WO2018166163A1 - Pos terminal control method, pos terminal, server and storage medium - Google Patents

Abstract

Provided is a POS terminal control method, a POS terminal, a server, and a storage medium. The method comprises: receiving an instruction of request for feature information sent by an authorization tool (S202); generating first feature information according to the instruction (S204); returning the first feature information to the authorization tool (S206); receiving authorization information returned by the authorization tool and generated by the authorization machine according to the first feature information (S208); when the authorization information is verified successfully, then extracting second feature information in the authorization information (S210); when the second feature information is the same as the first feature information, then after the authorization information is saved, sending an authorization success result to the authorization tool (S212); and receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction (S214).

Description

POS terminal control method, POS terminal, server and storage medium Technical field

The present invention relates to the field of network communications, and in particular, to a POS terminal control method, a POS terminal, a server, and a storage medium.

Background technique

POS terminal (point of sale) as a payment device, with different usage groups, such as production line personnel, maintenance personnel, application developers, product developers, banks and third-party payment institutions, merchants, etc., different The group has different usage scenarios and different requirements for the behavior characteristics of the terminal.

In the conventional technology, when a POS terminal switches between different users or a non-passage scenario, it is usually performed using a fixed password or the like. However, in this mode, when the fixed password is stolen, anyone can operate the POS terminal, thereby reducing the security of the POS terminal.

Summary of the invention

The POS terminal control method, POS terminal, server and storage medium disclosed in the present application solve one or more problems involved in the background art.

A POS terminal control method includes:

Receiving an instruction for requesting feature information sent by the authorization tool;

Generating first feature information according to the instruction;

Returning first feature information to the authorization tool;

Receiving, by the authorization tool, the authorization information generated by the authorization machine according to the first feature information;

When the verification of the authorization information is successful, extracting the second feature information in the authorization information;

When the second feature information is the same as the first feature information, saving the authorization information Sending a successful authorization result to the authorization tool; and

Receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction.

A POS terminal control method includes:

Receiving, by the authorization tool, the first feature information acquired by the POS terminal;

Performing verification on the first feature information;

When the first feature information is successfully verified, the first feature information and the authorization data are sent to an authorization machine for encryption;

Receiving, by the authorization machine, authorization information formed by encrypting the first feature information and the authorization data; and

Sending the authorization information to the POS terminal by using the authorization tool, so that the POS terminal performs state switching.

A POS terminal includes a memory and a processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to perform the following steps:

Receiving an instruction for requesting feature information sent by the authorization tool;

Generating first feature information according to the instruction;

Returning first feature information to the authorization tool;

Receiving, by the authorization tool, the authorization information generated by the authorization machine according to the first feature information;

When the verification of the authorization information is successful, extracting the second feature information in the authorization information;

When the second feature information is the same as the first feature information, after the authorization information is saved, the authorization success result is sent to the authorization tool;

Receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction.

A server includes a memory and a processor, the memory storing instructions that, when executed by the processor, cause the processor to perform the following steps:

Receiving, by the authorization tool, the first feature information acquired by the POS terminal;

Performing verification on the first feature information;

When the first feature information is successfully verified, the first feature information and the authorization data are sent to an authorization machine for encryption;

Receiving, by the authorization machine, authorization information formed by encrypting the first feature information and the authorization data; and

Sending the authorization information to the POS terminal by using the authorization tool, so that the POS terminal performs state switching.

A computer readable storage medium having stored thereon a computer program that, when executed by a processor, implements the following steps:

Receiving an instruction for requesting feature information sent by the authorization tool;

Generating first feature information according to the instruction;

Returning first feature information to the authorization tool;

Receiving, by the authorization tool, the authorization information generated by the authorization machine according to the first feature information;

When the verification of the authorization information is successful, extracting the second feature information in the authorization information;

When the second feature information is the same as the first feature information, after the authorization information is saved, the authorization success result is sent to the authorization tool;

Receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction.

The POS terminal control method, the POS terminal, the server, and the storage medium, the POS terminal may generate the first feature information according to the instruction of the requesting feature information of the authorization tool, so that each time the state of the POS terminal is to be switched, the POS terminal generates a new one. The first feature information, so that even if the first feature information is illegally acquired at a certain authorization, the state of the POS terminal cannot be switched according to the first feature information, thereby ensuring the security of the POS terminal, and further, The POS terminal is authorized by a unified authorization machine instead of being authorized locally at the POS terminal, which improves the security of the POS terminal. In addition, the authorization information is encrypted by the authorization machine. After the verification of the authorization information by the POS terminal is successful, the second feature information and the first feature information are used to determine that the authorization information is for the POS terminal, thereby further ensuring the POS terminal. Security, security for state switching of POS terminals Sex provides effective protection.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any creative work.

1 is an application scenario diagram of a POS terminal control method in an embodiment;

2 is an internal structural diagram of a POS terminal in an embodiment;

3 is an internal structural diagram of an authorization server in an embodiment;

4 is a flowchart of a method for controlling a POS terminal in an embodiment;

5 is a timing diagram of a method for controlling a POS terminal in an embodiment;

6 is a state transition diagram of a POS terminal in the embodiment shown in FIG. 1;

Figure 7 is a flow chart of the verification step in an embodiment;

8 is a flowchart of a method for controlling a POS terminal in another embodiment;

9 is a structural block diagram of a POS terminal in an embodiment;

Figure 10 is a structural block diagram of an authorization server in an embodiment.

detailed description

The present invention will be further described in detail below with reference to the accompanying drawings and embodiments. It is understood that the specific embodiments described herein are merely illustrative of the invention and are not intended to limit the invention.

