WO2015161691A1

WO2015161691A1 - Secure data interaction method and system

Info

Publication number: WO2015161691A1
Application number: PCT/CN2015/071354
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2014-04-25
Filing date: 2015-01-22
Publication date: 2015-10-29

Abstract

Provided are a secure data interaction method and system, the method comprising: a terminal acquires the identifier information of a scanned intelligent cryptographic device, acquires the corresponding user information, stores the user information into a pre-established current user list, generates transaction information, acquires transaction request information, and transmits to the intelligent cryptographic device the transaction request information; the intelligent cryptographic device acquires and prompts the transaction information, and generates the transaction confirmation information; the terminal acquires a transaction data packet according to the transaction confirmation information, and transmits the transaction data packet to a background system server; and the background system server acquires the transaction confirmation information according to the transaction data packet, authenticates the transaction confirmation information, and executes the transaction after the transaction confirmation information passes the authentication. Thus, a customer makes payment without the use of a wallet, a credit card, a mobile phone or other methods, thus simplifying the interactive operation in the payment process between the customer and a merchant, increasing payment efficiency, improving customer experience in a near-field payment process, and ensuring the payment security of the customer.

Description

Data security interaction method and system

Technical field

The present invention relates to the field of information security, and in particular, to a data security interaction method and system.

Background technique

Mobile payment is a service that allows users to use their mobile terminals (such as smart phones, PDAs, tablets, laptops, etc.) to pay for goods or services they consume. The unit or individual sends the payment instruction directly or indirectly to the banking financial institution through the mobile terminal, the Internet or proximity sensing to generate the behavior of money payment and capital circulation, thereby realizing the mobile payment function. Mobile payment combines mobile terminals, the Internet, application providers, and financial institutions to provide users with financial services such as money payment and payment.

Mobile payment mainly includes remote payment and near-field payment. Remote payment refers to the user logging in to the bank's webpage through the mobile terminal for payment, account operation, etc., which is mainly applied to the shopping and consumption of online e-commerce websites; near-field payment refers to the instant payment to the merchant through the mobile terminal when the consumer purchases the goods or services. The payment is made, the processing of the payment is performed on site, and the offline operation of the mobile network is not required, and the local communication with the vending machine and the POS machine is realized by using the radio frequency (NFC), infrared, Bluetooth, and the like of the mobile terminal.

In the entire mobile payment process, the participants involved in the payment include: consumer users, merchants, mobile operators, third-party service providers, banks. Consumer users and merchants are the service objects of the system, mobile operators provide network support, banks provide bank-related services, and third-party service providers provide payment platform services to achieve business through the combination of all parties. The electronic and mobileization of payment methods has become an inevitable development trend, and the security issue of mobile payment systems is the core issue of mobile e-commerce security.

How to ensure the security of data interaction in the process of mobile payment is an urgent problem to be solved.

Summary of the invention

The present invention is directed to solving one of the above problems.

A primary object of the present invention is to provide a data security interaction method.

Another main object of the present invention is to provide a data security interaction system.

In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

An aspect of the present invention provides a data security interaction method, including: a terminal scanning a smart cryptographic device within a signal coverage area, and obtaining identification information of the scanned smart cryptographic device; the terminal according to the scanned smart The identification information of the cryptographic device acquires user information corresponding to the smart cryptographic device; the terminal uses the user information Stored in a pre-established current user list; the terminal generates transaction information according to user information corresponding to the smart cryptographic device to be traded, and obtains transaction request information according to the transaction information; the terminal sends the location to the smart cryptographic device Transmitting the transaction request information; after receiving the transaction request information, the smart cryptographic device obtains the transaction information according to the transaction request information; the smart cryptographic device prompts the transaction information; and the smart cryptographic device receives the confirmation instruction And generating transaction confirmation information; the terminal receiving the transaction confirmation information; the terminal obtaining a transaction data packet according to the transaction confirmation information, and transmitting the transaction data packet to the background system server; the background system server After receiving the transaction data packet, the transaction confirmation information is obtained according to the transaction data package; the background system server verifies the transaction confirmation information, and executes the transaction after the verification is passed.

In addition, the acquiring, by the terminal, the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device includes: sending, by the terminal, identification information and user information of the smart cryptographic device to the background system server After the background system server receives the identification information of the smart cryptographic device and the user information reading request, the user information corresponding to the smart cryptographic device is obtained according to the identification information of the smart cryptographic device; The background system server obtains response information of the user information read request according to the user information, and sends response information of the user information read request to the terminal; the terminal receives the user information read After the requested response information, the user information is obtained according to the response information of the user information read request.

In addition, the acquiring, by the terminal, the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device includes: the terminal, according to the scanned information of the smart cryptographic device, to the smart cryptographic device Sending a user information read request; the smart cryptographic device obtains pre-stored user information, and obtains response information of the user information read request according to the user information, and sends the user information read request to the terminal Response information: after receiving the response information of the user information read request, the terminal obtains the user information according to the response information of the user information read request.

In addition, after the step of scanning the smart cryptographic device in the signal coverage and obtaining the scanned identification information of the smart cryptographic device, the method further includes: obtaining, by the terminal, signal coverage at the terminal And generating, by the identifier information of all the smart cryptographic devices, the real-time identification list; the terminal, according to the preset time interval, the identification information of the smart cryptographic device in the real-time identification list and the smart cryptographic device in the current user list The identification information is compared; if the identification information of the smart cryptographic device in the real-time identification list is not in the current user list, the terminal is configured to acquire the smart password according to the scanned identification information of the smart cryptographic device. a step of the user information corresponding to the device; and if the identification information of the smart cryptographic device in the current user list is not in the real-time identification list, deleting the smart cryptographic device in the current user list that is not in the real-time identification list User information.

In addition, the terminal scans the smart cryptographic device within the signal coverage range, and obtains the scanned smart password. After the step of the identification information of the device, the method further includes: obtaining, by the terminal, identification information of all the smart cryptographic devices within the signal coverage of the terminal, and generating a real-time identification list; the terminal according to the preset time interval Comparing the identification information of the smart cryptographic device in the real-time identification list with the identification information of the smart cryptographic device in the current user list; if the identification information of the smart cryptographic device in the real-time identification list is not in the current In the user list, the step of acquiring, by the terminal, the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device, and obtaining the user information after the terminal obtains the user information Information is stored in the real-time identification list; and if the identification information of the smart cryptographic device in the real-time identification list is in the current user list, the user of the smart cryptographic device in the current user list is Information is stored in the real-time identification list; the real-time identification list is used as an updated Said list of current users.

In addition, after the terminal sends the identifier information of the smart cryptographic device and the user information read request to the background system server, the method further includes: the background system server determining the identifier information of the smart cryptographic device Whether it is included in the abnormal list of the smart password device pre-stored in the background system server; the background system server obtains the locked smart password device after determining that the identification information of the smart password device is in the abnormal list of the smart password device And acquiring, by using the private key of the background system server, the locked smart password device instruction to obtain a fifth signature information, and sending, by the terminal, the locked smart password device instruction and the fifth to the smart password device Signing information; after receiving the locked smart cryptographic device command and the fifth signature information, the smart cryptographic device verifies the fifth signature information by using a public key in the pre-stored background system server certificate; The smart cryptographic device is verifying the fifth signature letter Passed, according to the apparatus instructions smart password lock locking operation is performed.

In addition, the method further includes: the background system server receiving the terminal registration application, and reviewing the terminal registration application; the background system server sending the terminal password to the terminal after reviewing the terminal registration application The key pair generates an instruction; after receiving the terminal key pair generation instruction, the terminal generates a terminal key pair; the terminal sends the public key in the terminal key pair to the background system server; After receiving the public key in the terminal key pair, the system server generates the terminal certificate, and sends the terminal certificate to the terminal; the terminal stores the terminal certificate; and the background system server receives the smart The password device registration application is performed, and the smart password device registration application is reviewed; the background system server sends a smart password device key pair generation instruction to the smart password device after reviewing the smart password device registration application; After the smart cryptographic device receives the smart cryptographic device key pair generation instruction, generating a smart password a backup key pair; the smart cryptographic device sends a public key in the smart cryptographic device key pair to the background system server; after the background system server receives the public key in the smart cryptographic device key pair Generating the smart cryptographic device certificate and transmitting the smart cryptographic device certificate to the smart cryptographic device; the smart cryptographic device storing the smart cryptographic device certificate.

In addition, the method further includes: the terminal acquiring a terminal account cancellation application, signing the account cancellation application with the private key of the terminal to obtain a sixth signature information, and transmitting the terminal pin to the background system server. a user application and the sixth signature information; the background system server, after receiving the terminal account cancellation application and the sixth signature information, using the public key in the pre-stored terminal certificate to the sixth signature information Performing verification; after verifying that the sixth signature information is passed, the background system server deletes the pre-stored terminal certificate, and generates terminal account completion information, and sends the terminal account completion information to the terminal; After receiving the information about the completion of the terminal, the terminal deletes the private key of the terminal; and/or the smart cryptographic device obtains a smart PIN device account cancellation application, and uses the private key of the smart cryptographic device to Applying for signature to obtain the seventh signature information, and sending the smart password device account cancellation application and the seventh signature information to the background system server; After receiving the smart PIN device account cancellation application and the seventh signature information, the background system server uses the pre-stored public key in the smart cryptographic device certificate to verify the seventh signature information; After verifying that the seventh signature information is passed, the system server deletes the pre-stored smart password device certificate, and generates a smart password device account completion information, and sends the smart password device account completion information to the smart password device; After receiving the information about the completion of the smart cryptographic device, the smart cryptographic device deletes the private key of the smart cryptographic device.

In addition, after the background system server receives the identification information of the smart cryptographic device and the user information read request, the background system server sends the response information of the user information read request to the terminal. Before the step, the method further includes: the background system server sends the user authorization request information to the smart cryptographic device by using the terminal; the smart cryptographic device generates the authorization information after receiving the user authorization request information, and Sending, by the terminal, the authorization information to the background system server; after the background system server receives the authorization information, executing, by the background system server, sending the response information of the user information read request to the terminal A step of.

In addition, after the smart cryptographic device receives the user authorization request information, the step of generating the authorization information includes: after receiving the user authorization request information, the smart cryptographic device converts from a sleep state to an awake state; The smart cryptographic device generates authorization information in the awake state.

In addition, after the smart cryptographic device receives the transaction request information, the step of obtaining the transaction information according to the transaction request information includes: after receiving the transaction request information, the smart cryptographic device converts from a sleep state to Awakening state; the smart cryptographic device obtains the transaction information according to the transaction request information in an awake state.

In addition, the step of generating the transaction confirmation information by the smart cryptographic device comprises: the smart cryptographic device signing the transaction information by using a private key of the smart cryptographic device, generating transaction signature information as transaction confirmation information; or the intelligence The cryptographic device generates a dynamic password as the transaction confirmation information.

In addition, the step of generating the transaction confirmation information by the smart cryptographic device comprises: generating a single time by the smart cryptographic device Transmitting the identifier, and signing the transaction information and the single transaction identifier by using a private key of the smart cryptographic device to generate transaction signature information as transaction confirmation information; or the smart cryptographic device generates a single transaction identifier, utilizing The private key of the smart cryptographic device signs the single transaction identifier to obtain signature information of the single transaction identifier, and generates a dynamic password, and the signature information of the single transaction identifier and the dynamic password are used as transaction confirmation information.

In addition, the step of the terminal receiving the transaction confirmation information includes: the terminal receiving an acoustic wave signal sent by the smart cryptographic device and decoding the acoustic wave signal to obtain transaction confirmation information; or the terminal collecting the smart password And the image information displayed by the device is decoded to obtain the transaction confirmation information; or the terminal receives the transaction confirmation information through a communication interface that the terminal matches with the smart cryptographic device; or the terminal passes The information input by the terminal obtains the transaction confirmation information.

In addition, the background system server verifies the transaction confirmation information, and after the step of performing the transaction after the verification is passed, the method further includes: the background system server sending the transaction success receipt information to the terminal; The background system server sends a transaction success receipt information to the smart cryptographic device through the terminal; after receiving the transaction success receipt information, the smart cryptographic device prompts the transaction success receipt information.

In addition, after the background system server verifies the transaction confirmation information and performs the transaction after the verification is passed, the method further includes: the terminal sending the refund information to the smart password device; After receiving the refund information, the cryptographic device prompts the refund information; the smart cryptographic device receives the refund confirmation instruction, and signs the refund information by using the private key of the smart cryptographic device to generate a refund Confirmation information; the terminal receives the refund confirmation information, verifies the refund confirmation information, and after the verification is passed, uses the private key of the terminal to sign the refund confirmation information to generate a refund Confirming the package; the terminal sending the refund confirmation package and the refund confirmation information to the background system server; after the background system server receives the refund confirmation package and the refund confirmation information, respectively The refund confirmation package and the refund confirmation information are verified, and after all verification is passed, the refund operation is performed.

In addition, after the background system server verifies the transaction confirmation information and performs the transaction after the verification is passed, the method further includes: the smart password device sending a refund request to the terminal; the terminal Generating a refund information, and sending the refund information to the smart password device; after receiving the refund information, the smart password device prompts the refund information; the smart password device receives a refund confirmation instruction And signing the refund information by using a private key of the smart cryptographic device to generate refund confirmation information; the terminal receiving the refund confirmation information, verifying the refund confirmation information, and verifying After passing, the refund confirmation information is signed by using the private key of the terminal to generate a refund confirmation package; the terminal sends the refund confirmation package and the refund confirmation information to the background system server; After receiving the refund confirmation package and the refund confirmation information, the background system server separately checks the refund confirmation package and the refund confirmation information After, and all verified, perform the refund operation Work.

In addition, after the background system server verifies the transaction confirmation information and performs the transaction after the verification is passed, the method further includes: the smart password device sending a refund request to the terminal; the terminal Generating a refund request identifier, and sending the refund request identifier to the smart password device; after receiving the refund request identifier, the smart password device generates refund information and utilizes the private password device Keys sign the refund information, obtain refund confirmation information, and send the refund confirmation information to the terminal; the terminal receives the refund confirmation information, and verify the refund confirmation information. And after the verification is passed, the refund confirmation information is signed by using the private key of the terminal to generate a refund confirmation package; the terminal sends the refund confirmation package and the refund confirmation to the background system server. Information; after the background system server receives the refund confirmation package and the refund confirmation information, respectively, the refund confirmation package and the refund confirmation letter Verified and validated after all, perform the refund operation.

In addition, the refund information also includes an electronic statement.

In addition, the transaction success receipt information also includes an electronic statement.

In addition, the transaction information also includes an electronic statement.

In addition, before the terminal scans the smart cryptographic device within the signal coverage area and obtains the scanned identification information of the smart cryptographic device, the method further includes: the smart cryptographic device enters a scanable state.

In addition, before the terminal acquires the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device, the method further includes: the terminal and the background system server performing mutual authentication.

In addition, the mutual authentication between the terminal and the background system server includes: the terminal generates first to-be-signed information; the terminal sends the first to-be-signed information and the first authentication request information to the background system server; After receiving the first to-be-signed information and the first authentication request information, the server generates second to-be-signed information; the background system server sends the second to-be-signed information and the background system server certificate to the terminal; After receiving the second to-be-signed information and the background system server certificate, the terminal uses the root certificate corresponding to the pre-stored background system server certificate to verify whether the background system server certificate is legal; the terminal is verifying the background. After the system server certificate is legal, the first signature information and the second signature information are signed by the private key of the terminal to generate first signature information; the terminal sends the first to the background system server a signature information and a terminal certificate; the background system server utilizes the pre-stored end The root certificate corresponding to the certificate verifies whether the terminal certificate is legal; the background system server verifies the first signature information by using a public key in the terminal certificate after verifying that the terminal certificate is legal; the background system server is After the first signature information is verified, the background authentication completion message is generated, and the background authentication completion message is sent to the terminal; after receiving the background authentication completion message, the terminal verifies the background authentication completion message; After verifying that the background authentication completion message is passed, the terminal passes the Generating a terminal authentication first completion message, and sending the terminal authentication first completion message to the background system server; after the background system server receives the terminal authentication first completion message, verifying the terminal authentication first completion message After the background system server verifies that the terminal authentication first completion message passes, the terminal and the background system server complete mutual authentication.

