CN106327184B - A mobile intelligent terminal payment system and method based on secure hardware isolation - Google Patents

Abstract

The present invention relates to a mobile intelligent terminal payment system and method based on security hardware isolation, including: a payment server, a mobile intelligent terminal, and security hardware; the security hardware is independent of the mobile intelligent terminal, has a separate system, that is, an independent operating environment, and protects the user's The authentication data is safe, and it provides random number generation, certificate request, and information signature services; it also has a secure storage function that can protect the preset user authentication information; during the payment process of the payment system, the security hardware requires the user to enter the payment password for verification. After passing the verification, use the user's payment public key certificate private key to encrypt the payment data signature and return it to the mobile smart terminal. The invention stores the private key and password of the user's payment certificate in the secure hardware, effectively preventing these sensitive data from being obtained by an attacker, and the payment information will be confirmed by the user on the secure hardware, effectively preventing the payment information from being maliciously tampered with, and greatly improving the payment system. security.

Description

A mobile intelligent terminal payment system and method based on secure hardware isolation

technical field

The invention belongs to the field of identity authentication in information security, and in particular relates to a mobile intelligent terminal payment system and method based on security hardware isolation.

Background technique

In the payment process of mobile smart terminals, user authentication credentials (such as payment passwords, certificates, etc.) are resources that need to be protected. Due to the openness and flexibility of the operating systems of existing mobile smart terminals, many attackers can exploit vulnerabilities in mobile smart terminal systems or applications to steal authentication credentials entered or saved by users. Existing protection technologies mainly apply the protection ideas of the PC side to the mobile smart terminal, such as security software, access control, etc., but the mobile smart terminal faces many different attacks from the PC side (such as interface overlay, the attacker forges the same input box covers the original input box, stealing user input), and the mobile smart terminal is easy to be rooted, these protection schemes cannot protect user authentication credentials well.

Security hardware is hardware that is used for payment independently of the mobile smart terminal. It has its own operating space and is isolated from the mobile smart terminal system. It has input and output capabilities and has certain computing capabilities. Due to its single system and simple functions, it is difficult for attackers to exploit system vulnerabilities and other means to attack. It can better protect user input, data display and storage, and provide higher security protection than mobile smart terminals.

Regarding the secure payment method in the published patent (a mobile payment unit payment system and secure payment method, 201410341832), this method lacks consideration of the user’s participation in the payment process, how to realize the safe display of payment information to the user for confirmation, and how to use The user explicitly and securely completes the authorization of payment to prevent the user from authorizing wrong payment information. Regarding the secure payment system and method in the published patent (a smart terminal secure payment system and method, 201310729282), this method lacks consideration of the real physical isolation of the two systems. Once there is a loophole in the security operating system, the attacker It is possible to access and steal user payment data from an insecure operating system.

Contents of the invention

The present invention overcomes the deficiencies of the prior art, combines the PKI digital authentication protection system, the isolation environment based on safe hardware and the mobile smart terminal payment scheme based on two-way trust, and proposes a mobile smart terminal payment system and method based on safe hardware isolation .

The present invention implements a mobile intelligent terminal payment system and method based on security hardware isolation, the system and method are suitable for mobile intelligent terminals, and the system and method include:

When the mobile smart terminal performs a payment operation, the payment application installed on the mobile smart terminal can be connected to the server to realize the general payment process (such as generating an order, etc.), and can perform point-to-point wireless connection with the security hardware and perform encrypted data transmission to realize user Password verification and payment authentication information transmission.

Before the safe hardware is used for operation, the public key certificate of the payment server, the CA certificate, and the user payment public key certificate are imported through the trust preset operation to build the basis of a two-way trust system between the server and the safe hardware, and the user is required to set the payment password. The payment password is used to authorize the user to perform payment operations on the user's payment public key certificate in the security hardware.

When the mobile smart terminal needs to perform payment operations, the payment application and the server interact to complete the payment data generation, and the payment data is encrypted and sent to the security hardware through a point-to-point wireless connection for signature and then returned to the server to complete the verification, including:

1) When the mobile smart terminal needs to perform a payment operation, use the payment application to interact with the server to complete the payment data (including user ID, merchant ID, commodity ID, quantity, unit price, total price, order ID, payment information ID, random challenge value) etc.) generation.

