WO2014173197A1

WO2014173197A1 - Method for implementing secure transaction of touch terminal

Info

Publication number: WO2014173197A1
Application number: PCT/CN2014/072100
Authority: WO
Inventors: 王斌
Original assignee: 福建联迪商用设备有限公司
Priority date: 2013-04-26
Filing date: 2014-02-14
Publication date: 2014-10-30
Also published as: CN103236012B; CN103236012A

Abstract

The present invention provides a method for secure transaction of a touch terminal. According to the method, an input method is installed in the touch terminal, the installed input method is bound on a transaction program, and the bound input method is used in the transaction program and is prohibited from being switched to a common input method, so as to avoid that sensitive information of a user is stolen by an insecure input method, lower the possibility that data is stolen without being noticed when sensitive data is input, enhance the security during the transaction, and enable a transaction process to be more secure and reliable.

Description

Method for realizing secure transaction of touch terminal

Technical field

The present invention relates to the field of secure transactions, and more particularly to a method of implementing secure transactions for touch terminals using, for example, mobile phones, personal digital assistants, portable computers, financial transactions, and the like.

Background technique

With the widespread promotion of touch-type terminal devices, financial transactions have become more common and convenient on terminals. However, due to the lack of security awareness of some users, they do not know how to protect themselves during the transaction process. Many transaction sensitive data (such as bank card numbers and passwords) are easily acquired by criminals, causing certain economic losses. The input method is an important channel for the touch-type terminal to interact with the user. In general, the user of the touch-type terminal inputs some sensitive data (such as the card number and password of the bank card) to the terminal through the input method. Therefore, an unsafe input method may leak the user's information to the criminals for the first time. At present, there are many types of input methods. Under normal circumstances, it is difficult for users to distinguish whether the input method is safe. This makes some sensitive data leak out of sensitive data in the "unconsciously".

Summary of the invention

In view of this, the present invention provides a secure and reliable method for securely handling touch terminals.

To achieve the above object, the present invention adopts the following technical solutions:

A method for implementing a secure transaction of a touch terminal, the transaction method is:

The input method is installed on the touch terminal before the transaction, and the installed input method is bound to the transaction program; when the touch terminal performs the transaction, the bound input method is called, and if the call is successful, the transaction is performed, otherwise the transaction is rejected.

The transaction method provided by the present invention further includes setting a successful input method to the current input method and prohibiting the switching input method when the transaction is performed.

The touch terminal described in the present invention uses a digital signature to install an input method, and the steps are as follows:

S 1 : encrypting the input method installation package with a private key;

S2: retaining the public key of the decryption input method installation package on the touch terminal;

S3: When installing the input method, use the public key on the touch terminal to decrypt the input method installation package. If the decryption is successful, the input method is marked as the input method bound to the transaction program; otherwise, it is marked as normal input method or refuses to install.

The transaction method provided by the present invention further includes when the transaction program ends or is switched from the transaction program to the ordinary course In the sequence, the bound input method switches to the normal input method; when the transaction program is started or switched from the normal program to the transaction program, the normal input method switches to the bound input method.

The touch terminal in the present invention is one of a mobile phone, a personal digital assistant, a portable computer, a financial transaction terminal, or a combination thereof.

The present invention adopts the above technical solution, by installing and installing an input method in a touch terminal, the installed input method is bound to a transaction program, and an input method bound to the transaction program is used in the transaction process, and switching to the common input method is prohibited. It can avoid unsafe input method to steal user sensitive information, reduce the possibility of data being stolen when inputting sensitive data, strengthen the security of transactions, and make the transaction process more secure and reliable. DRAWINGS

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments:

1 is a flow chart showing the installation method of the touch terminal of the present invention;

2 is a flow chart of the secure transaction of the touch terminal of the present invention;

3 is a diagram showing an input method state switching in a secure transaction of the touch terminal of the present invention.

Specific form

In the touch terminal secure transaction method provided by this embodiment, an input method is required to be installed on a touch terminal, such as a mobile terminal, a personal digital assistant, a portable computer, a financial transaction, or the like, before the transaction, the input method of the installation. Bind to the trading program;

As shown in FIG. 1, in order to ensure the security of the input method of the touch terminal, the touch terminal described in this embodiment uses a digital signature to install the input method. The steps are as follows:

S 1 : encrypting the input method installation package with a private key;

As shown in FIG. 2, in an embodiment provided by the method for securely trading a touch terminal, when the touch terminal transaction program is started, the bound input method is invoked, and if the call is successful, the called binding input method is set. For the current input method, and prohibit switching the input method, then you can enter the bank card number and password and other sensitive data on the touch terminal for secure transactions; if the input method of calling the binding is unsuccessful, the bound input method is damaged. Or there are potential insecurities to reject the transaction.

As shown in Figure 3, when performing a touch terminal security transaction or switching from a normal program to a transaction program, The input method is switched to the input method bound to the transaction program, and the switching of the input method is prohibited, and the user performs the transaction under the legal input method state, thereby increasing the reliability in the transaction process.

When the transaction ends or is switched from the trading program to the normal program, the bound input method switches to the normal input method without affecting the user's usage habits.

The invention is bound to the transaction program by the input method installed in the touch terminal, and the input method of the installation is bound to the transaction program, and the binding input method is used in the transaction program and the switch to the ordinary input method is prohibited, thereby avoiding the insecure input method stealing. User sensitive information reduces the possibility of data being stolen when inputting sensitive data, enhances security during transactions, and makes the transaction process more secure and reliable.

Claims

Claim

A method for implementing a secure transaction of a touch terminal, characterized in that: the transaction method is: installing an input method on a touch terminal before the transaction, the installed input method is bound to the transaction program; when the touch terminal performs the transaction The bound input method is called, and if the call is successful, the transaction is performed, otherwise the transaction is rejected.

2. The method for implementing a secure transaction of a touch terminal according to claim 1, wherein: the transaction method further comprises: setting a successful input method to a current input method when the transaction is performed, and prohibiting Switch the input method.

3. The method for implementing a secure transaction of a touch terminal according to claim 1, wherein: the touch terminal installs an input method by using a digital signature, and the steps are as follows:

S1: Encrypt the input method installation package with the private key;

S3: When installing the input method, use the public key on the touch terminal to decrypt the input method installation package. If the decryption succeeds, mark the input method as the input method bound to the transaction program; otherwise, mark it as normal input method or refuse to install.

4. The method for implementing a secure transaction of a touch terminal according to claim 1, wherein: the method further comprises: when the transaction program ends or is switched from a transaction program to a normal program, the bound input method is switched. To the normal input method; when the transaction program is started or switched from the normal program to the transaction program, the normal input method switches to the bound input method.

The method for implementing secure transaction of a touch terminal according to claim 1 or 4, wherein: the touch terminal is one of a mobile phone, a personal digital assistant, a portable computer, a financial transaction terminal or combination.