Before describing in detail embodiments according to the present invention, it should be noted that the described embodiments are primarily in combination with the steps and system components of the POS terminal control method, POS terminal, server, and storage medium. Accordingly, the system components and method steps have been shown in the drawings by the conventional symbols in the appropriate positions, and only the details relating to the understanding of the embodiments of the present invention are shown in order to avoid the benefit of the present invention. Those details that are apparent to those of ordinary skill in the art are blurred The disclosure of the present invention.

In this context, relational terms such as left and right, up and down, before and after, first and second are only used to distinguish one entity or action from another entity or action, without necessarily requiring or implying such Any actual relationship or order between entities or actions. The terms "comprising," "comprising," or "include" or "includes" or "includes" or "includes" or "includes" or "includes" An element, or an element inherent to such a process, method, item, or device.

Referring to FIG. 1 , FIG. 1 is an application scenario diagram of a method for controlling a POS terminal in an embodiment. In this embodiment, a plurality of POS terminals, a plurality of authorization tools, an authorization server, and an authorization machine are included. The POS terminal can communicate with the authorization tool through a serial port or a USB (Universal Serial Bus), and the authorization tool can communicate with the authorization server through the wireless network, and the authorization server communicates with the authorization machine.

In addition to the functions of the conventional POS machine, the POS terminal can also control the characteristics in each state to ensure the security of the data related to the authorization. The POS terminal pre-stores the private key corresponding to the authorized machine. A public key that forms a pair of RSA (Asymmetric Encryption Algorithm) keys with the private key.

The authorization tool is a human-computer interaction tool for the user to perform the authorization operation. The authorization tool can be a terminal such as a computer or a mobile phone. The authorization tool can use http (HyperText Transfer Protocol) or https protocol (Hypertext Transfer Protocol over Secure). The Socket Layer, a hypertext transfer protocol for security purposes, communicates with the authorization server and, on the other hand, interacts with the POS terminal via a serial or USB cable.

The authorization server is configured to manage the permissions of various types of POS terminals and users who use the authorization tool, receive the authorization request submitted by the authorization tool, and interact with the authorization machine to obtain the authorization information, and then return to the authorization tool and the POS terminal, which may have the following Functions: user management, login management, rights management (the authorization type available to the user in the background, the foreground only shows the available authorization type), external interface management, processing POST request (authorization request), and interaction with the authorized machine.

Authorization machine, used to store the authorized private key, connected to the authorization server, responsible for data encryption, The authorization machine is not connected to the network, so that the physical key in the authorization machine can be ensured that the private key in the authorization machine is not tampered by not being connected to the physical security, thereby ensuring the security of the entire system.

Specifically, after the POS terminal and the authorization tool are connected, the POS terminal may receive an instruction for requesting the feature information sent by the authorization tool, and then generate the first feature information according to the instruction, and return the generated first feature information to the authorization tool. The authorization tool sends the first feature information to the authorization server through the network connection, and the authorization server first checks the first feature information, and when the verification succeeds, sends the first feature information and the authorization data to the authorization machine. The authorization machine may generate the authorization information according to the first feature information and the authorization data, and the authorization machine returns the generated authorization information to the authorization server for storage, and then the authorization server sends the authorization information to the authorization tool through the network, and the authorization tool will The authorization information is returned to the POS terminal, and the POS terminal checks the authorization information. After the verification succeeds, the second feature information in the authorization information is extracted, only when the first feature information and the second feature information are the same. The POS terminal saves the authorization information and returns the authorization to the authorization tool. Fruit, so that the tool may send the authorization state switching instruction to the POS terminal, the POS terminal which can switch the current switching state based on the state.

In one embodiment, as in FIG. 2, a POS terminal is also provided, the POS terminal including a processor, a storage medium, a memory, and an interface connected through a system bus. An operating system is stored in the storage medium, and computer executable instructions are also stored. When the computer executable instructions are executed by the processor, a POS terminal control method can be implemented. The interface can be a USB interface or a string, and is used to communicate with an authorization tool through a serial port or a USB, thereby implementing communication with the outside world, and controlling state switching of the POS terminal. The processor is used to improve the calculation and control capabilities, and supports the operation of the entire POS terminal, including the normal operation of the normal use function of the POS terminal and the normal operation of the debugging function of the POS terminal. Memory is used to provide an environment for the operation of the POS terminal control program in the storage medium.

With continued reference to FIG. 2, there is also provided a computer readable storage medium having stored thereon a computer program, such as the non-volatile storage medium shown in FIG. 2, wherein the program is implemented by a processor to implement a POS Terminal control method.

In one embodiment, as shown in FIG. 3, an authorization server is also provided, the authorization server. A processor, storage medium, memory, network interface, USB interface, and serial port connected through a system bus. An operating system is stored in the storage medium, and computer executable instructions can also be stored. When the computer executable instructions are executed by the processor, a POS terminal control method can be implemented. The processor is used to increase computing and control capabilities to support the operation of the entire portable electronic device. The memory is used to provide an environment for the operation of the POS terminal control device in the storage medium for network communication with the authorization tool. The USB interface or serial port is used to communicate with the authorized machine.

With continued reference to FIG. 3, there is also provided a computer readable storage medium having stored thereon a computer program, such as the non-volatile storage medium shown in FIG. 3, wherein the program is implemented by a processor to implement a POS Terminal control method.