In addition, the first authentication request information includes the identifier information of the terminal; after the background system server receives the first to-be-signed information and the first authentication request information, it is determined whether the identifier information of the terminal includes And determining, by the backend system server, the terminal abnormality list pre-stored in the background system server; after determining that the identification information of the terminal is in the abnormal list of the terminal, the background system server acquires a lock terminal instruction, and uses the background system server The private key signs the locked terminal instruction to obtain the fourth signature information, and sends the locked terminal instruction and the fourth signature information to the terminal; the terminal receives the locked terminal instruction and the fourth signature information Then, the fourth signature information is verified by using a public key in the pre-stored background system server certificate; after verifying that the fourth signature information is passed, the terminal performs a locking operation according to the locked terminal instruction.

In addition, before the terminal acquires the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device, the method further includes: the terminal and the smart cryptographic device perform mutual authentication.

In addition, the mutual authentication of the terminal and the smart cryptographic device includes: the terminal generates third to-be-signed information; the terminal sends the third to-be-signed information and the second authentication request information to the smart cryptographic device; After receiving the third to-be-signed information and the second authentication request information, the smart cryptographic device generates fourth to-be-signed information; the smart cryptographic device uses the private key of the smart cryptographic device to the third The information to be signed is signed to obtain the second signature information, and the fourth to-be-signed information, the second signature information, and the smart cryptographic device certificate are sent to the terminal; the terminal receives the fourth to-be-signed information, After the second signature information and the smart cryptographic device certificate, the root certificate corresponding to the pre-stored smart cryptographic device certificate is used to verify whether the smart cryptographic device certificate is legal; after the terminal verifies that the smart cryptographic device certificate is legal, Verifying the second signature information by using a public key in the smart cryptographic device certificate; the terminal is at the verification office After the second signature information is passed, the third signature information and the fourth signature information to be signed are obtained by using the private key of the terminal to obtain third signature information; the terminal sends the identifier to the smart cryptographic device. a third signature information and the terminal certificate; after receiving the third signature information and the terminal certificate, the smart cryptographic device verifies whether the terminal certificate is legal by using a pre-stored root certificate corresponding to the terminal certificate; After verifying that the terminal certificate is legal, the smart cryptographic device uses the public key in the terminal certificate to verify the third signature information; after the smart cryptographic device verifies the third signature information, the smart cryptographic device generates intelligence. a cryptographic device authentication completion message; the smart cryptographic device sends the smart cryptographic device authentication completion message to the terminal; after receiving the smart cryptographic device authentication completion message, the terminal verifies the smart cryptographic device authentication completion message; After the terminal verifies that the smart cryptographic device authentication completion message is passed, the terminal generates a terminal. And the second second completion message is sent to the smart cryptographic device, and the smart cryptographic device verifies the second authentication completion message after receiving the terminal authentication second completion message; After the smart cryptographic device verifies the terminal authentication second completion message, the terminal and the smart cryptographic device complete mutual authentication.

In addition, after the smart cryptographic device receives the third to-be-signed information and the second authentication request information, the step of generating the fourth to-be-signed information includes: the smart cryptographic device receiving the second authentication request After the information, the sleep state is converted to the awake state; the smart cryptographic device generates the fourth to-be-signed information in the awake state.

In addition, the information transmitted between the background system server and the terminal is transmitted through the first session key encryption calculation and/or the verification calculation, wherein the first session key is pre-existing in the background system server. And the first session key in the terminal or the first session key is negotiated and generated by the background system server and the terminal; and/or the information transmitted between the terminal and the smart cryptographic device passes the second session key Encrypted computing and/or verifying post-calculation transmission, wherein the second session key is pre-existing in the terminal and the smart cryptographic device or the second session key passes through the terminal and the smart cryptographic device Negotiate generation.

Another aspect of the present invention provides a data security interaction system, including: a terminal configured to scan a smart cryptographic device within a signal coverage area, and obtain the scanned identification information of the smart cryptographic device; according to the scanned The identification information of the smart cryptographic device acquires the user information corresponding to the smart cryptographic device; stores the user information in a pre-established current user list; generates transaction information according to the user information corresponding to the smart cryptographic device to be traded, and generates the transaction information according to the Transmitting transaction information to obtain transaction request information; transmitting the transaction request information to the smart cryptographic device; receiving transaction confirmation information, wherein the transaction confirmation information is generated by the smart cryptographic device; obtaining transaction data according to the transaction confirmation information And sending the transaction data packet to the background system server; the smart cryptographic device is configured to receive the transaction request information sent by the terminal, and obtain the transaction information according to the transaction request information; Transaction information; receiving confirmation instructions and generating transactions The background system server is configured to receive the transaction data packet sent by the terminal, obtain the transaction confirmation information according to the transaction data packet, verify the transaction confirmation information, and after verification Execute the transaction.

In addition, the terminal is further configured to send the identification information of the smart cryptographic device and the user information read request to the background system server, and receive the response information of the user information read request sent by the background system server, according to the The response information of the user information read request obtains the user information; the background system server is further configured to receive the identification information of the smart cryptographic device and the user information read request sent by the terminal, according to the The identification information of the smart cryptographic device acquires user information corresponding to the smart cryptographic device; obtains response information of the user information read request according to the user information, and sends a response to the user information read request to the terminal information.

In addition, the terminal is further configured to send the smart password according to the scanned identifier information of the smart cryptographic device. The code device sends a user information read request; receives response information of the user information read request sent by the smart cryptographic device, and obtains the user information according to the response information of the user information read request; the smart cryptographic device further And configured to obtain pre-stored user information, obtain response information of the user information read request according to the user information, and send response information of the user information read request to the terminal.

In addition, the terminal is further configured to scan the smart cryptographic device within the signal coverage range, and obtain the scanned identification information of the smart cryptographic device, and obtain all the smart cryptographic devices within the signal coverage range of the terminal. Identifying the information, generating a real-time identification list; comparing the identification information of the smart cryptographic device in the real-time identification list with the identification information of the smart cryptographic device in the current user list according to a preset time interval; If the identification information of the smart cryptographic device in the identification list is not in the current user list, the user information corresponding to the smart cryptographic device is obtained according to the scanned identification information of the smart cryptographic device; and if the current user list is in the current user list If the identification information of the smart cryptographic device is not in the real-time identifier list, the user information of the smart cryptographic device that is not in the real-time identifier list in the current user list is deleted.

In addition, the terminal is further configured to scan the smart cryptographic device within the signal coverage range, and obtain the scanned identification information of the smart cryptographic device, and obtain all the smart cryptographic devices within the signal coverage range of the terminal. Identifying the information, generating a real-time identification list; comparing the identification information of the smart cryptographic device in the real-time identification list with the identification information of the smart cryptographic device in the current user list according to a preset time interval; If the identification information of the smart cryptographic device in the identifier list is not in the current user list, the user information corresponding to the smart cryptographic device is obtained according to the scanned information of the smart cryptographic device, and the terminal obtains the After the user information is stored, the user information is stored in the real-time identification list; and if the identification information of the smart cryptographic device in the real-time identification list is in the current user list, the current user is User information of the smart cryptographic device in the list is stored in the real-time identification list; Said real-time identification list as the updated list of current users.

In addition, the background system server is further configured to: after the terminal sends the identifier information of the smart cryptographic device and the user information read request to the background system server, determine whether the identifier information of the smart cryptographic device is included in the background The smart password device exception list pre-stored in the system server; after determining that the smart password device identification information is in the smart password device abnormal list, acquiring the lock smart password device instruction, and using the background system server private The key pair locks the smart cryptographic device command to obtain a fifth signature information, and sends the locked smart cryptographic device command and the fifth signature information to the smart cryptographic device through the terminal; the smart cryptographic device is further configured Receiving the locked smart cryptographic device command and the fifth signature information, verifying the fifth signature information by using a pre-stored public key in the background system server certificate; after verifying that the fifth signature information is passed Actuating the lock according to the locked smart password device instruction Operation.

In addition, the background system server is further configured to receive a terminal registration application, and review the terminal registration application; after reviewing the terminal registration application, send a terminal key pair generation instruction to the terminal; Generating the terminal certificate by the public key in the terminal key pair sent by the terminal, and transmitting the terminal certificate to the terminal; and the background system server is further configured to receive the smart password device registration application, and The smart password device registration application is reviewed; after the verification of the smart password device registration application is passed, the smart password device key pair generation instruction is sent to the smart password device; and the smart password device sent by the smart password device is received. Generating, by the public key in the key pair, the smart cryptographic device certificate, and transmitting the smart cryptographic device certificate to the smart cryptographic device; the terminal is further configured to receive the terminal secret sent by the background system server The key pair generates an instruction to generate a terminal key pair; and sends the terminal secret to the background system server a public key of the pair; storing the terminal certificate; the smart cryptographic device is further configured to receive the smart cryptographic device key pair generation instruction sent by the background system server, and generate a smart cryptographic device key pair; The background system server sends the public key in the smart cryptographic device key pair; and stores the smart cryptographic device certificate.

In addition, the terminal is further configured to acquire a terminal account cancellation application, use the private key of the terminal to sign the account cancellation application to obtain a sixth signature information, and send the terminal account cancellation application to the background system server. And the sixth signature information; receiving the terminal account completion information sent by the background system server, deleting the private key of the terminal; the background system server is further configured to receive the terminal account sent by the terminal After the application and the sixth signature information, verifying the sixth signature information by using the public key in the pre-stored terminal certificate; after verifying that the sixth signature information is passed, deleting the pre-stored terminal certificate, And generating a terminal account completion information, and sending the terminal account completion information to the terminal; and/or the smart password device is further configured to obtain a smart password device account cancellation application, and using the private key of the smart password device Signing the account application to obtain the seventh signature information, and sending the smart password device account cancellation application and the office to the background system server The seventh signature information is received; the smart password device account completion information sent by the background system server is received, and the private key of the smart password device is deleted; the background system server is further configured to receive the information sent by the smart password device. Declaring the seventh signature information by using the pre-stored public key in the smart cryptographic device certificate; and verifying that the seventh signature information is deleted after the smart PIN device account cancellation application and the seventh signature information are described; Pre-storing the smart password device certificate, and generating a smart password device account completion information, and sending the smart password device account completion information to the smart password device.

In addition, the background system server is further configured to send user authorization request information to the smart cryptographic device by using the terminal, and after receiving the authorization information sent by the smart cryptographic device by using the terminal, send the The response information of the user information read request; the smart cryptographic device is further configured to receive the user authorization request information, generate authorization information, and send the authorization information to the background system server by using the terminal.

In addition, the smart cryptographic device is further configured to be in a dormant state after receiving the user authorization request information. Convert to wake-up state; generate authorization information in wake-up state.

In addition, the smart cryptographic device is further configured to receive the transaction request information, and switch from a sleep state to an awake state; and obtain the transaction information according to the transaction request information in an awake state.

In addition, the smart cryptographic device is further configured to sign the transaction information by using a private key of the smart cryptographic device, generate transaction signature information as transaction confirmation information or generate a dynamic password as transaction confirmation information.

In addition, the smart cryptographic device is further configured to generate a single transaction identifier, and use the private key of the smart cryptographic device to sign the transaction information and the single transaction identifier, and generate transaction signature information as transaction confirmation information. Or the smart cryptographic device is further configured to generate a single transaction identifier, sign the single transaction identifier with the private key of the smart cryptographic device, obtain signature information of the single transaction identifier, and generate a dynamic password, and The signature information of the one-time transaction identifier and the dynamic password are used as transaction confirmation information.

In addition, the terminal is further configured to receive the sound wave signal sent by the smart cryptographic device and decode the sound wave signal to obtain transaction confirmation information; or collect image information displayed by the smart cryptographic device and perform the image information Decoding to obtain the transaction confirmation information; or receiving the transaction confirmation information by a communication interface that the terminal matches with the smart cryptographic device; or obtaining the transaction confirmation information by using information input by the terminal.

Further, the background system server is further configured to: after verifying the transaction confirmation information, and after performing the transaction after the verification is passed, send the transaction success receipt information to the terminal; and/or The smart cryptographic device sends a transaction success receipt information; the smart cryptographic device is further configured to receive the transaction success receipt information, and prompt the transaction success receipt information.

In addition, the terminal is further configured to verify the transaction confirmation information in the background system server, and send the refund information to the smart password device after performing the transaction after the verification is passed; receiving the refund confirmation information, Declaring the refund confirmation information, and after the verification is passed, signing the refund confirmation information by using the private key of the terminal to generate a refund confirmation package; and sending the refund confirmation package to the background system server and The refund confirmation information; the smart password device is further configured to: after receiving the refund information sent by the terminal, prompting the refund information; receiving a refund confirmation instruction, and using the smart password device The private key signs the refund information to generate refund confirmation information; the background system server is further configured to receive the refund confirmation package and the refund confirmation information sent by the terminal, respectively The refund confirmation package and the refund confirmation information are verified, and after all verification is passed, the refund operation is performed.

In addition, the smart cryptographic device is further configured to: after the background system server verifies the transaction confirmation information, and after performing the transaction after the verification is passed, send a refund request to the terminal; and receive the After the refund information, prompting the refund information; receiving a refund confirmation instruction, and signing the refund information by using a private key of the smart password device to generate refund confirmation information; the terminal is further configured to Generate a refund message and send it to the The cryptographic device sends the refund information; receives the refund confirmation information, verifies the refund confirmation information, and after the verification is passed, signs the refund confirmation information by using the private key of the terminal Generating a refund confirmation package; sending the refund confirmation package and the refund confirmation information to the background system server; the background system server is further configured to receive the refund confirmation package and the The refund confirmation information is verified, and the refund confirmation package and the refund confirmation information are respectively verified, and after all verification is passed, the refund operation is performed.

In addition, the smart cryptographic device is further configured to verify the transaction confirmation information in the background system server, and send a refund request to the terminal after performing the transaction after the verification is passed; and receive the refund sent by the terminal Requesting an identifier, generating refund information, and signing the refund information by using a private key of the smart cryptographic device, obtaining refund confirmation information, and transmitting the refund confirmation information to the terminal; the terminal, And configured to generate a refund request identifier, and send the refund request identifier to the smart password device; receive the refund confirmation information, verify the refund confirmation information, and after the verification is passed, use the Declaring, by the private key of the terminal, the refund confirmation information to generate a refund confirmation package; sending the refund confirmation package and the refund confirmation information to the background system server; the background system server is further configured to Receiving the refund confirmation package and the refund confirmation information sent by the terminal, respectively verifying the refund confirmation package and the refund confirmation information And, after all verified, perform the refund operation.

In addition, the refund information also includes an electronic statement.

In addition, the transaction information also includes an electronic statement.

Furthermore, the smart cryptographic device is further configured to enter a scannable state before being scanned by the terminal within the signal coverage.

In addition, the terminal further performs mutual authentication with the background system server.