2) The payment application on the mobile smart terminal establishes a point-to-point connection with the security hardware, and conducts key negotiation to establish an encrypted channel.

3) The mobile smart terminal payment application encrypts the random challenge, order ID, payment information ID, and payment information (user ID, merchant ID, total price, etc.) and sends it to the secure hardware.

4) The security hardware decrypts the payment information and displays it, and the user enters the payment password after confirming that it is correct, and verifies the payment password. After the verification is passed, use the private key corresponding to the user's payment public key certificate to sign the received data, generate a symmetric encryption key, and use the encryption key to encrypt the signature information, order ID, and payment information ID to obtain data A. Encrypt the encryption key to obtain B, and combine the two into a digital envelope. Return the digital envelope to the mobile smart terminal through the established secure channel.

5) The mobile smart terminal forwards the received digital envelope to the server.

6) The server uses the private key to decrypt data B to obtain the encryption key, and then uses the encryption key to decrypt data A to obtain the signature information, order ID, and payment information ID. Use the user's public key to verify the signature information, and after verifying the order ID, payment information ID and other information, verify whether the payment is successful.

7) The server returns the payment result to the mobile smart terminal.

Introduce the basic thought of this scheme below, the present invention is on the basis of absorbing the advantage of existing solution, has proposed own design idea, specifically, the technology of the present invention includes scheme and includes the following aspects:

Aspect 1: The payment system mainly includes three parts: payment server, mobile smart terminal and security hardware. The payment server interacts with the mobile smart terminal to complete other links in the payment process except user authentication. The security hardware interacts with the mobile smart terminal to complete the most important user authentication part in the payment process. Utilize the independent operating environment of the secure hardware to protect the security of the user's authentication data; through the trust preset in the secure hardware, use the mobile smart terminal as the channel to establish a two-way trust payment implementation method with the server.

Aspect 2: The security hardware is independent of the mobile smart terminal, has a separate system, and provides external services such as random number generation, certificate request, and information signature. The security hardware has a security storage function and can protect preset user authentication information. During the payment process, the security hardware requires the user to enter the payment password for verification. After the verification is passed, the payment data is signed and encrypted with the user's payment public key certificate and private key, and then returned to the mobile smart terminal. There are mainly the following points:

Random number generation module: The security hardware provides a true random number generator, which can provide a random number of any length at a time, and the random number can be used as a key for symmetric encryption.

Payment signature module: After receiving the order ID, payment information ID and payment information, the security hardware requests the designated account to sign. The security hardware will use the hardware display to prompt the user for transactions (such as flashing transaction LED lights), and display the payment information on the display screen of the security hardware, waiting for the user to enter the payment password for confirmation. The payment password is used to decrypt and verify the private key of payment for signature calculation.

Trusted certificate module: The secure hardware stores preset trusted certificates, including the payment server's public key certificate, CA certificate, and user payment public key certificate. Get these trusted certificates through an agreed upon index.

Aspect 3: This method provides a mobile intelligent terminal payment system and method based on secure hardware isolation, and mainly protects sensitive data during the entire payment process. The data is protected by an encrypted channel when the payment server interacts with the smart mobile terminal, and the data is protected by an encrypted channel when the smart mobile terminal interacts with the security hardware. Sensitive data of the user, such as the private key of the user's payment certificate, is stored in secure hardware, and attackers cannot read sensitive data. The data transmitted through the mobile smart terminal is dynamic temporary data, which will become invalid after the payment process is completed. Through the protection of encrypted channels and secure hardware, attackers cannot obtain the user's payment information, which comprehensively improves the security of the payment process.

Compared with the prior art, the present invention has the following advantages:

(1) Store the private key and password of the user's payment certificate in secure hardware, effectively preventing these sensitive data from being obtained by attackers, and greatly improving the security of the payment system.

(2) The payment information will be confirmed by the user on the security hardware, effectively preventing the payment information from being maliciously tampered with, and further improving the security of the payment system.

Description of drawings

Fig. 1 is that the present invention implements overall frame;

Fig. 2 is the flow chart of the safe startup based on trust preset in the invention;

Fig. 3 is a flow chart of the method for realizing the mobile intelligent terminal payment based on two-way trust in the present invention.

Detailed ways

In order to make the objectives, advantages and technical solutions of the present invention more clear, the present invention will be further described in detail below through specific implementation and in conjunction with the accompanying drawings.