Referring to FIG. 4, FIG. 4 is a flowchart of a method for controlling a POS terminal according to an embodiment. This embodiment is applied to the POS terminal in FIG. 1 to illustrate. The POS terminal runs a POS terminal control program, and the POS terminal control method is used to implement the real-time POS terminal control method. The POS terminal control method may include:

S202: Receive an instruction for requesting feature information sent by an authorization tool.

Specifically, the feature information refers to information that can uniquely determine the POS terminal, for example, it may include a serial number when the POS terminal is shipped, and the like.

Generally, when the current state of the POS terminal needs to be switched, the POS terminal must be authorized. For this purpose, an authorization tool is introduced, and the user can operate the authorization tool to implement authorization for the POS terminal, so as to change the current state of the POS terminal. Before the user changes the status of the POS terminal through the authorization tool, the connection relationship between the authorization tool and the POS terminal needs to be established first. The authorization tool can communicate with the POS terminal through the serial port or USB. When the communication path is established, the authorization tool can also be used. The handshake message is sent to the POS terminal. After the POS terminal returns a response handshake message to the authorization tool, the communication channel between the authorization tool and the POS terminal is established.

S204: Generate first feature information according to the instruction.

Specifically, when the POS terminal needs to switch the current state, the POS terminal needs to obtain the authorization of the authorized machine. Therefore, in order to distinguish the POS terminals, the first feature information that can uniquely represent the operation of the switching state of the POS terminal needs to be sent to the authorization machine. . For this reason, whenever the POS terminal needs to switch When the authorization tool requests the first feature information from the POS terminal, the POS terminal generates first feature information that can uniquely represent the operation of the switching state of the POS terminal.

Since the unique first feature information is generated before each POS terminal switching state in this step, even if the first feature information is acquired by the illegal component, the illegal component wants to switch the current POS terminal again through the first feature information. In the state, when the state switching is performed again, the POS terminal generates new first feature information, which is different from the first feature information that is illegally acquired. Therefore, the illegal component cannot complete the state switching of the POS terminal, thereby Ensure the security of the POS terminal.

S206: Return the first feature information to the authorization tool.

Specifically, if the authorization tool is a legal authorization tool, the POS terminal may respond to the instruction of the authorization tool for requesting the feature information, and return the newly generated first feature information to the authorization tool.

S208: Receive authorization information returned by the authorization device according to the first feature information returned by the authorization tool.

Specifically, after receiving the first feature information, the authorization tool sends the first feature information to the authorization server, and the authorization server sends the authorization data and the first feature information to the authorization data according to the first feature information. The authorization machine encrypts the authorization data and the first feature information to form authorization information, and returns the authorization information to the POS terminal through the authorization server and the authorization tool.

S210: When the authorization information verification is successful, extracting the second feature information in the authorization information.

After receiving the authorization information, the POS terminal first needs to check the authorization information to ensure that the authorization information has not been tampered with during the transmission process, and secondly, it is determined that the authorization information is for the POS terminal, so in order to determine the The authorization information is for the POS terminal, and since the feature information can uniquely represent the operation of the handover state of the POS terminal, the second characteristic information in the authorization information formed by the authorization machine is extracted here.

S212: When the second feature information is the same as the first feature information, after the authorization information is saved, the authorization success result is sent to the authorization tool.

Specifically, the POS terminal determines whether the authorization information is available by comparing whether the second feature information is the same as the first feature information. When the second feature information is the same as the first feature information, the authorization information is saved, and the authorization is successful. The results are sent to the authorization tool so that the user can operate Authorization tool to switch the current state of the POS terminal.

S214: Receive a state switching instruction of the authorization tool, and switch the current state according to the state switching instruction.

In the POS terminal control method, the POS terminal may generate the first feature information according to the instruction of the requesting feature information of the authorization tool, so that each time the state of the POS terminal is to be switched, the POS terminal generates new first feature information, so that even When the authorization is performed, the first feature information is illegally acquired, and the POS terminal cannot be switched according to the first feature information, thereby ensuring the security of the POS terminal, and further, the unified authorization machine is used for the POS terminal. Authorization, rather than local authorization at the POS terminal, improves the security of the POS terminal. In addition, the authorization information is encrypted by the authorization machine. After the verification of the authorization information by the POS terminal is successful, the second feature information and the first feature information are used to determine that the authorization information is for the POS terminal, thereby further ensuring the POS terminal. The security provides an effective guarantee for the security of the state switching of the POS terminal.

In one embodiment, the step S204 shown in FIG. 4, that is, the step of generating the first feature information according to the instruction may include: generating a random number according to the instruction, and generating the feature information according to the random number and the stored permission feature code.

Therefore, after the step S210 shown in FIG. 4, that is, the step of extracting the second feature information in the authorization information, the method may include: determining whether the random number in the second feature information is the same as the random number in the first feature information; When the random number in the second feature information is the same as the random number in the first feature information, it is further determined whether the rights feature code in the second feature is the same as the rights feature code in the first feature information; When the feature code is the same as the authority feature code in the first feature information, returning the same result of the second feature information and the first feature information; when the random number in the second feature information is different from the random number in the first feature information Meanwhile, when the authority feature code in the second feature is different from the rights feature code in the first feature information, the result that the second feature information is different from the first feature information is returned.

Specifically, please refer to FIG. 5. FIG. 5 is a timing diagram of a method for controlling a POS terminal in an embodiment.