In addition, the terminal is further configured to generate first to-be-signed information, send the first to-be-signed information and the first authentication request information to the background system server, and receive the second to-be-signed information and the information sent by the background system server. The background system server certificate is used to verify whether the background system server certificate is legal by using the root certificate corresponding to the pre-stored background system server certificate; after verifying that the background system server certificate is legal, the first key of the terminal is used to the first The signature information and the second signature information are signed to generate first signature information; the first signature information and the terminal certificate are sent to the background system server; after receiving the background authentication completion message sent by the background system server, And verifying the background authentication completion message; after verifying that the background authentication completion message is passed, generating a terminal authentication first completion message, and sending the terminal authentication first completion message to the background system server; Configuring to receive the first to be sent sent by the terminal And the first authentication request information, generating the second to-be-signed information; transmitting the second to-be-signed information and the background system server certificate to the terminal; verifying whether the terminal certificate is verified by using a root certificate corresponding to the pre-stored terminal certificate Legal; after verifying that the terminal certificate is legal, And verifying the first signature information by using a public key in the terminal certificate; after verifying that the first signature information is passed, generating a background authentication completion message, and sending the background authentication completion message to the terminal; And the terminal authentication first completion message is sent by the terminal, and the terminal authenticates the first completion message; after verifying that the terminal authentication first completion message is passed, the terminal and the background system server complete mutual authentication.

In addition, the background system server is further configured to receive the first to-be-signed information and the first authentication request information that are sent by the terminal, where the first authentication request information includes identifier information of the terminal; Determining whether the identification information of the terminal is included in a terminal abnormal list pre-stored in the background system server; after determining that the identification information of the terminal is in the terminal abnormal list, acquiring a locked terminal instruction, and using the The private key of the background system server signs the locked terminal instruction to obtain the fourth signature information, and sends the locked terminal instruction and the fourth signature information to the terminal; the terminal is further configured to receive the background system server Sending the locked terminal instruction and the fourth signature information, verifying the fourth signature information by using a public key in the pre-stored background system server certificate; after verifying that the fourth signature information is passed, according to The locking terminal instructs to perform a locking operation.

In addition, the terminal further performs mutual authentication with the smart cryptographic device.

In addition, the terminal is further configured to generate third to-be-signed information, and send the third to-be-signed information and the second authentication request information to the smart cryptographic device, and receive the fourth to-be-sent sent by the smart cryptographic device. And verifying, by the root certificate corresponding to the pre-stored smart cryptographic device certificate, whether the smart cryptographic device certificate is legal; and verifying that the smart cryptographic device certificate is legal, using the signature information, the second signature information, and the smart cryptographic device certificate; The public key in the smart cryptographic device certificate verifies the second signature information; after verifying that the second signature information is passed, using the private key of the terminal to the third to-be-signed information and the And signing the fourth signature information to obtain the third signature information; sending the third signature information and the terminal certificate to the smart cryptographic device; and receiving the smart cryptographic device authentication completion message sent by the smart cryptographic device, and verifying the The smart password device authentication completion message is generated; after verifying that the smart password device authentication completion message is passed, generating Ending the second completion message, and sending the terminal authentication second completion message to the smart cryptographic device; the smart cryptographic device is further configured to receive the third to-be-signed information sent by the terminal, and the second And authenticating the request information, generating the fourth to-be-signed information; using the private key of the smart cryptographic device to sign the third to-be-signed information to obtain the second signature information, and sending the fourth to-be-signed information to the terminal, And the second signature information and the smart cryptographic device certificate; after receiving the third signature information and the terminal certificate sent by the terminal, verifying whether the terminal certificate is legal by using a pre-stored root certificate corresponding to the terminal certificate; After verifying that the terminal certificate is legal, the third signature information is verified by using a public key in the terminal certificate; after verifying that the third signature information is passed, a smart cryptographic device authentication completion message is generated; The terminal sends the smart cryptographic device authentication completion message; receiving the terminal authentication sent by the terminal is finished second After the message is obtained, the terminal authenticates the second completion message; after the terminal authenticates the second completion message, the terminal and the smart cryptographic device complete mutual authentication.

In addition, the smart cryptographic device is further configured to: after receiving the second authentication request information, transition from a sleep state to an awake state; and generate a fourth to-be-signed information in the awake state.

It can be seen from the technical solution provided by the above invention that the customer can complete the payment without using a wallet, a credit card, a mobile phone, etc., thereby simplifying the interaction between the customer and the merchant in the payment process, improving the payment efficiency, and improving the customer's The experience in the near-field payment process; at the same time, the security features of the smart cryptographic device are used to ensure the security of the customer payment process.

After the customer purchases the goods, the terminal does not need to obtain the user information by manually swiping the card or swiping the mobile phone. When the customer settles the account, the customer only needs to report his/her name, and the terminal can directly report the transaction amount after the settlement. The smart password device is sent to the customer and displayed. At this time, the customer only needs to confirm with the smart password device and output the transaction confirmation information, and the terminal generates the transaction data packet and sends it to the background system server, and the background system server verifies that the transaction data packet is accurate. After the transfer process, the payment process can be completed.

When the customer leaves the signal coverage of the store, the network connection between the smart cryptographic device and the terminal is automatically interrupted, and the user information disappears from the current user list of the store. If the customer enters another store again, he will automatically enter the current user list of the other store and start another shopping. This allows the customer to have a seamless experience without requiring the customer to perform any operations.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those of ordinary skill in the art will be able to obtain other figures from these drawings without the inventive effort.

1 is a schematic structural diagram of a data security interaction system provided by the present invention;

2 is a flow chart of a data security interaction method provided by the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or integrally connected; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art. Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

The data security interaction method provided by the present invention is applicable to the system architecture shown in FIG. 1, and includes: a background system server, a terminal, and a smart cryptographic device. among them:

The background system server can complete the management of the terminal and the smart cryptographic device and the storage and delivery management of the user information, for example, including registration, account cancellation, locking, authentication, etc. of the terminal and the smart cryptographic device, which can provide bank related services. Financial services such as payment platform services; may include a combination of one or more servers such as a payment server, an authentication server, and a management server.

The terminal can be a terminal of the merchant terminal to complete the initiation of the mobile payment, the authentication of the smart cryptographic device and the background system server, the maintenance of the user information, etc., and the terminal can automatically scan the smart cryptographic device within the coverage of the signal, and establish and The communication connection of the smart cryptographic device acquires the user information corresponding to the smart cryptographic device.

The smart cryptographic device has a function of secure payment (for example, electronic signature, dynamic password generation) and authentication of the terminal, and the smart cryptographic device has a wireless communication module (for example: Bluetooth, infrared, RFID, NFC, light, sound wave, heat, vibration) , WIFI, etc., can communicate with the terminal through the wireless communication module, of course, the smart password device can also include a wired interface (eg, audio interface, USB interface, serial port, etc.), and communicate with the terminal through the wired interface . In addition, the smart password device can also have a connection option function. If the user does not enable the function, the terminal cannot obtain the identification information of the smart password device and the corresponding user information. For example, a smart cryptographic device can enter a state that can be scanned for the terminal to scan to the smart cryptographic device. The connection option function of the smart password device can be implemented for the hardware switch set on the smart password device, or can be opened by the software for the smart password device. Enlightened.

As shown in FIG. 2, the data security interaction method provided by the present invention includes the following steps 1 to 6.

Step 1: The terminal and the smart password device register with the background system server.

It includes the following two aspects: the terminal registers with the background system server and the smart password device registers with the background system server. These two aspects are described in detail below.

1. The terminal registers with the background system server, where:

The background system server receives the terminal registration application and reviews the terminal registration application; specifically, the merchant can go to the bank counter to apply for registration of the terminal, or apply for registration of the terminal through the Internet, and the background system server receives the registration application. After that, the legality of the identity of the merchant is reviewed.

After the auditing terminal registration application is approved, the background system server sends a terminal key pair generation instruction to the terminal. Specifically, after the background system server verifies the legality of the merchant identity, the server system agrees to register the terminal of the merchant and sends the terminal to the terminal. The key pair generation instruction is configured to instruct the terminal to generate a terminal key pair, the terminal key pair including a pair of public and private keys.

After receiving the terminal key pair generation instruction, the terminal generates a terminal key pair. Specifically, the terminal may preset a key pair generation manner, and after the terminal receives the terminal key pair generation instruction, according to the preset The key pair generation method generates a terminal key pair, that is, generates a pair of public and private keys.

The terminal sends the public key in the terminal key pair to the background system server; specifically, the terminal can send the public key in the generated terminal key pair to the background system server through the trusted communication link to ensure the terminal The security of public key transmission; the public key in the terminal key pair generated by the public key can also be sent to the background system server through the Internet, so as to improve the convenience of the public key transmission of the terminal.

After receiving the public key in the terminal key pair, the background system server generates a terminal certificate and sends the terminal certificate to the terminal. Specifically, the background system server may perform the information of the merchant and the public key of the terminal by using the private key of the background system server. Calculating and generating a terminal certificate; the background system server may further include a CA server, and the terminal certificate is generated by calculating the information of the merchant and the public key of the terminal by using the private key of the CA server; the background system server may also use the information of the merchant and the public of the terminal. The key is sent to the CA. The CA calculates the terminal certificate based on the private key of the CA and the public key of the terminal, and sends the terminal certificate to the terminal through the background system server.

The terminal stores the terminal certificate. Specifically, after receiving the terminal certificate sent by the background system server, the terminal stores the terminal certificate in a storage area where the security function is executed. Of course, for different back-end system servers, the terminal can also store different terminal certificates sent by different back-end system servers.

2. The smart password device registers with the background system server, where:

The background system server receives the smart password device registration application and audits the smart password device registration application; specifically, the user holding the smart password device can apply for the registration of the smart password device at the bank counter, or can handle the smart through the Internet. After the registration request of the cryptographic device, the background system server receives the registration application and reviews the legality of the identity of the user.

After the auditing of the smart password device registration application, the background system server sends a smart password device key pair generation instruction to the smart password device; specifically, the background system server approves the legality of the user identity, and then agrees to the user's smart password. The device performs registration, and sends a key pair generation instruction to the smart cryptographic device, and is configured to instruct the smart cryptographic device to generate a smart cryptographic device key pair, the smart cryptographic device key pair including a pair of public and private keys.

After receiving the instruction of the smart cryptographic device key pair, the smart cryptographic device generates a smart cryptographic device key pair. Specifically, a smart key device may preset a key pair generation manner, and the smart cryptographic device receives the smart password. After the device key pair generates an instruction, the smart cipher device key pair is generated according to the preset key pair generation manner, that is, a pair of public and private keys are generated.

The smart cryptographic device sends the public key in the smart cryptographic device key pair to the background system server; specifically, the smart cryptographic device can forward the public key in the smart cryptographic device key pair generated by the smart cryptographic device to the background system through the trusted communication link The server sends the key to ensure the security of the public key of the smart cryptographic device. The public key of the smart cryptographic device key pair generated by the server can also be sent to the background system server through the Internet to improve the public key of the smart cryptographic device. Convenience of transmission.

After receiving the public key in the smart cryptographic device key pair, the background system server generates a smart cryptographic device certificate and sends the smart cryptographic device certificate to the smart cryptographic device; specifically, the background system server can use the private key of the background system server to the user. The information and the public key of the smart cryptographic device are calculated to generate a smart cryptographic device certificate; the backend system server may further include a CA server, and the user's information and the public key of the smart cryptographic device are calculated by the private key of the CA server to generate a smart password. The device certificate can also send the user's information and the public key of the smart cryptographic device to the CA. The CA calculates the smart cryptographic device certificate by calculating the user's information and the public key of the smart cryptographic device according to the private key of the CA. The background system server sends the smart password device.

The smart password device stores the smart password device certificate. Specifically, after receiving the smart password device certificate sent by the background system server, the smart password device stores the smart password device certificate in a storage area where the security function is executed. Of course, for different background system servers, the smart cryptographic device can also store different smart cryptographic device certificates sent by different background system servers.

Step 2: The terminal scans the smart cryptographic device within the signal coverage area, and obtains the identification information of the scanned smart cryptographic device.

Specifically, the terminal may send the query signal (for example, the serial number of the terminal) according to a certain time interval to query a smart cryptographic device within the coverage of the wireless signal;

The smart cryptographic device listens to the query of the terminal (query scan). After the smart cryptographic device enters the signal coverage of the terminal, the smart cryptographic device sends the identification information of the smart cryptographic device to the terminal, and the terminal scans the identification information of the smart cryptographic device. .

In the following, two methods for implementing terminal scanning to obtain identification information of a smart cryptographic device are provided:

(1) The terminal can use the IAC (Inquiry Access Code) to query the smart cryptographic device within the coverage of a certain wireless signal;

The smart cryptographic device listens (query scans) the query of the terminal, and sends the address and clock information of the smart cryptographic device to the terminal after the smart cryptographic device enters the signal coverage of the terminal;

The smart cryptographic device listens to paging information from the terminal and performs paging scanning;

The terminal pages the smart cryptographic device that has been queried;

After receiving the paging information, the smart cryptographic device sends a DAC (Device Access Code) of the smart cryptographic device to the terminal.

(2) The terminal sends an inquiry signal to query a smart cryptographic device within a certain wireless signal coverage range;

The smart cryptographic device listens (query scans) the query signal of the terminal, and sends the address of the smart cryptographic device to the terminal after the smart cryptographic device enters the signal coverage of the terminal.

Of course, the present invention only uses the above two examples to describe how the terminal obtains the identification information of the smart cryptographic device, but the present invention is not limited thereto. Based on the above two methods for obtaining the identification information of the smart cryptographic device, the smart cryptographic device may receive When any information is sent to the terminal, the information sent by the terminal can be used as a sleep wake-up signal, and the smart cryptographic device switches the sleep state to the awake state (ie, the normal working mode) according to the sleep wake-up signal. At the same time, the smart cryptographic device can automatically reply to the sleep state after any command execution ends. The smart cryptographic device enters a sleep state to save power of the smart cryptographic device and prolong its service life.

Before the terminal scans the smart password device, the smart password device also needs to enter a state that can be scanned, so that the terminal can scan the smart password device, wherein the smart password device enters the scanable state and can pass the smart password device. The set hardware switch is enabled, and can also be implemented by the smart password device software.

In the present invention, the terminal can perform mutual authentication with the background system server, and/or the terminal can also perform mutual authentication with the smart cryptographic device.

1. The terminal and the backend system server perform mutual authentication, wherein:

The terminal generates the first to-be-signed information. Specifically, the terminal may generate the random number as the first to-be-signed information by using the random number generator, or may use its own serial number, MAC address, or other identification information as the first to-be-signed information. It may also be a combination of a random number and identification information as the first to-be-signed information. Among them, as long as they can be backstage system The information signed by the server can be used as the first to-be-signed information, so that the background system server returns the signature information and then authenticates the background system server. The random number can be one of a combination of numbers, letters, special characters, or the like.

The terminal sends the first to-be-signed information and the first authentication request information to the background system server. Specifically, the terminal may send the first to-be-signed information and the first authentication request information to the background system server through the trusted communication link, to The security of information transmission is guaranteed; the first to-be-signed information and the first authentication request information may also be sent to the background system server through the Internet to improve the convenience of information transmission.

In addition, in order to ensure the security of the data interaction and the legitimacy of the terminal, the background system server may further determine whether the identification information of the terminal is included in the background system server after receiving the first to-be-signed information and the first authentication request information. In the terminal abnormal list that is pre-stored, the first authentication request information includes the identification information of the terminal; the background system server obtains the locked terminal instruction after determining that the terminal identification information is in the terminal abnormal list, and uses the private of the background system server. The key pair locks the terminal instruction to obtain the fourth signature information, and sends the locked terminal instruction and the fourth signature information to the terminal; after receiving the locked terminal instruction and the fourth signature information, the terminal uses the public key in the pre-stored background system server certificate. The fourth signature information is verified; after verifying that the fourth signature information is passed, the terminal performs a locking operation according to the locked terminal instruction.

Specifically, the terminal abnormal list may be a blacklist, a loss list, an invalidation list, or the like, which is an illegal list of the terminal identity. If the terminal identification information is in the terminal abnormal list, the terminal is an illegal terminal. Security, the background system server sends a lock instruction to the illegal terminal to lock the illegal terminal. At the same time, the background system server also signs the lock instruction to ensure the legal source of the lock instruction and avoid malicious operation of illegally locking the terminal.

Of course, the present invention is not limited to this, and for practical applications, as long as the illegal terminal can be legally locked.

