KR20040082239A - Method for security using smart card of finance automatic terminal - Google Patents

Abstract

PURPOSE: A security method of an automatic banking device using a smart card is provided to process a banking transaction more safely without much additional expense by using a speed algorithm installed to the smart card and using an encryption key recorded on the speed algorithm. CONSTITUTION: The encryption key for the banking transaction is recorded in the inserted smart card(S21). A transmission message according to a banking transaction request of a user is encrypted by using the encryption key and is transmitted to a host(S22). A proper operation for the requested banking transaction is performed by decrypting/analyzing the received message(S24).

Description

Method for security using smart card of finance automatic terminal}

The present invention relates to a security method of a financial automation device using a smart card to enable a more secure financial transaction by encrypting a transaction message between the financial automation device and a bank host.

In general, the encryption method used in financial automation equipment is as follows.

Firstly, the first method is a software encryption method by appointment with a bank host, and encrypts a specific field of a transaction text generated in a financial automation device with a specification by appointment with the host (software encryption). It transmits to the host, and accordingly the host decrypts and interprets the encrypted field to perform the requested transaction.

The second method is to encrypt using a hardware board operated by the DES encryption algorithm. First, a bank or KEB card injects a transfer key corresponding to the highest secret key into the DES board, and inserts the DES board into the PC-based automation device. Fit into the slot. In this state, the master key and terminal key are received online from the bank host and recorded on the DES board. When transactions are made, the card number and password are encrypted. It also encrypts certain fields in.

The encrypted information is transmitted to the card company at the time of full-text transmission. Accordingly, the card company decrypts and interprets the specific encrypted field to perform the requested transaction.

In addition, the third method uses a virtual private network (VPN), which is increasing in demand due to security enhancement, backup line replacement, point-to-point connection network, and line cost reduction due to bandwidth expansion.

However, in the United States, Europe, etc., any type of software encryption method is not recognized, so the above-described software encryption method is not suitable for the internationalization trend, and in particular, in the software encryption method, the algorithm is sufficiently interpreted by a bank employee or the like. There is a problem that can be used for criminal purposes such as hacking, and in the method of encrypting using a hardware board operating with the above-described DES encryption algorithm, the key value injected into the DES board is often damaged, and in particular, it is transmitted. If the key is damaged, the relevant DES board must be collected and re-injected directly by the card company or bank office, and then mounted in the slot of the corresponding PC Based automation device. Under rain There was a problem that caused the rise.

In addition, the above-described method using the virtual private network has a narrow branch network and does not have a significant effect of reducing costs after the introduction of a leased line and a VPN. There was an inadequate problem in the computing environment.

Therefore, the present invention was created in order to solve the above problems, and, without much additional costs, smart transactions that can be made more securely by using a speed algorithm mounted on a smart card and an encryption key recorded on the speed algorithm. The purpose is to provide a security method for financial automation devices using a card.

Figure 1 shows the overall network configuration of the financial network implemented security method of a financial automation device using a smart card according to the present invention,

2 illustrates a file map mounted on a smart card internal memory.

Figure 3 shows the flow of a preferred embodiment of a security method of a financial automation device using a smart card according to the present invention.

※ Explanation of code for main part of drawing

10: CD 20: ATM

30: relay device 40: host

50: security server

Security method of a financial automation device using a smart card according to the present invention for achieving the above object, the first step of recording the encryption key for the financial transaction in the inserted smart card; A second step of encrypting the entire transmission message in response to a financial transaction request of a user using the recorded encryption key and transmitting the encrypted message to the host; A third step of decrypting an encrypted reception message received after transmission of the transmission message using the recorded encryption key; And a fourth step of analyzing the decoded reception message and performing an appropriate operation on the requested financial transaction.

Hereinafter, an embodiment of a security method of a financial automation device using a smart card according to the present invention will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating the entire network configuration of a financial network in which a security method for a financial automation device using a smart card is implemented according to an embodiment of the present invention. A security server (Host) for generating and providing an automated device (CD 10, ATM 20) and an encryption key necessary for operating the speed algorithm, and encrypting or decrypting a transaction message (full text) using the generated encryption key. Security Module (50), a host (40) for receiving and interpreting the decrypted transaction message to perform the requested financial transaction, and a relay device for controlling a protocol between the financial automation device and the host (40). (BP) 30 is comprised.

At this time, the financial automation device is connected to the host 40 by TCP / IP.