As shown in Figure 1, the specific implementation of the present invention is as follows:

1. Implementation method of secure hardware based on trust preset

Security hardware trust presetting means that before the security hardware is used for payment, it is necessary to perform initialization operations such as certificate import and user password setting on the security hardware to initially establish a payment trust system. The public key certificate of the payment server, CA certificate, and user payment public key certificate are preset in the secure hardware. The public key certificate of the payment server is mainly used to encrypt the symmetric encryption key to realize the encapsulation of the digital envelope; the CA certificate is used for the secure boot process to realize the verification of the secure hardware; the user payment public key certificate is mainly used to indicate to the server that the user identity. The user needs to set a payment password on the security hardware, which will be used to encrypt the private key corresponding to the user's payment public key certificate. In the subsequent payment process, the user needs to enter the payment password to obtain the private key corresponding to the payment public key certificate. key.

As shown in Figure 2, the secure boot process of secure hardware is divided into three components, including solidifying the on-chip image, root verification package image, and secure firmware. Among them, the image on the solidified chip contains the verification code and the code for loading the root verification package image; the root verification package image contains the signature hash verification value of the root verification package image, the verification code, and the code for loading the security firmware; the security firmware includes Signature hash verification value of secure firmware, secure system code; the specific process is as follows:

(1) The system is powered on, the on-chip image is loaded, and the on-chip image reads the root verification package image and calculates its hash with the preset CA certificate, and compares it with the stored hash check value. If they are consistent, load the root verification package image and jump to the root verification package image to run, otherwise, stop the startup.

(2) The root verification package image reads the secure firmware, calculates the signature hash value of the secure firmware, and compares and verifies it with the signature hash check value in the secure firmware. If it has been, then load the security firmware and jump to the security firmware to run, otherwise, stop starting.

(3) The secure firmware starts running, loads and runs the random number generation module, the payment signature module, and the trusted certificate module.

After the security hardware is started, there are mainly random number generation services, trusted certificate services, and payment signature services for mobile smart terminals, mainly including:

Random number generation service: The security hardware provides a random number generator, which can provide a random number of any length at a time, and the random number can be used as a key for symmetric encryption. The payment signature service sends a random number request to the security hardware, and carries a parameter N (N is the length of the random number describing the request), and under correct conditions, the security hardware returns a random number with a length of N. Otherwise return an error code.

Payment signature service: After receiving the order ID, payment information ID and payment information, the security hardware requests the designated account to sign. The security hardware will use the hardware display to prompt the user for transactions (such as flashing transaction LED lights), and display the payment information on the display screen of the security hardware, waiting for the user to enter the payment password for confirmation. The payment password is used to decrypt and verify the private key of payment for signature calculation. After the payment password verification is passed, the payment signature service initiates a request to the random number generation service to obtain a symmetric encryption key, and uses the encryption key to encrypt the signature information, order ID, and payment information ID to obtain data A, and uses the server public key to encrypt The key is encrypted to obtain B, and the two are combined into a digital envelope. The mobile smart terminal sends a payment signature request to the security hardware. The parameters include signature algorithm ID, random number length, random number, payment information length, payment information ID, order ID, payment buyer account length, payment buyer account, payment seller account Length, payment seller account, payment amount. These are signed plaintext messages. The secure hardware platform receives the parameters for processing, and returns the generated digital envelope if it is correct. Error returns an error code.

Trusted certificate service: The secure hardware stores preset trusted certificates, including the payment server's public key certificate, CA certificate, and user payment public key certificate. Get these trusted certificates through an agreed upon index. The payment signature service sends the trusted certificate module to the secure hardware, and the parameter is the certificate index ID. The secure hardware platform processes according to the parameters, and returns the format of the certificate, the length of the trusted certificate, and the content of the trusted certificate if it is correct. Error returns an error code.

2. Implementation method of mobile intelligent terminal payment based on two-way trust

As shown in Figure 3, the mobile smart terminal terminal payment scheme mainly relies on the two-way trust relationship between the server certificate and the user payment certificate to ensure the security and correctness of the payment process. Before the payment operation process is required, the security hardware needs to be initialized with trust presetting. The complete payment process includes the following steps:

(1) The user completes the purchase of the product in the payment application of the mobile smart terminal, submits the user ID, merchant ID, product ID, quantity, unit price, total price and other data to the server, and requests to generate an order.