In addition, the background system server may not sign the lock instruction and only send the lock command to the illegal terminal to lock the illegal terminal.

The terminal performing the locking operation according to the locking terminal instruction may include: the terminal rejects any request, destroys the stored certificate, and the like.

Of course, the background system server can also perform any request to reject the illegal terminal after sending the lock instruction.

It can be seen that when the terminal has an abnormal situation such as loss or illegal reporting, the identification information of the terminal will be entered into the abnormal list such as the loss list or blacklist of the background system server. Thereafter, if another person attempts to use the terminal. When a transaction is made to illegally transfer funds to steal funds, when the terminal and the background system server are authenticated, The system server compares the terminal identification information in the abnormal list. If the identification information of the terminal is found in the abnormal list, the background system server locks the terminal, thereby protecting the user account security.

After receiving the first to-be-signed information and the first authentication request information, the background system server generates the second to-be-signed information. Specifically, the background system server may generate the second to-be-signed information after receiving the first authentication request information. The random number generator generates the random number as the second to-be-signed information, and may also use its own serial number, MAC address or other identification information as the second to-be-signed information, or may be a combination of the random number and the identification information as the second. Information to be signed. The information that can be signed by the terminal can be used as the second information to be signed, so that the terminal can authenticate the terminal after returning the signature information. The random number can be one of a combination of numbers, letters, special characters, or the like.

The background system server sends the second to-be-signed information and the background system server certificate to the terminal; specifically, the background system server can send the second to-be-signed information and the background system server certificate to the terminal through the trusted communication link to ensure the information. The security of the transmission; the second signature information and the background system server certificate can also be sent to the terminal through the Internet to improve the convenience of information transmission.

After receiving the second to-be-signed information and the background system server certificate, the terminal uses the root certificate corresponding to the pre-stored background system server certificate to verify whether the background system server certificate is legal. Specifically, the terminal needs to obtain the background system server certificate during the registration process. Corresponding root certificate for legality verification of the background system server certificate.

After verifying that the background system server certificate is valid, the terminal uses the private key of the terminal to sign the first to-be-signed information and the second to-be-signed information to generate the first signature information. Specifically, the terminal signs the first to-be-signed information and the second to-be-signed. The information is signed, whereby the terminal transmits the signature information to the background system server, that is, the legal source of the data can be ensured, and the security of the important information in the data is also ensured. The first signature information in the present invention may be the first The information obtained by signing the information to be signed and the information to be signed by the second signature information may be obtained by signing the information of the first to-be-signed information and the second to-be-signed information according to the pre-negotiated adjustment scheme. Of course, after verifying that the background system server certificate is legal, the terminal may also generate a shared master key, and the shared master key may be configured to generate a first session key. At this time, the terminal also uses the public key in the background system server certificate. Encrypting the shared master key generates first encrypted information; thereby, the shared master key can be securely transmitted.

The terminal sends the first signature information and the terminal certificate to the background system server; of course, if the terminal further generates the shared master key and encrypts the shared master key to obtain the first encrypted information, in this step, the terminal goes to the background. The system server sends the first signature information and the terminal certificate, and also sends the first encrypted information to the background system server.

The background system server uses the root certificate corresponding to the pre-stored terminal certificate to verify whether the terminal certificate is legal. Specifically, the background system server obtains the root certificate corresponding to the terminal certificate during the registration process of the terminal, so as to verify the validity of the terminal certificate.

After verifying that the terminal certificate is legal, the background system server verifies the first signature information by using the public key in the terminal certificate;

After verifying that the first signature information is passed, the background system server generates a background authentication completion message, and sends a background authentication completion message to the terminal; of course, if the background system server further receives the first encrypted information, in this step, the background system server further The first encrypted information is decrypted by using the private key of the background system server to obtain a shared master key.

After receiving the background authentication completion message, the terminal verifies the background authentication completion message; specifically, the terminal performs legality verification on the background authentication completion message.

After the terminal verifies that the background authentication completion message is passed, the terminal generates a terminal completion first completion message, and sends a terminal authentication first completion message to the background system server; of course, if the terminal generates the shared master key, the terminal may further Calculating the first session key by sharing the master key;

After receiving the terminal completion first completion message, the background system server verifies that the terminal authenticates the first completion message; the specific background system server performs legality verification on the terminal authentication first completion message.

After the background system server verifies that the terminal completion first completion message is passed, the terminal and the background system server complete mutual authentication. Of course, if the background system server also decrypts and obtains the shared master key, in this step, the background system server may further calculate the first session key according to the shared master key.

Based on the two-way authentication between the terminal and the backend system server, the legality of both parties can be ensured, and the security of subsequent processing can be improved.

In addition, after the first system completion message of the terminal authentication is verified, the background system server also opens the corresponding authority to the terminal. For example, the terminal can obtain the user information corresponding to the smart password device from the background system server, so as to implement the management of the background system server to the terminal. .

Of course, if the first session key is also generated between the terminal and the background system server, the security and/or integrity of the data transmission between the background system server and the terminal can be ensured, so that the background system server and the terminal perform subsequent data transmission. And using the first session key to perform encryption calculation and/or check calculation on the data to be transmitted. The first session key may include an encryption key and/or a verification key, and the verification key may be a MAC check calculation key or a HASH check calculation key, and the encryption key is a symmetric encryption calculation key, and the encryption key is a symmetric encryption calculation key. The encryption key and/or the verification key included in the first session key may be obtained by decomposing by sharing the master key.

Of course, the present invention is not limited to such a first session key generation process initiated by the terminal, and may also be initiated by the background system server. At this time, the locking of the terminal may be determined by the background system server after the background system server receives the identification information of the terminal.

In addition, the first session key may be generated by any one of the terminal or the background system server, and encrypted by the public key of the other party and then sent to the other party, thereby reducing the computational complexity of one party.

The process of generating the first session key between the terminal and the background system server can be combined with the following terminal and smart cryptographic device. The process of generating a second session key is the same.

In the following, a specific terminal and background system server authentication is combined and combined with the first session key generation. Of course, the present invention is not limited to this:

1) The terminal at the merchant end generates a random number R1;

2) The terminal at the merchant end sends the random number R1 to the background system server, and sends an authentication request to the background system server;

3) The background system server receives the authentication request from the terminal, and generates a random number R2;

4) The background system server sends the random number R2 and the background system server certificate to the terminal;

5) The terminal verifies the received background system server certificate by using the root certificate corresponding to the background system server certificate pre-stored in the terminal;

If the verification fails, it ends;

If the verification is passed, the terminal generates the shared master key MKey, and encrypts the MKey with the public key in the background system server certificate to obtain E1;

6) The terminal connects R1 and R2 to obtain R3, performs a digest calculation on R3 to obtain H1, and then uses the private key of the terminal to sign H1 to obtain S1;

7) The terminal sends the S1, E1 and the terminal certificate to the background system server;

8) The background system server verifies the validity of the terminal certificate by using the root certificate corresponding to the terminal certificate;

If the verification terminal certificate does not pass, it ends;

If the verification terminal certificate passes, the terminal certificate is used to verify S1;

If the verification S1 does not pass, it ends;

If the verification S1 is passed, the shared master key MKey is obtained by decrypting from E1;

9) The background system server performs a summary calculation on the background system server certificate to obtain H2, and performs a digest calculation on the terminal certificate to obtain H3, and connects R1, R2, H2, H3, S1, and E1 to obtain T1, and performs a digest calculation on T1. HMAC calculates the "Background System Server Authentication Complete Message";

10) The background system server sends a "background system server authentication completion message" to the terminal;

11) The terminal verifies the "background system server authentication completion message" sent by the background system server received;

If the verification fails, it ends;

If the verification is passed, a "Terminal Authentication Complete Message" is generated (see the manner of generating the "Background System Server Authentication Complete Message" above);

12) The terminal sends a "terminal authentication completion message" to the background system server;

13) The background system server verifies the received "terminal authentication completion message";

If the verification fails, it ends;

If the verification is passed, it indicates that the two-way authentication process is successful, the two parties calculate the session key, and the encryption key K1 decomposed from the session key is configured as encryption and decryption of data transmission between the background system server and the terminal, and/or The calculated verification key MACKEY is configured to generate and verify the check value.

The merchant's terminal and the back-end system server perform two-way identity authentication to ensure that the other party is legitimate, and negotiate a public session key (including encryption key and/or verification key), which can be configured. Data encryption and/or check value generation for data transfer between the terminal and the backend system server. The merchant's terminal also completes the "check-in" at the background system server, that is, the subsequent operation request for reading the user information and the transaction request.

It should be noted that, in this example, the check value generated when the background system server and the terminal transmit data is in the form of MAC. In a specific implementation, the check value is not necessarily the MAC value generated by using the MAC key, and the check value may be generated by generating a digest re-signature.

In this step, a secure channel is established through mutual authentication between the terminal and the background system server, and the "check-in" of the merchant holding the terminal in the background system server is completed after the authentication is passed, that is, the back-end system server identifies the merchant holding the terminal. The validity of the first session key is negotiated with the terminal, so that the first session key is used to implement the encrypted transmission when the transaction data of the background system server interacts with the terminal, and the subsequent transmission of the user information corresponding to the smart cryptographic device is performed. And the preparation of operations such as transaction data transmission. Then, the terminal authenticated by the background system server can verify the legality of the smart cryptographic device through the background system server, and obtain related user information of the legal smart cryptographic device.

2. The terminal and the smart cryptographic device perform mutual authentication, wherein:

The terminal generates the third to-be-signed information. Specifically, the terminal may generate the random number as the third to-be-signed information by using the random number generator, or may use the serial number, the MAC address, or other identification information as the third to-be-signed information. It may also be a combination of a random number and identification information as the third to-be-signed information. The information that can be signed by the smart cryptographic device can be used as the third to-be-signed information, so that the smart cryptographic device can authenticate the smart cryptographic device after returning the signature information. The random number can be one of a combination of numbers, letters, special characters, or the like.

The terminal sends the third to-be-signed information and the second authentication request information to the smart cryptographic device. Specifically, the terminal may send the third to-be-signed information and the second authentication request information to the smart cryptographic device through the wireless communication link to ensure the information. Convenience of sending; the third to-be-signed information and the second authentication request information may also be sent to the smart cryptographic device through a wired interface to improve the security of information transmission.

After receiving the third to-be-signed information and the second authentication request information, the smart cryptographic device generates the fourth to-be-signed information. Specifically, the smart cryptographic device may generate the fourth to-be-signed information after receiving the second authentication request information. Pass The random number generator generates the random number as the fourth information to be signed, and may also use its own serial number, MAC address or other identification information (such as device access code DAC) as the fourth to-be-signed information, or may be a random number and The combination of the identification information is used as the fourth to-be-signed information. The information that can be signed by the terminal can be used as the fourth information to be signed, so that the terminal can authenticate the terminal after returning the signature information. The random number can be one of a combination of numbers, letters, special characters, or the like.

In addition, in the step of generating the fourth to-be-signed information after receiving the third to-be-signed information and the second authentication request information, the smart cryptographic device may further switch from the sleep state after receiving the second authentication request information. The awake state is generated; the smart cryptographic device generates the fourth to-be-signed information in the awake state. The sleep state is changed to the awake state to complete the normal work, and after the smart cryptographic device completes the work, it is switched to the sleep state again to reduce the power loss and prolong the service life.

The smart cryptographic device uses the private key of the smart cryptographic device to sign the third to-be-signed information to obtain the second signature information, and sends the fourth to-be-signed information, the second signature information, and the smart cryptographic device certificate to the terminal;

After receiving the fourth to-be-signed information, the second signature information, and the smart cryptographic device certificate, the terminal uses the root certificate corresponding to the pre-stored smart cryptographic device certificate to verify whether the smart cryptographic device certificate is legal. Specifically, the terminal also needs to obtain the smart cryptographic device certificate. Corresponding root certificate for legality verification of smart cryptographic device certificates.

After verifying that the smart cryptographic device certificate is legal, the terminal uses the public key in the smart cryptographic device certificate to verify the second signature information;

After verifying that the second signature information is passed, the terminal signs the third signature information and the fourth signature information by using the private key of the terminal to obtain the third signature information. Specifically, after verifying that the second signature information is passed, the terminal is still The third to-be-signed information and the fourth to-be-signed information are signed to ensure the security and non-repudiation of the third to-be-signed information and the fourth to-be-signed information transmission, and ensure a legal source of information transmission. Certainly, the terminal may further generate a first session key generation factor, encrypt the first session key generation factor by using a public key in the smart password device certificate to obtain second encrypted information, and the terminal is verifying the smart password device certificate and the smart password device. After the signatures are all passed, a generation factor of a session key for data interaction between the terminal and the smart cryptographic device is generated (ie, a first session key generation factor, and the first session key generation factor is configured to generate a terminal and a smart cryptographic device) At the same time, the first session key generation factor is encrypted by using the public key in the smart cryptographic device certificate to ensure the security of the first session key generation factor transmission.

The terminal sends the third signature information and the terminal certificate to the smart cryptographic device; of course, if the terminal further generates the first session key generation factor, and encrypts the first session key generation factor by using the public key in the smart cryptographic device certificate The second encrypted information, in this step, the terminal sends the second encrypted information to the background system server in addition to the third signature information and the terminal certificate to the background system server.

After receiving the third signature information and the terminal certificate, the smart cryptographic device uses the root certificate corresponding to the pre-stored terminal certificate to verify whether the terminal certificate is legal. Specifically, the smart cryptographic device also needs to obtain the root certificate corresponding to the terminal certificate, so as to obtain the terminal certificate. Perform legality verification. Of course, if the terminal further sends the second encrypted information to the smart cryptographic device, in this step, the smart cryptographic device further receives the second encrypted information sent by the terminal.

After verifying that the terminal certificate is legal, the smart cryptographic device uses the public key in the terminal certificate to verify the third signature information;

After verifying that the third signature information is passed, the smart cryptographic device generates a smart cryptographic device authentication completion message; specifically, after verifying the terminal certificate and the signature information of the terminal, the smart cryptographic device also generates a smart cryptographic device authentication completion message, so as to notify The terminal smart password device authentication is completed. Of course, if the smart cryptographic device further receives the second encrypted information, in this step, the smart cryptographic device further generates a second session key generation factor, and encrypts the second session key generation factor by using the public key in the terminal certificate. The third encryption information, wherein the smart cryptographic device generates a session key generation factor (ie, a second session key generation factor) for data interaction between the terminal and the smart cryptographic device after the verification of the terminal certificate and the signature information of the terminal are all passed. The second session key generation factor is configured to generate a session key for data interaction between the terminal and the smart cryptographic device, and the second session key generation factor is encrypted by using the public key in the terminal certificate to ensure The security of the second session key generation factor transmission.

The smart cryptographic device sends a smart cryptographic device authentication completion message to the terminal; of course, if the smart cryptographic device further generates the second session key generation factor and encrypts the second session key generation factor to obtain the third encrypted information, this step The smart cryptographic device sends a third encrypted information to the terminal in addition to sending the smart cryptographic device authentication completion message to the terminal.

After receiving the smart password device authentication completion message, the terminal verifies the smart password device authentication completion message; specifically, the terminal also authenticates the smart password device authentication completion message to ensure the legal source of the authentication completion message. Of course, if the smart cryptographic device also sends the third encrypted information to the terminal, the terminal further receives the third encrypted information in this step.

After the verification of the smart cryptographic device authentication completion message, the terminal generates a terminal authentication second completion message, and sends a terminal authentication second completion message to the smart cryptographic device. Specifically, after the terminal passes the authentication smart cryptosystem authentication completion message, the terminal generates the terminal authentication. The second completion message is to inform the smart cryptographic device that the terminal authentication is completed. Of course, if the terminal further receives the third encrypted information, in this step, the terminal further generates a second session key according to the first session key generation factor and the second session key generation factor obtained by decrypting the third encrypted information, so that Data interaction is performed with the smart cryptographic device through the second session key.

