the verification of the application signature certificate.

The security module of the smart POS terminal is used to save the signature certificate of the operating system kernel and the signature certificate of the application, and the security module can be used to verify the signature through the operating system kernel. Only through the signature verification of the operating system kernel, the operating system kernel file is allowed to be modified, thereby ensuring the security of the operating system kernel while satisfying the scalability of the POS terminal.

Embodiment 1

Based on the above description of the working principle, the present invention proposes one of intelligent POS terminals. As shown in Figure 1. From the perspective of logical architecture, intelligent POS terminals include:

Application layer 101 and operating system layer 102; wherein

The operating system layer 102 is configured to run an operating system that passes authentication, and the operating system is signed by an operating system kernel signature certificate.

As can be seen from FIG. 1, the operating system kernel is in the operating system layer 102, and the operating system kernel is customized by the terminal manufacturer or the operating system developer. For smart POS terminals, at least the work necessary for traditional POS terminals should be included. Can be like external password keyboard, printer, magnetic stripe card / IC card reader, etc., can also support new payment methods such as non-payment, two-dimensional code payment. The terminal of the customized operating system kernel needs to be authenticated by a professional security testing organization to confirm that the terminal can be used for financial POS receipt. The operating system kernel can perform read and modify operations, and the certified operating system kernel is signed by the operating system kernel signature certificate issued by the trusted authority to ensure that the certified system kernel is not easily falsified.

The application layer 101 is configured to run an installed application under the operating system call, and when installing, and/or modifying an application; the application invokes a signed operating system kernel, and uses an application signature certificate to install, And/or modified applications are verified, and only authenticated applications are allowed to perform operations on the POS terminal.

Various applications of the POS terminal are installed on the application layer of the smart POS terminal. After the application client passes the security check, the application signing certificate issued by the trusted authority signs the application client. Only application clients that pass the application signature verification are allowed to be installed on the smart POS terminal. Applications can use terminal built-in and/or external devices by calling the operating system kernel driver, but they need to comply with the relevant specifications.

As shown in FIG. 2, the second logical structure diagram of the smart POS terminal proposed by the present invention is shown. On the basis of FIG. 1, further comprising: a hardware layer 103;

The hardware layer 103 includes a security module, configured to store the operating system kernel signature certificate and the application signature certificate.

Before the intelligent POS terminal is deployed, the operating system kernel signature certificate and the application signature certificate file are saved in the security module. The two certificates are issued by different root certificates to protect different contents. Used to verify the signature of the operating system kernel and the signature of the application. A trusted authority (such as UnionPay) will issue an operating system kernel signing certificate for each terminal manufacturer (a vendor recognized by a trusted authority) and issue an application signing certificate.

The intelligent POS terminal provided by the invention can conveniently and safely control the application running on the smart POS terminal safely and ensure that the operating system of the smart POS terminal is not falsified.

Embodiment 2

Based on the description of the above working principle, the present invention proposes an application rights management method. As shown in Figure 3, it includes:

Step 301): sign the operating system kernel that is authenticated by using an operating system kernel signature certificate;

Step 302): When the application is installed and/or modified on the POS terminal that passes the authentication, the signed operating system kernel is invoked, and the application is verified by using the application signature certificate, and only the verified application is allowed on the POS terminal. Take the appropriate action.

The operating system kernel signing certificate and the application signing certificate involved in the method are all stored by the hardware security module of the POS terminal.

For the present method, the operating system kernel allows read operations and modify operations. When an operating system change occurs, it is necessary to verify the consistency of the signature of the written file data with the operating system kernel signing certificate, and only allow the operating system kernel to make corresponding changes when the consistency is reached.

Embodiments of the present invention also provide a computer readable storage medium comprising computer readable instructions, when executed, causing a processor to perform at least the following operations: using an operating system kernel signature for an operating system kernel that passes authentication The certificate is signed; when the application is installed and/or modified on the POS terminal that passes the authentication, the signed operating system kernel is invoked, and the application is verified by using the application signature certificate, and only the verified application is allowed on the POS terminal. Take the appropriate action.

In practice, the POS terminal application rights management process is as follows:

1. The manufacturer customizes the intelligent POS terminal hardware and operating system kernel according to the relevant specifications of the intelligent POS terminal;

The hardware and operating system of the smart POS terminal need to be customized to ensure that POS services can be carried out while ensuring security. For example, a smartphone cannot be used as a POS terminal.