(2) The server generates a new order according to the data sent by the payment application (user ID, merchant ID, product ID, quantity, unit price, total price), inserts the generated order ID and order information into the database, and then inserts the order ID is returned to the payment application.

(3) The payment application selects the corresponding order for payment, submits the order payment request to the server, and submits the order ID.

(4) The server generates a piece of payment information according to the received order ID, and sends the payment information ID to the payment application. At the same time, the server will generate a random number S, and send it back to the payment application at the same time as the payment information ID.

(5) The payment application establishes a point-to-point wireless connection (Wi-Fi Direct, Bluetooth, etc.) with the security hardware, and uses a key agreement protocol to negotiate a symmetric key to establish an encrypted channel.

(6) The payment application encrypts the random number S, order ID, payment information ID, and payment information (including buyer account number, seller account number, and payment amount) with the symmetric key obtained in step (5) and sends it to the secure hardware.

(7) The security hardware uses the symmetric encryption key to decrypt the data in step (6), displays the payment information, and prompts the user to input the payment password.

(8) The user enters the payment password, and the security hardware decrypts the payment password to obtain the private key corresponding to the user's payment public key certificate, and uses the private key to perform the signature operation.

(9) The security hardware uses the private key obtained in (8) to sign the random number S, order ID, payment information ID, and payment information to obtain signature information, including signature value and signature public key ID.

(10) After the security hardware generates the signature information, it begins to encapsulate the digital envelope, the random number generation service generates a random number as a symmetric key, and the trusted certificate service provides a server certificate.

(11) The secure hardware starts to calculate the digital envelope: use the random number obtained in step (10) as a symmetric key to encrypt the signature information, order ID, and payment information ID to obtain data A. Then use the public key in the server certificate to encrypt the symmetric key to obtain data B, and data A and B form a digital envelope. And send the digital envelope to the mobile terminal device.

(12) The mobile intelligent terminal forwards the received digital envelope to the server.

(13) After the server obtains the digital envelope, it first uses the private key corresponding to the server certificate to decrypt data B to obtain a symmetric key, and then uses the symmetric key to decrypt data A to obtain signature information, order ID, and payment information ID. Use the user's certificate public key corresponding to the payment information ID to verify the signature information, and confirm that the buyer account, seller account, and payment amount are correct. And verify the legitimacy of the order ID and payment information ID. After the verification is passed, it indicates that the identities of the server and the user are correct, and a two-way trust relationship has been established. The establishment of this relationship means that the payment is completed and operations such as deduction can be performed. The server returns the payment result to the payment application.

(16) The payment application displays the payment result to the user.

The above embodiments are provided only for the purpose of describing the present invention, not to limit the scope of the present invention. The scope of the invention is defined by the appended claims. Various equivalent replacements and modifications made without departing from the spirit and principle of the present invention shall fall within the scope of the present invention.

Claims (2)

1. a kind of mobile intelligent terminal payment system based on secure hardware isolation, comprising: payment server, intelligent movable are whole End, it is characterised in that: increase secure hardware in paid payment system；Payment server is interacted with mobile intelligent terminal, is completed Other links other than user authentication are removed in payment flow；Secure hardware is interacted with mobile intelligent terminal, completes payment flow In mostly important user authentication part；It is preset by the trust in secure hardware, using mobile intelligent terminal as channel, with service Device establishes the payment implementation method of two-way trust；

Secure hardware has individual system, that is, independent operating environment, protects the certification number of user independently of mobile intelligent terminal According to safety, and generating random number is externally provided, certificate request, Information Signature service；There is secure storage function, Neng Goubao simultaneously Protect preset user authentication information；In payment system payment process, secure hardware needs user's input payment cipher to test Card, it is whole to intelligent movable is back to after payment data encrypted signature using user's payment public key certificate private key after being verified End；

The secure hardware includes random number generation module, payment signature blocks and trusted certificates module；Wherein:

Random number generation module: real random number generator is provided, can once provide the random number of random length, which can To be used to the key as symmetric cryptography；

It pays signature blocks: after receiving order ID, payment information ID and payment information, specified account being requested to be signed； Hardware display reminding customer transaction will be utilized, and payment information is shown into the display screen in secure hardware, user is waited to input branch Pay password confirming；Private key of the payment cipher for decryption verification payment carries out signature operation；