After receiving the terminal completion second completion message, the smart cryptographic device verifies the terminal to authenticate the second completion message. Specifically, the smart cryptographic device also authenticates the terminal to authenticate the second completion message to ensure the legal source of the authentication completion message.

After the smart cryptographic device verifies the second completion message of the terminal authentication, the terminal and the smart cryptographic device complete mutual authentication. when However, if the smart cryptographic device further generates the second session key generation factor and receives the second encrypted information, in this step, the smart cryptographic device further obtains the factor according to the second session key generation factor and the second encrypted information. A session key generation factor generates a second session key for data interaction with the terminal through the second session key.

Based on the two-way authentication between the terminal and the smart cryptographic device, the legality of both parties can be ensured, and the security of subsequent processing can be improved.

Of course, the present invention is not limited to such a second session key generation process initiated by the terminal, and the second session key generation process may also be initiated by the smart cryptographic device.

In addition, the second session key may be generated by one of the terminal or the smart cryptographic device, and encrypted by the public key of the other party and then sent to the other party, thereby reducing the computational complexity of one party.

Of course, the process of generating the second session key between the terminal of the present invention and the smart cryptographic device may be the same as the process of generating the first session key between the terminal and the background system server. That is, the second session key can also be obtained by decomposing the shared master key.

In the following, a specific method of authenticating between the terminal and the smart cryptographic device and combining the second session key generation is given. Of course, the present invention is not limited to this:

1) The terminal sends an authentication request to the smart cryptographic device, and sends a random number R01;

2) The smart cryptographic device in the dormant state is woken up after receiving the authentication request sent by the terminal;

3) The smart cryptographic device generates a random number R02, performs a digest calculation on the R01, and uses the private key to encrypt the digest to generate the signature S01, and the smart cryptographic device sends the random number R02, the signature S01, and the smart cryptographic device certificate to the terminal;

4) The terminal verifies the legality of the smart cryptographic device certificate by using the root certificate corresponding to the smart cryptographic device certificate pre-stored in the terminal;

If the verification of the smart password device certificate is invalid, the connection is terminated;

If the verification of the smart cryptographic device certificate is legal, perform step 5);

5) Is the terminal verification signature S01 correct?

If the verification signature S01 is incorrect, the connection is terminated;

If the verification signature S01 is correct, step 6) is performed;

6) The terminal connects R01 and R02 to form R01|R02, generates a digest and signs the R01|R02, obtains a signature S02, generates a random number R03, and generates a ciphertext E01 by using the public key of the smart cryptographic device to encrypt R03. Send E01, terminal certificate and S02 to the smart cryptographic device;

7) The smart cryptographic device verifies the legality of the terminal certificate by using the root certificate corresponding to the terminal certificate pre-stored by the smart cryptographic device;

If the verification terminal certificate is invalid, the connection is terminated;

If the verification terminal certificate is legal, perform step 8);

8) Whether the smart password device verifies that the signature S02 is correct;

If the verification signature S02 is incorrect, the connection is terminated;

If the verification signature S02 is correct, step 9) is performed;

9) The intelligent cryptographic device generates a random number R04, encrypts R04 with the public key of the terminal to generate ciphertext E02, and sends the ciphertext E02 to the terminal;

10) The terminal generates an authentication completion message, the terminal performs a digest operation on the terminal certificate to obtain H01, performs a digest operation on the smart cryptographic device certificate to obtain H02, and connects R01, R02, E01, E02, H01, H02, S01, and S02 to obtain T01. Then, T01 is digested and signed, and a "background authentication completion message" F01 is obtained, and F01 is sent to the smart cryptographic device;

11) The smart cryptographic device receives F01 and verifies F01;

If the verification F01 does not pass, an error message is returned to end the connection;

If the verification F01 is passed, step 12) is performed;

12) The smart cryptographic device generates an authentication completion message F02 in the same manner, and sends the generated authentication completion information to the terminal;

13) Terminal verification F02;

If the verification F02 does not pass, an error message is returned to end the connection;

If the verification F02 is passed, step 14) is performed;

14) The smart cryptographic device and the terminal are respectively connected to R03 and R04 to obtain R03|R04, and the second session key K2 is generated by using R03|R04 (the key may be only an encryption key), and the data is securely transmitted after the two. .

It can be seen that the mutual authentication process between the terminal and the smart cryptographic device (process 2) and the mutual authentication between the background and the terminal (process 1) are:

Process 1 generates an encryption key and a verification key (such as MACKEY). Process 2 only generates an encryption key, and does not generate a verification key (of course, a verification key can also be generated).

The function of the verification key is to generate a check value, which is used to verify whether the data has been tampered with during transmission. The data sender uses a specific algorithm to generate a check value using the check key, and the data receiver uses the check value and the check key to verify whether the received data has been tampered with. For the subsequent process of the terminal and the smart cryptographic device of the present invention, when the transaction data is transmitted between the terminal and the smart cryptographic device, the user can manually determine whether the data is correct through the information displayed on the smart cryptographic device, so no need to introduce a check value. The terminal can also determine whether the information has been tampered with by verifying the signature sent by the smart cryptographic device, and does not need to introduce a check value. Therefore, in order to simplify the processing flow and improve communication efficiency, when generating the second session key, it may not A verification key needs to be generated. Of course, in order to further improve Security, you can also generate a verification key.

For the background system server and the terminal, because the background system server does not know the specific content of the transaction, in order to ensure security, it is necessary to determine whether the data has been tampered with by introducing a check value.

It can be seen that the process first generates a shared master key through one party, and then uses a special algorithm to process the shared master key, and decomposes to obtain an encryption key and a verification key; the second process is that each side of the authentication generates an encryption key. The constituent factor of the key, and finally the encryption key. Of course, the session key generation method used in the process 1 and the session key generation method used in the process 2 can be configured as a session key between the terminal and the background system server, or configured as a terminal and a smart cryptographic device. The generation of a session key.

Therefore, after the terminal and the smart cryptographic device perform the two-way authentication, the phishing risk can be prevented, the transaction risk such as tampering of the transmission information, remote hijacking and man-in-the-middle attack can be prevented, thereby effectively securing the funds of the terminal and the smart cryptographic device.

In this step, only the method system for mutual authentication between the background system server and the terminal may be constructed, and a secure channel between the two may be established; or only a method system for mutual authentication between the terminal and the smart cryptographic device may be constructed. A secure channel between the two; a method system for mutual authentication between the background system server, the terminal, and the smart cryptographic device can be constructed to establish a secure channel between the three. Based on the method of mutual authentication of any of the above three types, it can prevent phishing risks and prevent transaction risks such as transaction information tampering, remote hijacking and man-in-the-middle attacks, thereby effectively protecting users holding smart cryptographic devices and merchants holding terminals. The account funds are safe.

In addition, the present invention is not limited to the completion of step 3 after step two, and may be completed before step two or simultaneously with step two, as long as the authentication is completed before step four.

Certainly, the first session key in the present invention may be pre-stored in the background system server and the terminal, or may be generated through negotiation between the background system server and the terminal, and may be performed on the terminal and the background system server when the first session key is generated by negotiation. Negotiation is generated during the authentication process (see the above process of mutual authentication between the terminal and the backend system server).

Of course, all information transmitted between the background system server and the terminal in the present invention can be transmitted through the first session key encryption calculation and/or verification calculation.

The second session key in the present invention may be pre-stored in the terminal and the smart cryptographic device, or may be generated through negotiation between the terminal and the smart cryptographic device. When the second session key is generated by negotiation, the terminal and the smart cryptographic device may be authenticated. Negotiation generation in the process (refer to the above process of mutual authentication between the terminal and the smart cryptographic device).

Of course, all information transmitted between the terminal and the smart cryptographic device in the present invention can also be transmitted through the second session key encryption calculation and/or verification calculation.

Step 3: The terminal obtains user information.

Specifically, in this step, the terminal acquires a pair of smart password devices according to the identifier information of the scanned smart password device. The user information (for example, the user's photo, name, account, and the like) may be obtained, and the user information corresponding to the smart password device may be obtained by, but not limited to, the following manner:

Method 1: The terminal obtains user information corresponding to the smart password device from the background system server:

The terminal sends the identification information of the smart cryptographic device and the user information read request to the background system server; specifically, when the terminal sends the identification information of the smart cryptographic device and the user information read request to the background system server, the terminal may directly send the request to the background system server. The identification information of the smart cryptographic device and the user information reading request may also use the first session key to perform encryption calculation and/or verification calculation on the identification information of the smart cryptographic device and/or the user information read request, and then send the Guarantee the security and integrity of information transmission.

After receiving the identification information of the smart cryptographic device and the user information reading request, the background system server obtains the user information corresponding to the smart cryptographic device according to the identification information of the smart cryptographic device; specifically, the background system server prestores each registered smart device. The user information corresponding to the cryptographic device is used to obtain the user information corresponding to the smart cryptographic device according to the received identification information of the smart cryptographic device. Of course, if the terminal sends the encrypted computing and/or the verified calculated information to the background system server, in this step, the background system server also needs to decrypt and/or verify the received information by using the first session key. After the verification calculation is correct, the identification information of the complete smart cryptographic device and/or the user information read request are obtained.

In addition, in order to ensure the security of the data interaction and the legality of the smart cryptographic device, the background system server determines whether the identification information of the smart cryptographic device is included in the background system after receiving the identification information of the smart cryptographic device and the user information reading request. The intelligent password device exception list pre-stored in the server; the background system server obtains the instruction to lock the smart password device after determining that the identification information of the smart password device is in the abnormal list of the smart password device, and uses the private key pair of the background system server to lock the smart The cryptographic device instructs the signature to obtain the fifth signature information, and sends the locked smart cryptographic device command and the fifth signature information to the smart cryptographic device through the terminal; after receiving the locked smart cryptographic device command and the fifth signature information, the smart cryptographic device uses the pre-stored The public key in the background system server certificate verifies the fifth signature information; after verifying that the fifth signature information is passed, the smart cryptographic device performs a locking operation according to the instruction of the locked smart cryptographic device.

Specifically, the smart password device abnormal list may be a blacklist, a loss list, an invalidation list, or the like, which is an illegal list of the smart password device identity; if the smart password device identification information is in the smart password device abnormal list, the smart password device is specified. It is an illegal smart password device. At this time, in order to ensure security, the background system server sends a lock instruction to the illegal smart password device through the terminal to lock the illegal smart password device, and the background system server also signs the lock command. To ensure the legal source of the lock instruction, to avoid malicious operations that illegally lock the smart password device.

Of course, the present invention is not limited to this. For practical applications, as long as the illegal smart secret can be legally locked. The code device can be.

The smart cryptographic device may perform the locking operation according to the instruction of the locked smart cryptographic device, and may include any manner in which the smart cryptographic device refuses to execute any request, destroys the certificate stored by itself, and the like.

Of course, the background system server can also perform any request to reject the illegal smart cryptographic device after sending the lock instruction.

It can be seen that, by using the method provided in this example, when the user loses the smart password device, the backend system server can report the loss, and the background system server registers the device identification code of the smart password device on the loss list; or the account is abnormally reported. In some cases, the backend system server will also register these smart password devices in the blacklist. Devices in these exception lists are registered as exception devices on the exception list. Before each transaction, the background system server authenticates the smart password device. During the authentication process, the device identifier is compared with the abnormal list. If the smart password device is locked on the list. Applying this method, if someone steals another person's smart password device and attempts to illegally use the smart password device to transfer funds to steal user funds, the background system server can remotely authenticate the smart password device before each transaction. The smart password device is locked, so that even if the smart password device is illegally stolen by others, the user account can be protected from loss.

In addition, in the present invention, when the background system server sends the lock smart cryptographic device command and the fifth signature information to the smart cryptographic device, the backend system server may further perform encryption calculation on the locked smart cryptographic device command and the fifth signature information by using the first session key. And/or verifying the calculation to ensure the security and/or integrity of the locked smart cryptographic device command and the fifth signature information transmission, and the terminal uses the first session after receiving the encrypted calculated and/or verified calculated information. After the key performs the decryption calculation and/or the verification verification calculation, the locked smart password device instruction and the fifth signature information are obtained. Certainly, after obtaining the lock smart cryptographic device command and the fifth signature information, the terminal may further perform encryption calculation and/or check calculation on the locked smart cryptographic device command and the fifth signature information by using the second session key, and then perform the cryptographic calculation. And/or verifying the calculated information and sending it to the smart cryptographic device to ensure the security and/or integrity of the information transmission. After receiving the information sent by the terminal, the smart cryptographic device performs decryption calculation and/or verification verification calculation. To obtain the lock smart cryptographic device command and the fifth signature information.

In addition, in order to ensure the security of the user information, the background system server also needs to authorize the smart password device holder to send the user information corresponding to the smart password device to the terminal. The background system server sends the user authorization request information to the smart cryptographic device through the terminal (for example, the user authorization request information may be a random number); after receiving the user authorization request information, the smart cryptographic device generates authorization information (for example, the authorization information may be The information obtained by signing the random number is transmitted, and the authorization information is sent to the background system server by the terminal; after the background system server receives the authorization information, the background system server sends the response information of the user information read request to the terminal. step. Of course, the background system server may also use the private key of the background system server to sign the user authorization request information, and then send the information to the smart cryptographic device through the terminal. After receiving the signed information, the smart cryptographic device verifies the signature, and after the verification is passed. The user authorization request information is considered to be from a legitimate background system server, and the request is confirmed to authorize the background system server; the smart cryptographic device can also use the private key of the smart cryptographic device to sign the authorization information and then send it to the background through the terminal. After receiving the signed information, the system server verifies the signature. After the verification is passed, the authorization information is considered to be from the correct smart password device to perform subsequent operations according to the authorization information; the background system server may also utilize the first The session key performs encryption calculation and/or verification calculation on the user authorization request information, and then sends the data to the terminal, and the terminal uses the first session key to perform decryption calculation and/or verification verification calculation on the received information; the terminal uses the second session. Key pair user The right request information is sent to the smart cryptographic device after the encryption calculation and/or the check calculation, and the smart cryptographic device uses the second session key to perform decryption calculation and/or verification verification calculation on the received information; the background system server may also utilize The private key of the background system server signs the user authorization request information, and then uses the first session key to perform encryption calculation and/or verification calculation, and the terminal uses the first session key to decrypt the received information and/or the school. Verifying the verification calculation; the terminal uses the second session key to perform encryption calculation and/or verification calculation on the information signed by the background system server, and then sends the information to the smart password device, and the smart password device uses the second session key to perform the received information. Decrypt the calculation and/or verify the verification calculation and check the signature. The above is only a few ways for the background system server to request authorization from the smart cryptographic device. The present invention is not limited thereto, and the above various combinations of variants should also fall within the protection scope of the present invention.

Certainly, after receiving the user authorization request information, the smart cryptographic device can also be converted from the sleep state to the awake state; the smart cryptographic device generates the authorization information in the awake state. In order to save energy and extend the life of smart password devices.

The background system server obtains the response information of the user information read request according to the user information, and sends the response information of the user information read request to the terminal; of course, the user information may be encrypted and/or verified by using the first session key. Calculated to ensure the security and/or integrity of user information transmission.

After receiving the response information of the user information read request, the terminal obtains the user information according to the response information of the user information read request; of course, if the terminal receives the information obtained by performing encryption calculation and/or verification calculation on the user information In this step, the terminal further obtains user information by performing decryption calculation and/or verification verification calculation on the response information of the user information read request by using the first session key.

Manner 2: The terminal obtains user information corresponding to the smart password device from the smart password device:

The terminal sends a user information read request to the smart cryptographic device according to the identifier information of the scanned smart cryptographic device; specifically, the terminal may directly send the user information read request to the smart cryptographic device, or may use the second session key to the user information. The read request is sent after the encryption calculation and/or the check calculation to ensure the security and integrity of the information transmission.