Before the detailed introduction, the format of the communication packet used in this embodiment is given:

Message header

Command code

Data field length

Data field

LRC (portrait

				Redundancy check)
0x02	1bytes	2bytes		1bytes

First, the user enters the login account and password through the authorization interface provided by the authorization tool. The authorization tool obtains the login account and password entered and sends it to the authorization server. When the authorization server determines that the login account and password are correct, it returns the login to the authorization tool. Successful information. At this time, the authorization tool will send the information requesting the verification code ticket to the authorization server again. The authorization server will generate a verification code based on the information and return it to the authorization tool. For example, it can return to the authorization tool corresponding to the authorization tool through the mailbox. The mailbox, so that the user can obtain the verification code, or the authorization tool obtains the verification code directly by logging in to the encrypted mailbox for subsequent use. In addition, the authorization tool can display the permissions of the login account, etc., to prompt the user for the operation.

Secondly, the POS terminal is powered on, and the authorization tool is connected to the POS terminal through a USB or a serial port to establish a communication channel. For example, a communication channel can be established through a handshake mechanism. Specifically, for example, the authorization tool can send a handshake message to the POS terminal. The format is as follows:

Message header	Command code	Data field length	Data field	LRC
0x02	1bytes	2bytes		1bytes

After receiving the handshake information, the POS terminal may return corresponding response information, and the format of the packet is as follows:

Message header	Command code	Data field length	Data field	LRC
0x02	1bytes	2bytes		1bytes

After the communication channel between the authorization tool and the POS terminal is successfully established, the authorization tool requests the POS terminal for the feature information. The following packet format can be used:

Message header	Command code	Data field length	Data field	LRC
0x02	1bytes	2bytes		1bytes

The data field format is as follows:

Authorization type coding
1bytes

At this time, the POS terminal generates a feature information according to the request, for example, to ensure the feature letter. Uniquely, the POS terminal stores a privilege signature that can uniquely characterize the POS terminal, preferably a serial number, etc., and secondly, in order to uniquely characterize the operation of the POS terminal in the handover state, The random number generating device is set to generate a random number whenever the POS terminal needs to switch states, so that the random number and the rights feature code can uniquely represent the operation of the POS terminal in the switching state. Specifically, the feature information can be seen in Table 1:

Table 1. Characteristic information

serial number	random number
16 bytes	8 bytes

After the feature information is generated by the POS terminal, the feature information is returned to the authorization tool. Specifically, the following message may be used:

Message header	Command code	Data field length	Data field	LRC
0x02	1bytes	2bytes		1bytes

The data field format is as follows:

serial number	random number
16bytes	8bytes

Third, after the authorization tool receives the feature information, in order to further ensure the security between the authorization tool and the authorization server, the authorization tool sends the feature information and the verification code mentioned above to the authorization server, and the authorization server may Identifying, by the feature information, an operation of the switching state of the POS terminal, and determining, by the feature code, whether the feature information is tampered with during transmission, or determining whether the authorization tool is an authenticated security authorization tool, wherein The authorization tool can also send POST data to the authorization server in the format ticket=%s&features=%s&fileType=%d&sequence=%d&sn=%s where: the features parameter is transmitted using the BCD code format, length: n bytes (authorization type + security) Level+SN+RND)*2,sequence: It is convenient for the authorization server to quickly determine what kind of authorization is required. Sn: It is convenient for the server to record the log based on sn. After the authorization server receives the POST request, it converts the features into binary data and saves the file. Send to the authorization and get the encrypted result and return it to the applicant authorization tool. Successful data: SUCCESS: Result (BCD code), Failed data: FAIL: Error message. In this feature After the information and the verification code are verified, the authorization server sends the feature information and the authorization data to the authorization machine. Specifically, the following message format can be adopted:

Message header	Command code	Data field length	Data field	LRC
0x02	1bytes	2bytes		1bytes

Fourth, after receiving the feature information and the authorization data, the authorization machine encrypts the feature information and the authorization data by using the stored private key to form authorization information, and returns the authorization information to the authorization server, and the authorization server stores the authorization. After the information is returned to the authorization tool, the authorization tool returns the authorization information to the POS terminal. Specifically, the following message format can be adopted:

Message header	Command code	Data field length	Data field	LRC
0x02	1bytes	2bytes		1bytes

The authorization data may include information such as an authorization type and a security level. Specifically, the authorization information may be as shown in Table 2:

Table 2. Authorization information

0x00	Authorization type	grade	serial number	random number
N bytes	1 byte	2 bytes	16 bytes	8 bytes

The authorization machine refers to a POS terminal loaded with an authorized private key (RSA private key), and provides an encryption signature service to the authorization server. The authorization machine itself can be considered as a terminal that has passed the latest security standard certification of PCI (Peripheral Component Interconnect), which can ensure that the key is not obtained; the authorized machine and the authorization server are placed together in the security-certified security room. In addition, the physical security is ensured; at the same time, the authorization machine and the authorization server do not provide network services to the outside, and only connect to the authorization server through the SUB cable, and the entity outside the security room cannot access the authorized machine.

Fifth, after receiving the authorization information, the POS terminal first verifies the legality of the authorization information, that is, the authorization information is not tampered with during the transmission process, and secondly, it is determined that the authorization information is for the POS terminal, The process may be implemented by using the characteristic information, for example, the feature information in the authorization information may be extracted, and the authorization is determined by determining whether the random number and the rights feature code in the feature information are the same as the stored random number and the rights feature code in the POS terminal. Whether the information is available, when the random number If at least one of the privilege signatures is not the same as the cryptographic number and the privilege signature stored in the POS terminal, the authorization is considered to be unsuccessful. Otherwise, the authorization is considered successful.

Sixth, on the premise of successful authorization, the POS terminal saves the authorization information and returns an authorization result to the authorization tool, so that the authorization tool can present the authorization result to the user, and switch the POS by sending an instruction to switch the state to the POS terminal. The current state of the terminal.