On the other hand, the smart card is an IC card that has a calculation processing function and a built-in memory, and the smart card file map in which the speed algorithm ('SPEED DF' of FIG. 2) is stored as shown in FIG. In the file map of FIG. 2, MF is an IC Chip Memory Master, DF is a dedicated file, and EF means an element file (Read, Write), and the speed algorithm stores an encryption key for 'EF key management. And an 'EF encryption / decryption' section for encrypting the transmission message using the encryption key and decrypting the reception message using the encryption key.

Figure 3 shows the flow of a preferred embodiment of a security method of a financial automation device using a smart card according to the present invention, hereinafter with reference to the configuration of Figure 1 and the file map of Figure 2 according to the present invention The security method will be described in detail.

First, the financial automation device (for example, ATM 20) receives the encryption key generated from the security server 50 by accessing the host 40 through the relay device 30 at the time of the first opening of the day. The encryption key is used in the operation of the speed algorithm in the smart card.

In this state, when the smart card is inserted (S20), the ATM 20 performs a predetermined initial operation, wherein the user requests a desired financial transaction (for example, deposit withdrawal) at the request of the ATM 20. ) And the PIN set for the financial transaction using the smart card, and thus, the 'PIN authentication' section of the file map uses the input password and the preset password to thereby justify the user. Perform user authentication to determine

If the user's legitimacy is determined through the authentication process, the smart card can be accessed from then on. Therefore, the ATM 20 executes the speed algorithm in the smart card and stores the received encryption key in the ' Write to the EF key management section (S21).

In this state, the EF encryption / decryption unit of the speed algorithm encrypts the entire transmission message for the financial transaction requested by a legitimate user using the encryption key (S22), and the ATM 20 encrypts the encrypted message. The transmission message is transmitted to the security server 50.

Accordingly, the security server 50 decrypts the encrypted transmission message again using the previously generated encryption key (S23) and transmits it to the host 40, and the host 40 transmits the decrypted transmission message. To perform the financial transaction requested from (S24).

Again, the security server 50 encrypts the received message generated according to the financial transaction processing of the host 40 using the previously generated encryption key (S25), and the host 40 encrypts the encrypted received message. Is transmitted to the ATM 20.

As the received message is transmitted to the ATM 20, the 'EF encryption / decryption' portion of the speed algorithm decrypts the encrypted received message using the encryption key (S26) and decodes the decrypted received message. The ATM 20 is provided.

Accordingly, the ATM 20 analyzes the decrypted received message and performs an appropriate operation (S27). For example, when the requested financial transaction is a deposit withdrawal, withdraw the requested amount according to the received message. do.

Up to now, the present invention described above applies a speed 128-bit encryption method, which is a domestic standard symmetric key algorithm currently recommended by the Financial Supervisory Service, and uses a speed algorithm in a smart card to solve the security problem of the encryption algorithm. By recording and allowing access to the smart card only at the time of authentication by password, it is possible to perform a more secure financial transaction.

The above-described preferred embodiments of the present invention are disclosed for purposes of illustration, and those skilled in the art can improve, change, and substitute various other embodiments within the technical spirit and scope of the present invention disclosed in the appended claims below. Or addition may be possible.

Security method of a financial automation device using a smart card according to the present invention made as described above, while encrypting and transmitting a transaction message between the financial automation device and the host using an encryption key recorded on the smart card, while performing a separate authentication process By only allowing access to the smart card recorded with the encryption key, it is a very useful invention that more secure financial transactions are made using the smart card without using an expensive DES board.

Claims (4)

In the security method of a financial automation device, A first step of recording an encryption key for a financial transaction on an inserted smart card; A second step of encrypting the entire transmission message in response to a financial transaction request of a user using the recorded encryption key and transmitting the encrypted message to the host; A third step of decrypting an encrypted reception message received after transmission of the transmission message using the recorded encryption key; And And a fourth step of analyzing the decrypted reception message and performing an appropriate operation for the requested financial transaction. The method of claim 1, The first step is a security method of a financial automation device using a smart card, characterized in that further comprising the step of receiving and storing the encryption key for a financial transaction through an external host for the first time on the day of the automated automation device. The method of claim 1, The first step is a security method of a financial automation device using a smart card, characterized in that for recording the encryption key on the security algorithm mounted in the smart card internal memory. The method of claim 3, wherein And encrypting the second step and decrypting the third step are performed by the security algorithm.