The smart cryptographic device obtains the pre-stored user information, and obtains the response information of the user information read request according to the user information, and sends the response information of the user information read request to the terminal; specifically, the smart cryptographic device can directly obtain the obtained user. The information is sent to the terminal, and the response information obtained by performing the encryption calculation and/or the verification calculation on the acquired user information by using the second session key may be sent to the terminal.

After receiving the response information of the user information read request, the terminal obtains the user information according to the response information of the user information read request. Of course, if the terminal receives the information obtained by performing encryption calculation and/or verification calculation on the user information, in this step, the terminal further uses the second session key to decrypt the response information of the user information read request and / or verify the verification calculation to obtain user information.

In addition, if the holder of the smart cryptographic device refuses to send the user information, the refusal information may be sent to the terminal through a button set on the smart cryptographic device or through software control to ensure the security of the user information. Of course, the rejection information can also be sent after the second session key encryption calculation and/or verification calculation.

The terminal stores the user information in the pre-established current user list. Specifically, the detected smart password device is constantly changing due to the change of the passenger flow in the store where the terminal is located and the flow of the personnel. At this time, the current user list may be Update by, but not limited to, the following:

Update method one:

The terminal obtains identification information of all the smart cryptographic devices within the signal coverage of the terminal, and generates a real-time identification list;

The terminal compares the identification information of the smart cryptographic device in the real-time identification list with the identification information of the smart cryptographic device in the current user list according to a preset time interval;

If the identification information of the smart cryptographic device in the real-time identification list is not in the current user list, the step of obtaining the user information corresponding to the smart cryptographic device according to the identification information of the scanned smart cryptographic device; and if the current user list is intelligent If the identification information of the cryptographic device is not in the real-time identification list, the user information of the smart cryptographic device that is not in the real-time identification list in the current user list is deleted.

The current user list is updated in this manner to ensure that the user information corresponding to the smart cryptographic device in the coverage of the terminal signal can be updated to the current user list in time, and the user information corresponding to the smart cryptographic device within the coverage of the terminal signal is removed. It can be deleted from the current user list in time to ensure security.

Update method 2:

If the identification information of the smart cryptographic device in the real-time identification list is not in the current user list, the step of obtaining the user information corresponding to the smart cryptographic device according to the identification information of the scanned smart cryptographic device is performed, and after the terminal obtains the user information, The user information is stored in the real-time identification list; and if the identification information of the smart cryptographic device in the real-time identification list is in the current user list, the user information of the smart cryptographic device in the current user list is stored in the real-time identification list;

The real-time identification list is taken as the updated current user list.

By updating the current user list in this manner, only the user information corresponding to the smart cryptographic device within the signal coverage of the terminal can be updated in time to improve the update efficiency. With this method, when acquiring the user information, the terminal can copy the user information corresponding to the original smart password device in the store directly from the original current user list to the real-time identification list, and the user information corresponding to the customer of the newly entered store can pass. A user information read request is obtained from the background system server or the smart cryptographic device to obtain.

It can be seen that when the traffic of the store where the terminal is located does not require any operation by the merchant, the current user list can be automatically updated, which facilitates the management and maintenance of the information of the merchant's store staff.

In addition, the terminal may display the user information corresponding to the user in the stored current user list, so that the holder of the smart password device can view the user information to ensure the correctness of the transaction.

In the prior art, the transaction process requires a device with an account storage function such as a SIM card or a smart card, and the user needs to perform operations such as swiping the mobile phone, so that the merchant can obtain the account information of the user.

Different from the prior art, the terminal of the merchant can obtain the user information corresponding to the smart cryptographic device by first reading the identification information of the smart cryptographic device and then using the identification information of the smart cryptographic device. Therefore, the customer can pay for the product without using a wallet, a credit card, a mobile phone, etc., thereby simplifying the interaction between the customer and the merchant, and improving the user experience.

Step 4: Transaction information processing.

The terminal generates transaction information according to the user information corresponding to the smart cryptographic device to be traded, and obtains the transaction request information according to the transaction information; specifically, the transaction information may include information such as the transaction amount, the account information of both parties of the payment and payment, and the identification information of both parties of the payment and payment. The transaction information may also include an electronic statement, and the user may review the transaction details according to the electronic statement, such as the specific transaction time, the transaction number, the transaction amount, the purchased item, and the like. Of course, the terminal can also perform encryption calculation and/or check calculation on the transaction information by using the second session key to ensure the security and/or integrity of the transaction information transmission.

The terminal sends the transaction request information to the smart cryptographic device. Specifically, the terminal may send the transaction request information by using, but not limited to, the following: the terminal encodes the transaction request information and sends the signal through the sound wave; or the terminal performs graphic coding on the transaction request information. Displayed for the smart cryptographic device to perform image acquisition; or the terminal transmits the transaction request information through a communication interface that the terminal matches with the smart cryptographic device.

After receiving the transaction request information, the smart cryptographic device obtains the transaction information according to the transaction request information; of course, if the smart cryptographic device receives the transaction obtained by the terminal encrypting and/or verifying the transaction information through the second session key. Requesting information, in this step, the smart cryptographic device also uses the second session key to perform decryption calculation and/or verification verification calculation on the transaction request information to obtain transaction information to ensure the security and/or integrity of the transaction information transmission. .

In order to save the power of the smart cryptographic device and prolong the service life, the smart cryptographic device can also change from the sleep state to the awake state after receiving the transaction request information; the smart cryptographic device obtains the transaction information according to the transaction request information in the awake state, of course, The smart cryptographic device can also obtain the transaction information by performing decryption calculation and/or verification verification calculation on the transaction request information by using the second session key in the awake state.

The smart password device prompts the transaction information; specifically, the smart password device can display the transaction information through the display screen, and can also play the transaction information in a voice manner through a speaker or the like. Of course, the smart cryptographic device can also prompt the user to know the real transaction information by other means to ensure the security of the transaction. In addition, after the smart cryptographic device obtains the transaction information, the key information can be extracted from the transaction information, and the smart cryptographic device only prompts the key information. For the specific prompting manner, refer to the prompting manner of the smart cryptographic device for the transaction information.

The smart cryptographic device receives the confirmation command and generates the transaction confirmation information; specifically, the smart cryptographic device can receive the confirmation command by detecting the information sent when the confirmation button set on the smart cryptographic device is pressed, or can detect the touch screen by detecting The information confirmation confirmation command sent when the virtual confirmation key is displayed is clicked, and the biometric information such as the detected voice, fingerprint, and iris may be used as a confirmation command or the like. Further, the smart cryptographic device may generate the transaction confirmation information by, but not limited to, the smart cryptographic device signing the transaction information by using the private key of the smart cryptographic device, generating the transaction signature information as the transaction confirmation information; or generating the dynamic password as the smart cryptographic device. The transaction confirmation information, of course, the transaction confirmation information may also be information calculated by using the second session key encryption calculation and/or verification. Of course, in order to prevent duplicate transactions and ensure the security of the user's account, each time the smart cryptographic device generates the transaction confirmation information, the smart cryptographic device also generates a single transaction identifier, and uses the private key of the smart cryptographic device to transaction information and a single transaction. The identifier is signed, the transaction signature information is generated as the transaction confirmation information; or the smart cryptographic device generates a single transaction identifier, and the single transaction identifier is signed by the private key of the smart cryptographic device to obtain the signature information of the single transaction identifier, and the dynamic password is generated. The signature information of the single transaction identifier and the dynamic password are used as transaction confirmation information to ensure that a transaction is successfully executed only once, wherein the single transaction identifier can be a random number, etc. The transaction confirmation information may also be information calculated using the second session key encryption calculation and/or verification. Due to the unstable transmission line of the wireless network, the smart password device may not receive the receipt. If the single transaction identifier is not set, the terminal may need to hold the smart password device when it does not receive the signature information of the smart password device. The user performs the confirmation signature operation multiple times, that is, the smart cryptographic device sends the signature information to the terminal multiple times, so that the terminal may use the multiple signature values to generate multiple transaction data packets and send them to the background system server, thereby The account corresponding to the device is repeatedly debited. If a single transaction identifier is set, when the line is unstable, the smart cryptographic device will continue to sign the transaction information and the same single transaction identifier and then send it to the terminal until the receipt is received. The terminal generates a transaction data packet by using the signature value sent by the smart cryptographic device, and the background system server receives the transaction data packet to determine the single transaction identifier inside, if the single transaction identifier is already saved in the transaction log, that is, Once the transaction has been made, the transaction data packet will no longer be processed, and no multiple or repeated debits will be incurred, thus protecting the account funds of the smart password device user.

The terminal receives the transaction confirmation information. Specifically, the terminal may receive the transaction confirmation information by using, but not limited to, the following manner: the terminal receives the sound wave signal sent by the smart password device and decodes the sound wave signal to obtain the transaction confirmation information (for example, the sound wave identification device may be used. The sound wave signal is recognized, the sound wave signal is decoded by the sound wave decoder to obtain the transaction confirmation information); or the terminal collects the image information displayed by the smart password device and decodes the image information (for example, the two-dimensional code, the barcode, etc.) to obtain the transaction confirmation information. (For example, the image acquisition device is used to collect the image information, and the decoder is used to decode the image information to obtain the transaction confirmation information); or the terminal receives the transaction confirmation information through the communication interface matched by the terminal and the smart cryptographic device; or the terminal inputs through the terminal. The information is obtained by confirming the transaction. If the transaction confirmation information is obtained by using the second session key encryption calculation and/or verification calculation, then in this step, the calculated information is also subjected to decryption calculation and/or verification verification calculation using the second session key.

The terminal obtains the transaction data packet according to the transaction confirmation information, and sends the transaction data packet to the background system server; specifically, the transaction data package may also include other information such as transaction information. The transaction information may include information such as the transaction amount, the account information of the parties to the payment, and the identification information of both parties. The transaction information may also include an electronic statement, and the user may review the transaction details according to the electronic statement, for example, the specific transaction time, the transaction. Single number, transaction amount, purchased items, etc. Of course, the terminal may further perform encryption calculation and/or verification calculation on the transaction confirmation information or the information decrypted by the transaction confirmation information by using the first session key to ensure the security and/or integrity of the information transmission.

After receiving the transaction data packet, the background system server obtains the transaction confirmation information according to the transaction data packet; of course, the background system server may further perform the decryption calculation and/or the verification verification calculation on the transaction data packet by using the first session key to obtain the transaction confirmation information. .

The background system server verifies the transaction confirmation information and executes the transaction after the verification is passed; specifically, the background system server only indicates that the transaction has passed the legal smart password after the verification transaction verification information is verified. Confirmation of the equipment and execution of the transaction based on the confirmed results. Of course, in order to ensure that the holder of the smart cryptographic device knows that the transaction has been completed, the background system server may also send the transaction success receipt information to the smart cryptographic device through the terminal; after receiving the transaction success receipt information, the smart cryptographic device prompts the transaction success receipt information. The transaction success receipt information may also include an electronic statement, and the user may review the transaction details according to the electronic statement, for example, specific transaction time, transaction number, transaction amount, purchased items, etc. In addition, the background system server may also send the terminal to the terminal. The transaction successfully returns the information so that the terminal knows that the transaction is completed. Of course, the transaction success receipt information can be sent to the terminal by using the first session key encryption calculation and/or verification calculation, and the terminal decryption calculation and/or verification verification calculation uses the second session key for encryption calculation and/or calibration. After the calculation is performed, it is sent to the smart cryptographic device, and the smart cryptographic device decrypts the calculation and/or verifies the verification calculation and prompts the user to know; the transaction success receipt information may also be that the background system server uses the private key of the background system server to sign and then sends the message through the terminal. For the smart cryptographic device, the smart cryptographic device prompts the user to know the signature information, and may also be prompted by the background system server to use the first session key to encrypt and calculate and/or verify the calculation and then send it to the terminal. After the decryption calculation and/or the verification calculation, the second session key is used to encrypt the calculation and/or the verification calculation, and then sent to the smart cryptographic device, and the smart cryptographic device decrypts the calculation and/or verifies the verification calculation, and then prompts the verification after the verification is passed. User knows.

Step 5: Refund.

When a customer needs a refund, they can perform but are not limited to the following ways to achieve a refund:

Method 1: The terminal sends the refund information to the smart password device; specifically, the refund information may include: any combination of the account number of the refund, the refund amount, the refund transaction ticket number, and the identification information of both parties of the refund, and the refund The information can also include an electronic statement, and the user can review the refund details based on the electronic statement, such as the specific refund time, the refund transaction number, the refund amount, and the returned item. Of course, the refund information can also be sent to the smart cryptographic device through the second session key for encryption calculation and/or verification calculation to ensure the security and/or integrity of the information transmission. The terminal may also send the refund information by, but not limited to, the following: the terminal encodes the refund information and sends the sound signal through the sound wave signal; or the terminal graphically encodes the refund information and displays it for the smart password device to perform image collection; or the terminal passes The communication interface that the terminal matches with the smart cryptographic device sends a refund information.

After receiving the refund information, the smart password device prompts the refund information; specifically, after receiving the refund information, the smart password device prompts the user to know the refund information by any means such as voice play or display display, so that The user determines that the refund information is a true refund information. After the terminal performs the encryption calculation and/or the verification calculation on the refund information by using the second session key, the step further needs to perform the decryption calculation and/or the verification verification calculation on the received information by using the second session key.

In order to save the power of the smart cryptographic device and prolong the service life, the smart cryptographic device can also switch from the sleep state to the awake state after receiving the refund information; the smart cryptographic device prompts the refund information in the awake state.

The smart cryptographic device receives the refund confirmation instruction and signs the refund information by using the private key of the smart cryptographic device to generate a refund confirmation information; specifically, the user passes the smart after determining that the refund information is true refund information. Confirm the physical button or virtual button set on the password device. After the smart cryptographic device sends the refund confirmation information to the terminal (for example, after transmitting the sound wave signal corresponding to the refund confirmation information, or after displaying the image information corresponding to the refund confirmation information for a predetermined time), the awake state is changed to the sleep state. .

The terminal receives the refund confirmation information, and verifies the refund confirmation information, and after the verification is passed, uses the private key of the terminal to sign the refund confirmation information to generate a refund confirmation package; specifically, the terminal may pass but is not limited to the following manner Receiving the refund confirmation information: the terminal receives the sound wave signal sent by the smart password device and decodes the sound wave signal to obtain the refund confirmation information (for example, the sound wave identification device can be used to identify the sound wave signal, and the sound wave signal is decoded by the sound wave decoder to obtain the sound wave signal. Refund confirmation information); or the terminal collects image information displayed by the smart cryptographic device and decodes the image information (for example, two-dimensional code, barcode, etc.) to obtain refund confirmation information (for example, image acquisition device is used to collect image information, The decoder obtains the refund confirmation information after decoding the image information; or the terminal receives the refund confirmation information through the communication interface matched by the terminal and the smart password device. In addition, the terminal authenticates the refund confirmation information using the public key of the smart cryptographic device.

The terminal sends a refund confirmation packet and a refund confirmation information to the background system server; specifically, the terminal may directly send the refund confirmation package and the refund confirmation information to the background system server, and the terminal may also use the first session key to confirm the refund. The package and refund confirmation information is sent to the backend system server after encryption calculation and/or verification calculation to ensure the security and/or integrity of the information transmission.

After receiving the refund confirmation package and the refund confirmation information, the background system server verifies the refund confirmation package and the refund confirmation information separately, and performs the refund operation after all the verifications are passed. Specifically, if the terminal performs the encryption calculation and/or the check calculation on the refund confirmation package and the refund confirmation information by using the first session key, in this step, the background system server further receives the first session key pair. The obtained information is subjected to decryption calculation and/or verification verification calculation. In addition, the backend system server also uses the public key of the terminal to verify the refund confirmation package, and uses the public key of the smart cryptographic device to verify the refund confirmation information.