Specifically, please refer to FIG. 6. FIG. 6 is a state transition diagram of the POS terminal in the embodiment shown in FIG. 1. In this embodiment, the POS terminal includes seven states:

Production state (L0): This state is used for factory production, and the terminal characteristics are defined in combination with the characteristics of the production line. Terminal characteristics: The safety switches are all on, displaying trigger information but not logical processing. The serial number can be written once. The application (including the factory test program) can only be run with the vendor firmware level signature, ensuring that any non-vendor-authorized application will not run in this production state. The signature of the OS (operating system) can be verified. The program for the vendor root key signature can be run.

Factory state (L1): This state is the default factory state, and the terminal has the same characteristics as the traditional terminal feature. Terminal characteristics: The terminal in the L0 state enters the L1 state through an authorization operation. The L1 state cannot be rolled back to the L0 state. The safety switch is turned on and the attacked POS terminal will be triggered. The trigger status is released by entering a fixed password. Changing the serial number requires authorization. The terminal can be set to debug state by authorization. The terminal triggers and the trigger information can be displayed on the screen. After the terminal triggers the repair, the status value is not affected. The program for the vendor root key signature can be run.

Security State (L2): This state is the highest level device state currently defined. Terminal characteristics: The terminal in the L2 state can be rolled back to the L1 state by restoring the factory state, and the number of SN (serial number) writes is cleared. The terminal is triggered. After the repair, authorization is required to release the trigger status. Changing the serial number requires authorization. The terminal can be set to debug state by authorization. The terminal triggers and the trigger information can be displayed on the screen. After the terminal triggers the repair, the status value is not affected. The program for the vendor root key signature can be run.

Locked state: After the terminal downloads the client PUK (Personal Identity Unlocking Code), the terminal can only download the PUK signed application of the client. If the PUK is to be replaced, the PUK can only be issued by the client. Simply put, the control of the terminal is actually in the hands of the user, and other users cannot change it. Use the program's attribution settings. Terminal characteristics: It is related only to whether the client public key is included, and whether the terminal is in the L0 state, the L1 state, and the L2 state. The security switch is in the open state. The attacked POS terminal will be triggered. After the trigger, the authorized machine needs to clear the trigger. After the clearing, it will remain in the locked state. Machines in any state can enter the locked state. The application signature is verified using the customer's public key. The program for the vendor root key signature can be run.

Application Debugging Status: This state is mainly provided to application developers to meet the needs of scenarios that require frequent application and terminal debugging. Terminal characteristics: Only machines that are in the factory state are allowed to enter this state. The safety switch is in the open state, and the attacked machine will be triggered. After the clearing, the application debugging state is lost, and the re-authorization is required to enter the application debugging state. Does not verify the application signature, can be used for application development debugging. It is allowed to download the customer's public key to the machine. Once the customer's public key is downloaded, the application debug state is automatically revoked and the locked state is entered.

Firmware Debug Status: This status is mainly provided to the firmware developer to meet the needs of the scenario where the firmware is sent to the terminal for debugging. Terminal characteristics: Only machines that are in the factory state are allowed to enter this state. The safety switch is turned on, and the attacked machine will be triggered. After the firmware is cleared, the firmware debug status is lost. Re-authorization is required to enter the firmware debug state. Firmware signatures other than boot are not verified and can be used for firmware development and debugging. It is allowed to download the customer's public key to the machine, and once the downloaded customer's public key is automatically entered into the locked state (the debugging state is no longer available).

Trigger state: refers to the need for the device to receive an attack or maintenance, the security circuit of the terminal acts, and the sensitive data such as the key of the terminal is automatically deleted. Terminal characteristics: The sensitive information inside the terminal is automatically deleted. The screen prompts trigger information. All applications will not run. The firmware or program signed by the vendor root key can be run to facilitate running the diagnostics to diagnose problems. A password (L1 before trigger) or an authorization (L2 before trigger) is required to release the trigger. The terminal cannot be used normally until the trigger status is released.

Some variables can be defined in the POS terminal to record the status of the terminal, as shown in the following table:

variable	Bit digit	Storage area	Description
SecMode	16	OTP	Record terminal status L0/L1/L2
SecLevel	16	OTP	Record firmware security level
AppDebug	1	BBRAM	Record the status value of the terminal application debugging

FirmDebug	1	BBRAM	Record the status value of terminal firmware debugging
TmaperClear	2	BBRAM	Record whether to cancel the trigger
AuthDownSN	1	BBRAM	Record whether to allow downloading of SN

OTP (One Time Programmable, which is a type of memory of the MCU, meaning one-time programmable: after the program is burned into the IC, it cannot be changed again) The initial value of the area data is 0x00, which can only be written from 0 to 1, not from 1 When it is 0, the power-down data will not disappear. BBRAM (Battery Backup Random Access Memory, specifically to the POS terminal, is an area protected by the trigger circuit. Once the terminal is attacked, the content of the area will be automatically erased, so it is often used to store sensitive data such as transaction keys. Similar to SDRAM, the data can be arbitrarily rewritten, powered by battery, and the data will be cleared after the POS terminal triggers. The OTP area is accessible only by the terminal firmware, and no one can read, write or rewrite by any means. Therefore, sufficient safety can be ensured.

Specifically, after the POS terminal sends the first feature information to the authorization tool, it waits cyclically to receive the authorization information. If the authorization information is received, and the authorization information is valid, the authorization is executed, and the operating system is started. If the waiting timeout occurs, Start the operating system directly, and if the authorization information is invalid, continue to cycle to receive the authorization information.