Trusted certificates module: equipped with preset trusted certificates, public key certificate, CA certificate, user's payment including payment server Public key certificate obtains these trusted certificates by the index of agreement；

The payment system protects sensitive data in payment whole flow process, and data are in payment server and intelligent movable It is protected when terminal interaction by encryption channel, data are protected in mobile intelligent terminal and secure hardware interaction by encryption channel；With The sensitive data such as user's payment certificate private key at family are stored in secure hardware, and attacker can not read sensitive data, via shifting The data of dynamic intelligent terminal transmitting are dynamic ephemeral data, are failed after the completion of payment process；Pass through encryption channel and peace The protection of devices at full hardware, attacker can not obtain the payment information of user, improve the safety in payment process comprehensively；

The secure hardware secure launch process is specific as follows:

(1) system electrification loads mirror image in cured sheets, and mirror image reads root verifying packet mirror image and with preset CA certificate in cured sheets The cryptographic Hash of root verifying packet mirror image is calculated, and is compared with the hash check value of storage；If consistent, load root and test Packet mirror image is demonstrate,proved, root verifying packet mirror image operation is jumped to, otherwise, then stops starting；

(2) root verifying packet mirror image reads secure firmware, and calculates the signature cryptographic Hash of secure firmware, breathes out with signing in secure firmware Uncommon check value is compared verifying；If consistent, load secure firmware and jump to secure firmware operation, otherwise, stop Only start；

(3) secure firmware brings into operation, and loads and run random number generation module, payment signature blocks, trusted certificates module；

Wherein, mirror image contains check code, and the code of load root verifying packet mirror image in cured sheets；Root verifying packet mirror image contains Root verifies signature hash check value, the check code of packet mirror image, and the code of load secure firmware；Secure firmware includes safety The signature hash check value of firmware, security system code；

After secure hardware starting, there are generating random number service, trusted certificates service, and provide payment signature for mobile intelligent terminal Service.

2. a kind of carry out mobile intelligence using the mobile intelligent terminal payment system described in claim 1 based on secure hardware isolation The method of energy terminal payment, it is characterised in that the following steps are included:

(1) when the mobile intelligent terminal carries out delivery operation, the payment installed on mobile intelligent terminal is applied to be taken with payment Business device connection, realizes that payment removes other links other than user authentication；Point-to-point wireless connection is carried out with secure hardware to go forward side by side Row Data Encryption Transmission realizes user password verifying and the transmitting of payment authentication information；

(2) before secure hardware use is operated, by trusting preset operation for the public key certificate of payment server, CA card Book, user pay public key certificate and import, and building forms server and the two-way trust systems basis of secure hardware, and user is required to set Determine payment cipher, which pays public key certificate progress delivery operation to user in secure hardware for realizing user and award Power；

(3) it when mobile intelligent terminal needs to carry out delivery operation, is interacted by payment application with server and completes payment data It generates, and payment data is encrypted by way of point-to-point wireless connection and is sent to after secure hardware is signed the service that returns Device completes verifying；

(3) include:

(31) it when mobile intelligent terminal needs to carry out delivery operation, is interacted using payment application with server, completes payment number According to generation, the payment data includes User ID, trade company ID, commodity ID, quantity, unit price, total price, order ID, payment information ID, random challenge value；

(32) application is paid on mobile intelligent terminal and establish point-to-point connection with secure hardware, and carry out key agreement and establish encryption Channel；

(33) mobile intelligent terminal payment application will be sent after random challenge value, order ID, payment information ID, payment information encryption To secure hardware；

(34) it is shown after secure hardware decrypts payment information, user is confirming errorless rear input payment cipher, and to the payment Password is verified, raw after paying the corresponding private key of public key certificate to the data signature received using user after being verified At symmetric cryptographic key, signing messages, order ID, payment information ID are encrypted using the encryption key to obtain data A, benefit Encryption key is encrypted with server public key to obtain B, combines both into digital envelope；By digital envelope by having been established Safe lane be back to mobile intelligent terminal；

(35) digital envelope received is transmitted to server by mobile intelligent terminal；

(36) server by utilizing private key ciphertext data B obtains encryption key, recycles encryption key that A is decrypted, is signed Name information, order ID, payment information ID verify signing messages using client public key, and verify order ID, payment information id information Afterwards, whether validation of payment succeeds；

(37) payment result is back to mobile intelligent terminal by payment server.