The following provides an application scenario for refund, but the present invention is not limited to this:

The store generates refund information according to the customer's refund intention (the refund information may be obtained by searching for the recorded transaction information, or may be a regenerated refund information or other forms of refund information), and The refund information is encrypted using a second session key between the terminal and the smart cryptographic device and sent to the smart cryptographic device;

After receiving the encrypted refund information, the smart cryptographic device converts from the sleep state to the awake state, and decrypts the encrypted refund information by using the second session key, obtains the refund information, and displays the refund information. For customer confirmation;

The customer confirms that the refund information is correct. Press the confirmation button on the smart password device to confirm. After receiving the refund confirmation command, the smart password device signs the refund information with the private key of the smart password device to obtain the refund confirmation information. And encrypting the refund confirmation information by using the second session key, and transmitting the information to the terminal;

After receiving the encrypted refund confirmation information, the terminal decrypts the information by using the second session key, obtains the refund confirmation information, and verifies the correctness of the refund confirmation information by using the public key of the smart password device. If correct, the terminal utilizes The private key of the terminal re-signs the refund confirmation information to obtain a refund confirmation package. Of course, the terminal can also directly sign the refund information to obtain a refund confirmation package;

The terminal encrypts the refund confirmation package and the refund confirmation information by using the first session key, and sends the confirmation to the background system server;

After receiving the encrypted information, the background system server decrypts the received information by using the first session key, and uses the public key of the terminal to verify the refund confirmation package, and uses the public key of the smart password device to confirm the refund. The information is verified and, after both verifications have been passed, a refund operation is performed and a refund success receipt information is sent to the terminal and/or smart cryptographic device.

Mode 2: The difference between the second mode and the first mode is that before the terminal sends the refund information to the smart cryptographic device, the terminal further receives the refund request sent by the smart cryptographic device, and generates the refund information according to the refund request. Specifically, the customer can generate a refund request by pressing a button on the smart password device, and the smart password device sends the refund request to the terminal after receiving the refund request. The refund information can also include an electronic statement, and the user can review the refund details based on the electronic statement, such as the specific refund time, the refund transaction number, the refund amount, and the returned item. Of course, any implementation that can trigger a smart cryptographic device to generate a refund request is within the scope of the present invention.

In order to save the power of the smart cryptographic device and prolong the service life, the smart cryptographic device can also switch from the sleep state to the awake state before sending the refund request to the terminal; the smart cryptographic device sends a refund request to the terminal in the awake state. After the smart cryptographic device sends a refund request, it transitions from the awake state to the sleep state. When the smart cryptographic device receives the refund information sent by the terminal, it changes from the sleep state to the awake state, and performs an operation of prompting the refund information and generating the refund confirmation information in the awake state. After the smart cryptographic device sends the refund confirmation information to the terminal (for example, after transmitting the sound wave signal corresponding to the refund confirmation information, or after displaying the image information corresponding to the refund confirmation information for a predetermined time), the awake state is changed to the sleep state. .

Method 3: The smart password device sends a refund request to the terminal; specifically, the customer can generate a refund request by pressing a button on the smart password device, and the smart password device sends the refund request after receiving the refund request. Give the terminal. Of course, any implementation that can trigger a smart cryptographic device to generate a refund request is within the scope of the present invention.

In order to save the power of the smart password device and prolong the service life, the smart password device can also be sent to the terminal. Before the refund request is sent, the sleep state is switched to the awake state; the smart cryptographic device sends a refund request to the terminal in the awake state.

The terminal generates a refund request identifier, and sends a refund request identifier to the smart password device. Specifically, the terminal may generate a random number, and the random number is used as a refund request identifier, and the random number is configured to be provided to the smart password device to generate a refund. Information.

After receiving the refund request identifier, the smart password device generates a refund information, and uses the private key of the smart password device to sign the refund information, obtains the refund confirmation information, and sends a refund confirmation information to the terminal; specific, intelligent The password device generates the refund information by using the refund request identifier, the refund amount, the refund account and the like, and the refund information may further include any combination of the refund transaction ticket number and the identification information of both parties of the refund; The amount can be input through the keys on the smart password device. Of course, it can also be input by other means (for example, voice input). The refund account can be input through the keys on the smart password device, and can also be pre-stored in the smart by reading. The refund account in the password device is input; of course, after the transaction is completed, the transaction information is saved on the smart password device, and the transaction information is inquired to obtain information such as the refund amount and the refund account; of course, the refund information It can also perform encryption calculation and/or verification calculation through the second session key and send it to the terminal to ensure the letter. Security and / or integrity of transmission. The smart cryptographic device may also send the refund information by, but not limited to, the following: the smart cryptographic device encodes the refund information and transmits the sound signal; or the smart cryptographic device graphically encodes the refund information and displays it for the terminal to perform image collection. Or the smart cryptographic device sends a refund message via the communication interface that the smart cryptographic device matches the terminal.

In order to save the power of the smart cryptographic device and prolong the service life, the smart cryptographic device can also send the refund confirmation information to the terminal (for example, after transmitting the sound wave signal corresponding to the refund confirmation information, or displaying the image information corresponding to the refund confirmation information) After the predetermined time has elapsed, the state transitions from the awake state to the sleep state.

The terminal receives the refund confirmation information, verifies the refund confirmation information, and after the verification is passed, uses the private key of the terminal to sign the refund confirmation information to generate a refund confirmation package; specifically, when the smart password device utilizes the second session After the key performs encryption calculation and/or verification calculation on the refund information, this step also needs to use the second session key to perform decryption calculation and/or verification verification calculation on the received information; the terminal may pass but not be limited to the following The method receives the refund confirmation information: the terminal receives the sound wave signal sent by the smart password device and decodes the sound wave signal to obtain the refund confirmation information (for example, the sound wave recognition device can be used to identify the sound wave signal, and the sound wave decoder is used to decode the sound wave signal. Obtaining the refund confirmation information); or the terminal collects the image information displayed by the smart password device and decodes the image information (for example, the two-dimensional code, the barcode, etc.) to obtain the refund confirmation information (for example, the image collection device is used to collect the image information, Decoding the image information using a decoder to obtain a refund confirmation message); or Receiving an acknowledgment message through the interface with the smart communication terminal refund password matches the device. In addition, the terminal authenticates the refund confirmation information using the public key of the smart cryptographic device.

The terminal sends a refund confirmation packet and a refund confirmation information to the background system server; specifically, the terminal directly sends a refund confirmation packet and a refund confirmation message to the background system server, and the terminal can also use the first session key to confirm the refund confirmation package. And the refund confirmation information is sent to the background system server after encryption calculation and/or verification calculation to ensure the security and/or integrity of the information transmission.

The following provides a refund application scenario for mode 3, but the present invention is not limited to this:

The smart cryptographic device is switched from a sleep state to an awake state; for example, the smart cryptographic device can be brought into an awake state by a key operation of a customer holding the smart cryptographic device;

The customer can generate a refund request by pressing a button on the smart password device, and the smart password device sends the refund request to the terminal after receiving the refund request;

The terminal may generate a random number R, and the random number is R as a refund request identifier, and send a refund request identifier to the smart password device;

The smart password device generates the refund information, and uses the private key of the smart password device to sign the refund information, obtain the refund confirmation information, and send the refund confirmation information to the terminal; wherein the refund information includes at least: a refund request Information such as identification, refund amount, refund account, etc., wherein the refund amount, refund account and other information can be input by the customer through the button on the smart password device, or the refund amount can be passed by the customer through the button on the smart password device Input, the refund account is read from the information pre-stored by the smart password device, or the refund amount, refund account and other information can be read from the information pre-stored by the smart password device, and the smart password device uses the terminal and the smart password device. The second session key is encrypted with the refund confirmation information and sent to the terminal;

After receiving the encrypted information, the background system server decrypts the received information by using the first session key. The refund confirmation packet is verified by the public key of the terminal, and the refund confirmation information is verified by the public key of the smart password device, and after both verifications are passed, the refund operation is performed, and the refund success receipt information is sent. Give the terminal and / or smart cryptographic device.

In the above three refund methods, the refund confirmation package or the refund confirmation information may also include a single refund identifier, and the single refund identifier may be a random number to ensure that one refund is successfully executed only once. Of course, the single refund identifier may be generated by the terminal, or may be generated by the smart password device, may be signed by the terminal in the refund confirmation packet, or may be signed by the smart password device in the refund confirmation information.

Of course, after performing the refund operation, the background system server may also send a refund success receipt information to the terminal and/or the smart password device, so that the store and/or the customer can know that the refund is successful.

It can be seen that through the above refund process, the operation of the customer in the refund process can be greatly simplified, and the security function related to the application of the smart password device can ensure the security of the customer refund process and bring a seamless use experience to the consumer.

Step 6: Sell out.

Including the terminal's account cancellation and smart password device sales, the following describes the terminal's account:

The terminal acquires the terminal account cancellation application, uses the private key of the terminal to sign the account cancellation application to obtain the sixth signature information, and sends the terminal account cancellation application and the sixth signature information to the background system server; specifically, the terminal can directly go to the background system server. Sending the account cancellation application and the sixth signature information, the terminal may also perform encryption calculation and/or verification calculation on the sixth signature information by using the first session key, and send the calculated information to the background system server to ensure information transmission. Safety and / or integrity.

After receiving the terminal account cancellation application and the sixth signature information, the background system server uses the public key in the pre-stored terminal certificate to verify the sixth signature information; specifically, if the terminal further performs encryption calculation using the first session key and / or check calculation, in this step, the background system server also uses the first session key to perform decryption calculation and/or verification verification calculation on the received information.

After verifying that the sixth signature information is passed, the background system server deletes the pre-stored terminal certificate, and generates terminal completion information, and sends the terminal completion information to the terminal; specifically, the background system server deletes the pre-stored when performing the account cancellation. In addition to the terminal certificate, the information corresponding to the terminal can be placed in the default account list of the background system server and other other account operations. In addition, the account completion information may also be obtained by using the first session key for encryption calculation and/or verification calculation, or by using the private key of the background system server for signature, or by using the private key of the background system server. After the signature is performed, the first session key is used for the encryption calculation and/or the check calculation.

After receiving the terminal completion information, the terminal deletes the private key of the terminal. Specifically, after receiving the terminal completion information, the terminal deletes the private key. Of course, the terminal may also refuse to perform any transaction operation related to the background system server that sends the terminal to complete the information. In addition, the terminal can also perform decryption calculation and/or verification verification using the first session key. Calculation and / or check operation, etc.

The following describes the cancellation of smart password devices:

The smart password device obtains the application for the smart password device to cancel the account, uses the private key of the smart password device to sign the account cancellation application to obtain the seventh signature information, and sends the smart password device account cancellation application and the seventh signature information to the background system server; The seventh signature information may be sent by the terminal, or may be manually processed. When being sent by the terminal, the first session key and the second session key may be used to perform calculations such as encryption calculation and/or verification calculation. To ensure the security of information transmission.

After receiving the smart PIN device account cancellation application and the seventh signature information, the background system server uses the public key in the pre-stored smart cryptographic device certificate to verify the seventh signature information; specifically, if the terminal further uses the first session key The encryption calculation and/or the verification calculation, in this step, the background system server also performs decryption calculation and/or verification verification calculation on the received information by using the first session key.

After verifying the seventh signature information, the background system server deletes the pre-stored smart password device certificate, generates a smart password device account completion information, and sends the smart password device to the smart password device to complete the information; specifically, the background system server is When the account is cancelled, in addition to deleting the pre-stored smart password device certificate, the information corresponding to the smart password device can be placed in the default account list of the background system server and other other account operations. In addition, the account completion information can also be sent to the smart cryptographic device through the terminal. In this case, the first session key can be used for the encryption calculation and/or the check calculation, or the signature of the backend system server can be used to obtain the signature. Or use the private key of the background system server to sign and then use the first session key for encryption calculation and/or check calculation.

After receiving the information about the completion of the smart cryptographic device, the smart cryptographic device deletes the private key of the smart cryptographic device. Specifically, the smart cryptographic device may perform verification on the signature information, and after the verification is passed, perform a deletion operation, and may also use the second session key to decrypt and/or verify the obtained information, and of course, may also utilize the After the second session key is decrypted and/or verified, the signature information is checked, as long as the security and/or integrity of the information transmission is included in the scope of the present invention.

The back-end system server ensures the legitimacy of the terminal and the smart password device through the registration, the account cancellation, the authentication and the locking of the management terminal and the smart password device, and the property loss caused by the illegal use of the terminal or the smart password device is eliminated.

It should be noted that the above steps 1 to 6 are not performed in sequence, and only a few steps may be completed. In addition, the above steps 1 to 6 are not limited to the same application scenario, regardless of the application scenario. It is within the scope of the present invention to use any of the steps of the present invention and to perform the transaction safely.

Hereinafter, an exemplary application scenario of the present invention is given:

In this application scenario, a wireless communication module is integrated on the smart cryptographic device, and the state control module forms a novel smart cryptographic device configurable as a secure payment of the present invention. The smart cryptographic device includes a wireless communication module, which may be a Bluetooth communication module or a WIFI communication module, etc., and the wireless communication module may perform inquiry scanning and page scanning on other devices, and may perform signal and data interaction with other wireless devices. At the same time, the smart cryptographic device further includes a state control module, which can control the working state of the wireless communication module of the smart cryptographic device and the host. Moreover, the smart cryptographic device of the present invention has two states: a sleep state and an awake state. In the sleep state, only the transceiver (wireless communication module) and the state control module are in operation, the CPU is turned off, and the instruction operation cannot be performed (for example, signature, Receiving and transmitting data, etc., so that the smart cryptographic device is in a low power state. When other wireless devices send the smart cryptographic device application command from the outside, the state control module can identify these signals, generate a wake-up signal, wake up the CPU to the awake state, and start executing the application command. When the command is executed, the CPU will go to sleep again.

In the following, a brief description of the complete transaction process of the present invention is provided:

The smart cryptographic device is in a dormant state, and the user enters the wireless signal coverage of the terminal with the smart cryptographic device, and the smart cryptographic device and the terminal complete the interactive identification of the wireless device, that is, the terminal can know that the smart cryptographic device enters the store where the terminal is located and A smart cryptographic device establishes a connection.

After the terminal establishes a connection with the smart cryptographic device, the terminal sends a request for the authentication device to the smart cryptographic device. When the smart cryptographic device receives the request, the state control module sends a wakeup signal, and the CPU is woken up, and the smart cryptographic device enters the wakeup. Status and perform the appropriate action.

After completing the corresponding instruction, the smart cryptographic device returns to the sleep state, and continues to maintain the device interaction identification with the terminal, so that the terminal can determine whether the holder of the smart cryptographic device leaves the store.

After the terminal and the smart cryptographic device authenticate each other, the terminal requests the background system server to read the user information, and the background system server requests the user authorization information, and the terminal sends a user authorization request to the smart cryptographic device.

The smart cryptographic device in the sleep state receives the user authorization request sent from the terminal, and enters the awake state. The smart cryptographic device will display the request from the terminal, prompting the user to judge whether it is authorized.

The user determines whether to authorize according to the request sent by the displayed terminal. If authorized, press the confirmation button on the smart password device to cause the smart password device to generate authorization information and send it to the terminal, and then enter the sleep state. Otherwise, the smart password device ends execution. Command, go directly to sleep state.

At the time of settlement, the terminal sends a user transaction confirmation request command to the sleepy smart cryptographic device, and the smart cryptographic device in the sleep state receives the command to enter the awake state, and the smart cryptographic device displays the received transaction information, and the user confirms. If the transaction information is correct, press the enter key to cause the smart password device to sign the transaction information, and Return to the terminal; otherwise, the execution of the operation ends, and the smart cryptographic device goes to sleep.