In this embodiment, the POS terminal is first characterized by a privilege signature that can be uniquely characterized by the POS terminal stored in the POS terminal, and the POS terminal is uniquely characterized by the generation of a random number. The random number and the privilege signature can uniquely represent the operation of the POS terminal in the switching state, so that the feature information is timed to be obtained by the illegal component. Since the feature information of the POS terminal switching state operation is different, the illegal component cannot be POS. The terminal performs state switching to ensure the security of the POS terminal.

Please refer to FIG. 7. FIG. 7 is a flowchart of a verification step in an embodiment. After the step S208 in the embodiment shown in FIG. 4, the verification device returns an authorization machine to generate according to the first feature information. After the steps of the authorization information, it may also include:

S502: Separate the authorization information to obtain the original text and the digital signature.

Specifically, when the first feature information and the authorization data sent by the authorization server are received, the authorization device encrypts the first feature information and the authorization data, and the first feature information is used for convenience of description. And the authorization data is called the original text, and the RSA key of the encryption process uses a 2048 bit key, and the authorization machine first performs a one-way hash (HSAH) operation on the original text to obtain the message digest A, and then the message is stored through the stored private key. The abstract A is signed to obtain the digital signature A, and the digital signature A and the original text are sequentially sent as authorization information to the authorization server, the authorization tool, and the POS terminal. Therefore, after obtaining the authorization information, the POS terminal first needs to separate the authorization information to obtain a digital signature and an original text.

S504: Decrypt the digital signature by authorizing the public key to obtain the first digest.

Since the public key corresponding to the private key is stored in the POS terminal, after the digital signature is obtained, the digital signature is decrypted by the authorized public key to obtain a corresponding first digest.

S506: Perform a one-way hash operation on the original text to obtain a second abstract.

S508: When the first digest and the second digest are equal, proceeding to the step of transmitting the authorization information to the authorization tool after the authorization information is successfully verified.

When the first digest and the second digest calculated in the above are equal, it can be considered that the authorization information has not been tampered with during the transmission, and thus the authorization is successful.

S510: When the first summary and the second summary are not equal, the information that the authorization fails is output.

In the foregoing embodiment, by comparing the first digest and the second digest, it can be determined whether the authorization information is legal, thereby ensuring the legality of the authorization information received by the POS terminal, and laying a foundation for the legal authorization work of the subsequent POS terminal.

Referring to FIG. 8, FIG. 8 is a flowchart of a method for controlling a POS terminal in another embodiment. The method is applied to the authorization server shown in FIG. 1. The method may include:

S602: Receive first feature information that is sent by the authorization tool and is obtained from the POS terminal.

Specifically, as described above, when the authorization tool needs to switch the state of the POS terminal, the first feature information is first applied to the POS terminal, and the first feature information is sent to the authorization server.

S604: Check the first feature information.

After receiving the first feature information, the authorization server first checks the first feature information to ensure the validity of the first feature information. For example, it may be verified whether the sequence number in the first feature information is The serial number of the POS terminal managed by the authorization server, if yes, the continuation check whether the random number is the same as the random number in the first feature information sent by the POS terminal last time Etc. to ensure the legitimacy of the first feature information.

S606: When the first feature information verification is successful, the first feature information and the authorization data are sent to the authorization machine for encryption.

When the first feature information is successfully verified, the authorization server may authorize the corresponding POS terminal, for example, may form an authorization type, a security level, etc., and send the authorization data together with the first feature information to the authorization machine for encryption. Processing, so as to ensure that the authorization information is not tampered with during transmission.

S608: Receive authorization information formed by encrypting the first feature information and the authorization data returned by the authorization machine.

In order to protect the legality of the authorized private key in the authorized machine, the authorized machine is generally set to be unable to be networked, so that the authorized private key in the authorized machine will not be tampered with, but in this way, the authorized machine cannot directly send the authorization information to the POS. The terminal, therefore, the authorization opportunity first sends the authorization information to the authorization server to which it is physically connected, and the authorization server transmits the authorization information to the POS terminal.

S610: Send the authorization information to the POS terminal by using an authorization tool, so that the POS terminal performs state switching.

In the above embodiment, the authorization machine is set to an unnetworked state, so that the validity of the authorized private key can be ensured. In addition, the authorization data and the first feature information are encrypted by the authorization machine, thereby ensuring that the authorization information is not available during the transmission process.篡 modified.

In one embodiment, the method may further include: sending a verification code to the authorization tool after the account of the authorization tool is successfully logged in. This process is to provide a two-tiered warranty to ensure the legitimacy of the authorization tool.

Therefore, when the authorization tool sends the first feature information acquired from the POS terminal to the authorization server, the authorization tool simultaneously sends the verification method to the authorization server, so that the method further includes receiving the verification code sent by the authorization tool.

The step S604, before the step of verifying the feature information, may further include: comparing the verification code with the saved verification code; and when the verification code is equal to the saved verification code, verifying the feature information; When the verification code is not equal to the saved verification code, the authorization is sent to the authorization tool. Failure information.

That is, in order to ensure that only the authorization tool that has been logged in by the authorization server can perform the authorization operation on the POS terminal, the authorization server first compares the verification code with the stored verification code after receiving the first feature information and the verification code. When it is equal, the authorization tool is considered to be legal. Otherwise, the authorization tool is considered to be illegal, so that the authorization operation is not performed.