2. The third-party certification body performs security detection and authentication on the smart POS terminal and the operating system kernel submitted by the manufacturer;

3. After the certification is passed, the trusted authority issues an operating system kernel certificate and an application signing certificate for the smart POS terminal;

4. The trusted authority signs the operating system kernel, and presets the system kernel certificate and the application signature certificate to the security module for verifying the signature;

5. When the terminal installs the application, the operating system kernel is invoked, and the application signature is verified by using the application signature certificate in the security module;

6. When the application on the terminal is running, if the operating system kernel needs to be modified, the operating system kernel verification program will be triggered to verify the operating system kernel signature; if the verification is passed, the modification is allowed; otherwise, the operating system kernel is not allowed to be modified;

7. The process ends.

After the terminal is shipped from the factory (the operating system kernel signature certificate has been burned into the security module), the installation and upgrade operations of the application need to verify the consistency between the application signature and the application signature certificate in the security module. Only when the verification is consistent, the installation is permitted. upgrade. When the compliant application is installed on the smart POS terminal, the operating system verifies the consistency between the application signature and the application signature certificate in the security module. If the application is consistent, the application is allowed to be installed. If the application is inconsistent, the application is not allowed to be installed to the terminal.

With the promotion of the terminal and the increase of the application, it is inevitable that the application with hidden problems is installed to the terminal. At this time, if the operation of modifying the operating system kernel occurs during the application running, it is necessary to verify the signature and security of the file data to be written. The consistency of the operating system kernel signing certificate in the module is only allowed to update the operating system kernel to ensure that the operating system kernel can be updated; otherwise, the operating system kernel is not allowed to be modified, which prevents the operating system kernel from being tampered with. .

The application authority management method based on the intelligent POS terminal proposed by the invention adopts the operating system kernel signature verification and the application signature verification manner, and ensures the security of the operating system kernel while scalability, and the application authority is reasonable. control. Since the hardware security module is used to save the signature certificate of the terminal operating system kernel and the application's signature certificate, the certificate file can be prevented from being tampered with. In short, in this program, the traditional financial acquiring platform does not need to be changed, and the implementation is simple and compatible.

The specific embodiments of the present invention have been described in detail with reference to the preferred embodiments of the present invention. All modifications, equivalent substitutions, improvements, etc., made within the spirit and scope of the invention are intended to be included within the scope of the invention.

Claims

An application rights management method, which is characterized by comprising:

The operating system kernel passed the authentication is signed using the operating system kernel signing certificate;

When the application is installed and/or modified on the POS terminal that passes the authentication, the signed operating system kernel is invoked, and the application is verified by using the application signature certificate. Only the authenticated application allows the corresponding operation to be performed on the POS terminal.
The method of claim 1, wherein the operating system kernel signature certificate and the application signature certificate are all stored by a hardware security module of the POS terminal.
The method of claim 1 wherein said operating system kernel allows read operations and modify operations.
The method according to claim 3, wherein when an operating system change occurs, it is necessary to verify the consistency of the signature of the written file data with the operating system kernel signature certificate, and the operating system kernel is allowed only when the consistency is obtained. Make the appropriate changes.
The method according to any one of claims 1 to 3, wherein the hardware of the POS terminal and the operating system kernel are all customized.
An intelligent POS terminal, wherein the smart POS terminal passes the authentication, including:

Application layer and operating system layer; among them,

The operating system layer is configured to run an operating system through which the authentication is performed, and the operating system is signed by an operating system kernel signature certificate;

The application layer is configured to run an installed application under the operating system call, and when installing, and/or modifying an application; the application invokes a signed operating system kernel, using an application signature certificate to install, and / or modified application to verify, only the authenticated application allows the corresponding operation on the POS terminal.
The smart POS terminal according to claim 6, further comprising: a hardware layer;

The hardware layer includes a security module, configured to store the operating system kernel signature certificate and the application signature certificate.
The intelligent POS terminal according to claim 6, wherein the operating system layer is further configured to allow a read operation and a modify operation on the operating system kernel.
The smart POS terminal according to claim 8, wherein the operating system layer is further configured to verify that the signature of the written file data is consistent with the operating system kernel signature certificate when an operating system change occurs. The operating system kernel is allowed to change only when there is consistency.
The smart POS terminal according to any one of claims 6 to 9, wherein the hardware of the POS terminal and the operating system kernel are all customized.