In the above embodiment, not only the legality of the authorization tool is verified by the login account and the password, but also the legality of the authorization tool is verified again by a verification code, so that even if the login account and the password are tampered with, the illegal elements are in another non- When the login is performed on the authorized tool, the corresponding verification code cannot be obtained, thereby preventing the POS terminal from being illegally falsified, and the security of the POS terminal is further improved by the double-layer guarantee mechanism of the login account and the verification code.

Although the steps in the flowcharts of FIGS. 4, 7, and 8 above are displayed once in accordance with the indication of the arrows, these steps are not necessarily performed once in the order indicated by the arrows. Except as explicitly stated herein, the execution of these steps is not strictly limited, and may be performed in other sequences. Moreover, at least some of the steps in FIG. 4, FIG. 7, and FIG. 8 may include a plurality of sub-steps or stages, which are not necessarily performed at the same time, but may be executed at different times. The order of execution is not necessarily performed sequentially, but may be performed alternately or alternately with at least a portion of the sub-steps or stages of other steps or other steps.

Referring to FIG. 9, in an embodiment, a POS terminal is further provided. The internal structure of the POS terminal may correspond to the structure shown in FIG. 2. Each of the following modules may be partially or partially implemented by software, hardware or The combination is implemented. As shown in FIG. 9, in one embodiment, the POS terminal includes:

The first receiving module 101 is configured to receive an instruction for requesting feature information sent by the authorization tool, receive the authorization information returned by the authorization device according to the first feature information, and receive a state switching instruction of the authorization tool.

The feature information generating module 102 is configured to generate first feature information according to the instruction.

The extracting module 103 is configured to extract second feature information in the authorization information when the authorization information verification is successful.

The first sending module 104 is configured to return the first feature information to the authorization tool, and in the second special When the sign information is the same as the first feature information, the authorization information is saved, and the authorization success result is sent to the authorization tool.

The state switching module 105 is configured to switch the current state according to the state switching instruction.

In one of the embodiments, the feature information generating module 102 includes: a random number generating unit configured to generate a random number according to the instruction. The feature information generating unit is configured to generate feature information according to the random number and the stored rights feature code.

The device may further include: a determining module, configured to determine whether the random number in the second feature information is the same as the random number in the first feature information; and when the random number in the second feature information is random with the first feature information When the numbers are the same, proceed to determine whether the rights feature code in the second feature is the same as the rights feature code in the first feature information; when the rights feature code in the second feature is the same as the rights feature code in the first feature information, Returning the same result of the second feature information and the first feature information; when the random number in the second feature information is different from the random number in the first feature information, or when the rights feature code in the second feature is the first When the authority feature codes in the feature information are different, the result that the second feature information is different from the first feature information is returned.

In one embodiment, the apparatus may further comprise: a separation module for separating the authorization information to obtain the original text and the digital signature. And a decryption module, configured to decrypt the digital signature by authorizing the public key to obtain the first digest. A hash operation module is configured to perform a one-way hash operation on the original text to obtain a second abstract. The first sending module 104 is further configured to: when the first digest and the second digest are equal, continue to succeed when the authorization information is verified, and then save the authorization information, and send the authorization success result to the authorization tool; when the first digest and the first When the two digests are not equal, the information indicating that the authorization failed is output.

Referring to FIG. 10, in an embodiment, an authorization server is further provided, and the internal structure of the authorization server may correspond to the structure shown in FIG. 3. Each of the following modules may be partially or partially implemented by software, hardware or The combination is implemented. As shown in FIG. 10, in one embodiment, the authorization server includes:

The second receiving module 201 is configured to receive the first feature information that is sent by the authorization tool and is obtained from the POS terminal.

The verification module 202 is configured to verify the first feature information.

The second sending module 203 is configured to send the first feature information and the authorization data to the authorization machine for encryption when the first feature information is successfully verified.

The second receiving module 201 is further configured to receive the authorization information formed by encrypting the first feature information and the authorization data returned by the authorization machine.

The second sending module 203 is further configured to send the authorization information to the POS terminal by using an authorization tool, so that the POS terminal performs state switching.

In one embodiment, the second sending module 203 is further configured to send a verification code to the authorization tool after the account of the authorization tool is successfully logged in. The second receiving module 201 is further configured to receive a verification code sent by the authorization tool.

The apparatus can also include a comparison module for comparing the verification code to the saved verification code. The verification module 202 is further configured to verify the feature information when the verification code is equal to the saved verification code. The second sending module 203 is further configured to: when the verification code is not equal to the saved verification code, send information that the authorization fails to the authorization tool.

One of ordinary skill in the art can understand that all or part of the process of implementing the foregoing embodiments can be completed by a computer program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, the flow of an embodiment of the methods as described above may be included. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The technical features of the above-described embodiments may be arbitrarily combined. For the sake of brevity of description, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction between the combinations of these technical features, All should be considered as the scope of this manual.

The above-described embodiments are merely illustrative of several embodiments of the present invention, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the invention. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the invention. Therefore, the scope of the invention should be determined by the appended claims.

Claims (11)

1. A POS terminal control method includes:

   Receiving an instruction for requesting feature information sent by the authorization tool;

   Generating first feature information according to the instruction;

   Returning first feature information to the authorization tool;

   Receiving, by the authorization tool, the authorization information generated by the authorization machine according to the first feature information;

   When the verification of the authorization information is successful, extracting the second feature information in the authorization information;

   When the second feature information is the same as the first feature information, after the authorization information is saved, the authorization success result is sent to the authorization tool;

   Receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction.
2. The method according to claim 1, wherein the step of generating the first feature information according to the instruction comprises:

   Generating a random number according to the instruction;

   Generating feature information according to the random number and the stored permission feature code;

   After the step of extracting the second feature information in the authorization information, the method includes:

   Determining whether the random number in the second feature information is the same as the random number in the first feature information;

   When the random number in the second feature information is the same as the random number in the first feature information, proceed to determine the rights feature code in the second feature and the rights feature code in the first feature information Whether they are the same;

   When the rights feature code in the second feature is the same as the rights feature code in the first feature information, returning the same result of the second feature information and the first feature information;

   When the random number in the second feature information is different from the random number in the first feature information, or when the rights feature code in the second feature and the rights feature code in the first feature information If not the same, the result that the second feature information is different from the first feature information is returned.
3. The method according to claim 1 or 2, wherein the step of receiving the authorization information generated by the authorization device according to the first feature information returned by the authorization tool further comprises:

   Separating the authorization information to obtain original text and digital signatures;

   Decrypting the digital signature by authorizing a public key to obtain a first digest;

   Performing a one-way hash operation on the original text to obtain a second abstract;

   And when the first digest and the second digest are equal, continuing to send the authorization information to the authorization tool after the authorization information is successfully verified;

   When the first digest and the second digest are not equal, the information that the authorization fails is output.
4. A POS terminal control method includes:

   Receiving, by the authorization tool, the first feature information acquired by the POS terminal;

   Performing verification on the first feature information;

   When the first feature information is successfully verified, the first feature information and the authorization data are sent to an authorization machine for encryption;

   Receiving, by the authorization machine, authorization information formed by encrypting the first feature information and the authorization data; and

   Sending the authorization information to the POS terminal by using the authorization tool, so that the POS terminal performs state switching.
5. The method of claim 4, wherein the method further comprises:

   After the account of the authorization tool is successfully logged in, sending a verification code to the authorization tool;

   The method further includes:

   Receiving a verification code sent by the authorization tool;

   The step of verifying the feature information further includes:

   Comparing the verification code with the saved verification code;

   And when the verification code is equal to the saved verification code, verifying the feature information;

   Sending an authorization to the authorization tool when the verification code is not equal to the saved verification code Failure information.
6. A POS terminal includes a memory and a processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to perform the following steps:

   Receiving an instruction for requesting feature information sent by the authorization tool;

   Generating first feature information according to the instruction;

   Returning first feature information to the authorization tool;

   Receiving, by the authorization tool, the authorization information generated by the authorization machine according to the first feature information;

   When the verification of the authorization information is successful, extracting the second feature information in the authorization information;

   When the second feature information is the same as the first feature information, after the authorization information is saved, the authorization success result is sent to the authorization tool;

   Receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction.
7. The POS terminal according to claim 6, wherein the step of generating the first feature information according to the instruction comprises:

   Generating a random number according to the instruction;

   Generating feature information according to the random number and the stored permission feature code;

   After the step of extracting the second feature information in the authorization information, the method includes:

   Determining whether the random number in the second feature information is the same as the random number in the first feature information;

   When the random number in the second feature information is the same as the random number in the first feature information, proceed to determine the rights feature code in the second feature and the rights feature code in the first feature information Whether they are the same;

   When the rights feature code in the second feature is the same as the rights feature code in the first feature information, returning the same result of the second feature information and the first feature information;

   When the random number in the second feature information is different from the random number in the first feature information Or, when the rights feature code in the second feature is different from the rights feature code in the first feature information, returning a result that the second feature information is different from the first feature information.
8. The POS terminal according to claim 6 or 7, wherein the step of receiving the authorization information generated by the authorization device according to the first feature information returned by the authorization tool further comprises:

   Separating the authorization information to obtain original text and digital signatures;

   Decrypting the digital signature by authorizing a public key to obtain a first digest;

   Performing a one-way hash operation on the original text to obtain a second abstract;

   And when the first digest and the second digest are equal, continuing to send the authorization information to the authorization tool after the authorization information is successfully verified;

   When the first digest and the second digest are not equal, the information that the authorization fails is output.
9. An authorization server includes a memory and a processor, wherein the memory stores instructions that, when executed by the processor, cause the processor to perform the following steps:

   Receiving, by the authorization tool, the first feature information acquired by the POS terminal;

   Performing verification on the first feature information;

   When the first feature information is successfully verified, the first feature information and the authorization data are sent to an authorization machine for encryption;

   Receiving, by the authorization machine, authorization information formed by encrypting the first feature information and the authorization data; and

   Sending the authorization information to the POS terminal by using the authorization tool, so that the POS terminal performs state switching.
10. The authorization server according to claim 9, wherein the method further comprises:

    After the account of the authorization tool is successfully logged in, sending a verification code to the authorization tool;

    The method further includes:

    Receiving a verification code sent by the authorization tool;

    The step of verifying the feature information further includes:

    Comparing the verification code with the saved verification code;

    And when the verification code is equal to the saved verification code, verifying the feature information;

    When the verification code is not equal to the saved verification code, the authorization failure information is sent to the authorization tool.
11. A computer readable storage medium having stored thereon a computer program, wherein the computer program is executed by a processor to implement the following steps:

    Receiving an instruction for requesting feature information sent by the authorization tool;

    Generating first feature information according to the instruction;

    Returning first feature information to the authorization tool;

    Receiving, by the authorization tool, the authorization information generated by the authorization machine according to the first feature information;

    When the verification of the authorization information is successful, extracting the second feature information in the authorization information;

    When the second feature information is the same as the first feature information, after the authorization information is saved, the authorization success result is sent to the authorization tool;

    Receiving a state switching instruction of the authorization tool, and switching the current state according to the state switching instruction.

Images