In the following, another application scenario of the present invention is given:

The background system server and the terminal perform mutual authentication, and establish a secure channel to negotiate a common session key K1;

The terminal establishes a current user list on the local server, where the current user list can be used to store user information corresponding to the smart password device held by the customer in the current store;

The terminal local server monitors the smart cryptographic device in the wireless signal coverage of the terminal by using a wireless method (for example, using a wireless detecting device);

The customer carries a smart cryptographic device with wireless communication function (sleeping state) to shop, and when the customer enters the wireless signal coverage of the terminal, the smart cryptographic device can be searched by the terminal and establish a wireless connection with the terminal;

The terminal and the smart cryptographic device perform mutual authentication, and establish a secure channel to negotiate a common session key K2;

The terminal sends a request for reading the user information corresponding to the smart password device to the background system server;

The background system server generates a random number (single authorization identifier) as a parameter for generating user authorization information, and the background system server encrypts the random number by using the session key K1;

The background system server sends the user authorization request information to the terminal, and sends the random number ciphertext to the terminal;

The terminal decrypts the ciphertext, and then encrypts the random number by using the session key K2 negotiated between the terminal and the smart cryptographic device;

The terminal sends the user authorization request information to the smart cryptographic device, and sends the random ciphertext to the smart cryptographic device;

After receiving the authorization request information, the smart cryptographic device converts to the awake state, and decrypts the received random ciphertext by using the session key K2, and then displays the user authorization request information on the display screen of the smart cryptographic device. Waiting for the user to confirm;

The user judges the information, and if not allowed, the smart password device goes to sleep state;

If allowed, press the confirmation key on the smart password device, the smart password device summarizes and signs the random number (single authorization identifier), and uses the signature value as the user authorization information to send the signature value using the session key K2. Go to the terminal and then go to sleep;

The terminal receives the signature value and decrypts it with the session key K2, and then encrypts it with the session key K1 and transmits it to the background system server;

The background system server decrypts the signature by using the session key K1, and then decrypts the signature by using the public key of the smart cryptographic device, and compares the digest generated by the self-generated random number with the value obtained by decrypting the signature, and if not, returns an error. End of information operation;

If they are consistent, the background system server encrypts the user information with the session key K1 and generates a user authorization. The information check value (the first check value), the check value may be in the form of a MAC or a hash function plus a signature, etc., and the ciphertext and the check value are sent to the terminal;

After receiving the user information, the terminal stores the user information in the current user list.

After the customer has finished shopping, he will settle at the cashier's office;

The terminal settles the amount, and selects an account corresponding to the smart password device held by the customer in the current user list;

The terminal generates transaction information by using the transaction amount, the account of the payment and payment parties, and the identification information of the payment and payment parties, and encrypts the transaction information by using the session key K2;

The terminal sends the transaction request information to the smart cryptographic device, and sends the transaction ciphertext to the smart cryptographic device;

After receiving the transaction request information of the terminal, the smart cryptographic device transfers to the awake state, decrypts the transaction information into plaintext and displays it on the screen;

The customer confirms the transaction information, if there is a problem, press cancel, the transaction is aborted, and the smart password device goes to sleep state;

If there is no problem, press the confirm button, and the smart password device generates a random number as a single transaction identifier;

The smart cryptographic device summarizes and signs the transaction information and the random number, encrypts the signature by using the session key K2, obtains the user transaction confirmation information, and sends the information to the terminal;

The terminal decrypts the user transaction confirmation information, and generates a transaction data packet (including the transaction amount, the payment and payment account number, and the respective unique identification information, etc.), encrypts the transaction data packet by using the session key K1, and generates a transaction data packet verification. Value (second check value);

The terminal sends a transfer request to the background system server and sends the transaction data packet ciphertext and the second check value;

The background system server performs the transfer processing, and sends the payment completion information to the terminal successfully. Of course, the background system server can also send the payment completion information to the smart cryptographic device through the terminal, so that the customer knows that the transaction is completed;

The terminal receives the payment completion information, delivers the goods to the customer, and the settlement is completed.

Through the authentication between the terminal and the back-end system server, after the terminal determines the legitimacy of the background system server, the trusted background system server can be used to authenticate the legality of the smart cryptographic device. In the case where it is determined that the background system server and the smart cryptographic device are trusted, this ensures the security of the terminal transaction. At the same time, the legality authentication of the terminal by the background system server and the manual confirmation of the display information by the smart cryptographic device during the transaction are also ensured, and the transaction security of the smart cryptographic device holder is also ensured.

Based on the data security interaction method and system provided by the present invention, when a customer enters a store to conduct a transaction, it is not necessary to complete payment with a related account carrier device such as a mobile phone, a bank card or a financial IC card, and the payment process of the original technology needs to be borrowed. For devices that have an account storage function such as a SIM card or a smart card, the user also needs to perform operations such as swiping a card or swiping a mobile phone to complete the transaction. By adopting the method provided by the invention, the customer can complete the payment without using the wallet, the credit card, the mobile phone, etc., thereby simplifying the interaction between the customer and the merchant in the payment process, improving the payment efficiency, and improving the customer in the near field payment process. The experience; while using the security features of smart cryptographic devices to ensure the security of the customer payment process.

After the customer purchases the good product, the terminal does not need to obtain the user information by manually swiping the card or swiping the mobile phone, because the user information is already stored in the current user list of the terminal when entering the store, and at the time of checkout The customer only needs to report his/her name, and the terminal can directly send the transaction information such as the amount after settlement to the customer's smart password device and display it. At this time, the customer only needs to confirm with the smart password device and output the transaction confirmation information. The terminal generates a transaction data packet and sends it to the background system server. After the background system server verifies that the transaction data packet is accurate and then performs the transfer processing, the payment process can be completed.

When the customer leaves the signal coverage of the store, the network connection between the smart cryptographic device and the terminal is automatically interrupted, and the user information disappears from the current user list of the store. If the customer enters another store again, he will automatically enter the current user list of the other store and start another shopping. This eliminates the need for the customer to perform any operations, and only requires the customer to put a small smart password device into the pocket while shopping, and the invention can provide a seamless user experience.

Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a particular logical function or process. And the scope of the preferred embodiments of the invention includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an opposite order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present invention pertain.

It should be understood that portions of the invention may be implemented in hardware, software, firmware or a combination thereof. In the above-described embodiments, multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented by any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals. Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

One of ordinary skill in the art can understand that all or part of the steps carried by the method of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, one or a combination of the steps of the method embodiments is included.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing module, or may be each Units exist physically separately, or two or more units can be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. The integrated modules, if implemented in the form of software functional modules and sold or used as stand-alone products, may also be stored in a computer readable storage medium.

The above mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

In the description of the present specification, the description with reference to the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims

A data security interaction method, comprising:

The terminal scans the smart cryptographic device within the signal coverage area, and obtains the identification information of the scanned smart cryptographic device;

Obtaining, by the terminal, user information corresponding to the smart cryptographic device according to the scanned identifier information of the smart cryptographic device;

The terminal stores the user information in a pre-established current user list;

The terminal generates transaction information according to user information corresponding to the smart cryptographic device to be traded, and obtains transaction request information according to the transaction information;

Transmitting, by the terminal, the transaction request information to the smart cryptographic device;

After receiving the transaction request information, the smart cryptographic device obtains the transaction information according to the transaction request information;

The smart cryptographic device prompts the transaction information;

The smart cryptographic device receives the confirmation command and generates transaction confirmation information;

Receiving, by the terminal, the transaction confirmation information;

The terminal obtains a transaction data packet according to the transaction confirmation information, and sends the transaction data packet to the background system server;

After receiving the transaction data packet, the background system server obtains the transaction confirmation information according to the transaction data packet;

The backend system server verifies the transaction confirmation information and executes the transaction after the verification is passed.
The method according to claim 1, wherein the acquiring, by the terminal, the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device comprises:

Sending, by the terminal, identification information of the smart cryptographic device and a user information read request to the background system server;

After receiving the identification information of the smart cryptographic device and the user information reading request, the background system server obtains user information corresponding to the smart cryptographic device according to the identification information of the smart cryptographic device;

The background system server obtains response information of the user information read request according to the user information, and sends response information of the user information read request to the terminal;

After receiving the response information of the user information read request, the terminal obtains the user information according to the response information of the user information read request.
The method according to claim 1, wherein the acquiring, by the terminal, the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device comprises:

The terminal sends a user information read request to the smart cryptographic device according to the scanned identifier information of the smart cryptographic device;

The smart cryptographic device obtains pre-stored user information, and obtains response information of the user information read request according to the user information, and sends response information of the user information read request to the terminal;

After receiving the response information of the user information read request, the terminal obtains the user information according to the response information of the user information read request.
The method according to any one of claims 1 to 3, wherein after the terminal scans the smart cryptographic device within the signal coverage and obtains the scanned identification information of the smart cryptographic device, the The method also includes:

The terminal obtains identification information of all the smart cryptographic devices within the signal coverage of the terminal, and generates a real-time identification list;

The terminal compares the identifier information of the smart cryptographic device in the real-time identifier list with the identifier information of the smart cryptographic device in the current user list according to a preset time interval;

If the identifier information of the smart cryptographic device in the real-time identities list is not in the current user list, the terminal is configured to acquire the user information corresponding to the smart cryptographic device according to the scanned identifier information of the smart cryptographic device. If the identification information of the smart cryptographic device in the current user list is not in the real-time identifier list, the user information of the smart cryptographic device that is not in the real-time identifier list in the current user list is deleted.
The method according to any one of claims 1 to 3, wherein after the terminal scans the smart cryptographic device within the signal coverage and obtains the scanned identification information of the smart cryptographic device, the The method also includes:

The terminal obtains identification information of all the smart cryptographic devices within the signal coverage of the terminal, and generates a real-time identification list;

The terminal compares the identifier information of the smart cryptographic device in the real-time identifier list with the identifier information of the smart cryptographic device in the current user list according to a preset time interval;

If the identifier information of the smart cryptographic device in the real-time identities list is not in the current user list, the terminal is configured to acquire the user information corresponding to the smart cryptographic device according to the scanned identifier information of the smart cryptographic device. Step, and after the terminal obtains the user information, storing the user information into the real-time identifier list; and if the identifier information of the smart cryptographic device in the real-time identifier list is in the current user list And storing the user information of the smart cryptographic device in the current user list into the real-time identifier list;

The real-time identification list is taken as the updated current user list.
The method according to claim 2, wherein after the step of the terminal transmitting the identification information of the smart cryptographic device and the user information reading request to the background system server, the method further includes:

Determining, by the background system server, whether the identification information of the smart cryptographic device is included in an abnormal list of smart cryptographic devices pre-stored in the background system server;

After determining, by the background system server, that the identifier information of the smart cryptographic device is in the abnormal list of the smart cryptographic device, acquiring a command for locking the smart cryptographic device, and using the private key pair of the background system server to lock the smart cryptographic device command Performing a signature to obtain a fifth signature information, and transmitting, by the terminal, the locked smart cryptographic device instruction and the fifth signature information to the smart cryptographic device;

After receiving the locked smart cryptographic device command and the fifth signature information, the smart cryptographic device uses the pre-stored public key in the background system server certificate to verify the fifth signature information;

After verifying that the fifth signature information is passed, the smart cryptographic device performs a locking operation according to the locked smart cryptographic device instruction.
The method according to any one of claims 1 to 6, wherein the method further comprises:

Receiving, by the background system server, a terminal registration application, and reviewing the terminal registration application;

After the background system server approves the terminal registration application, the background system server sends a terminal key pair generation instruction to the terminal;

After receiving the terminal key pair generation instruction, the terminal generates a terminal key pair;

Transmitting, by the terminal, the public key in the terminal key pair to the background system server;

After receiving the public key in the terminal key pair, the background system server generates the terminal certificate, and sends the terminal certificate to the terminal;

The terminal stores the terminal certificate;

as well as

Receiving, by the background system server, a smart password device registration application, and reviewing the smart password device registration application;

After the background system server verifies that the smart password device registration application is approved, the background system server sends a smart password device key pair generation instruction to the smart password device;

After receiving the smart cryptographic device key pair generation instruction, the smart cryptographic device generates a smart cryptographic device key pair;

Sending, by the smart cryptographic device, the public key in the smart cryptographic device key pair to the background system server;

After the background system server receives the public key in the smart cryptographic device key pair, the smart password is generated. a device certificate, and sending the smart password device certificate to the smart password device;

The smart cryptographic device stores the smart cryptographic device certificate.
The method of claim 7, wherein the method further comprises:

The terminal acquires a terminal account cancellation application, uses the private key of the terminal to sign the account cancellation application to obtain a sixth signature information, and sends the terminal account cancellation application and the sixth signature to the background system server. The background system server, after receiving the terminal account cancellation application and the sixth signature information, verifying the sixth signature information by using a public key in the pre-stored terminal certificate; the background system server After verifying that the sixth signature information is passed, deleting the pre-stored terminal certificate, and generating terminal account completion information, sending the terminal account completion information to the terminal; the terminal receiving the terminal account cancellation After completing the information, delete the private key of the terminal; and/or

The smart cryptographic device obtains a smart PIN device account cancellation application, uses the private key of the smart cryptographic device to sign the account cancellation application to obtain a seventh signature information, and sends the smart cryptographic device pin to the background system server. a user application and the seventh signature information; after receiving the smart cryptographic device account cancellation application and the seventh signature information, the background system server uses the pre-stored public key in the smart cryptographic device certificate to The seventh signature information is verified; after the verification, the background system server deletes the pre-stored smart password device certificate, and generates a smart password device account completion information, and sends the smart password device to the smart password device. The smart cryptographic device cancels the information; the smart cryptographic device deletes the private key of the smart cryptographic device after receiving the information about the completion of the smart cryptographic device.
The method according to claim 2, wherein after the background system server receives the identification information of the smart cryptographic device and the user information read request, the background system server sends the terminal system server to the terminal Before the step of the user information reading the response information of the request, the method further includes:

The background system server sends user authorization request information to the smart cryptographic device through the terminal;

After receiving the user authorization request information, the smart cryptographic device generates authorization information, and sends the authorization information to the background system server by using the terminal;

After receiving the authorization information, the background system server performs the step of the background system server sending the response information of the user information read request to the terminal.
The method according to claim 9, wherein the step of generating the authorization information after the smart cryptographic device receives the user authorization request information comprises:

After receiving the user authorization request information, the smart cryptographic device transitions from a sleep state to an awake state;

The smart cryptographic device generates authorization information in an awake state.
The method according to any one of claims 1 to 10, wherein the step of obtaining the transaction information according to the transaction request information after the smart cryptographic device receives the transaction request information comprises:

After receiving the transaction request information, the smart cryptographic device converts from a sleep state to an awake state;

The smart cryptographic device obtains the transaction information according to the transaction request information in an awake state.
The method according to any one of claims 1 to 11, wherein the step of generating the transaction confirmation information by the smart cryptographic device comprises:

The smart cryptographic device signs the transaction information by using a private key of the smart cryptographic device, and generates transaction signature information as transaction confirmation information; or

The smart cryptographic device generates a dynamic password as transaction confirmation information.
The method according to any one of claims 1 to 11, wherein the step of generating the transaction confirmation information by the smart cryptographic device comprises:

The smart cryptographic device generates a single transaction identifier, and signs the transaction information and the single transaction identifier by using a private key of the smart cryptographic device to generate transaction signature information as transaction confirmation information; or

The smart cryptographic device generates a single transaction identifier, and uses the private key of the smart cryptographic device to sign the single transaction identifier to obtain signature information of a single transaction identifier, and generate a dynamic password, and sign the single transaction identifier The information and the dynamic password are used as transaction confirmation information.
The method according to claim 12 or 13, wherein the step of the terminal receiving the transaction confirmation information comprises:

Receiving, by the terminal, an acoustic wave signal sent by the smart cryptographic device and decoding the acoustic wave signal to obtain transaction confirmation information; or

The terminal collects image information displayed by the smart cryptographic device and decodes the image information to obtain the transaction confirmation information; or

Receiving, by the terminal, the transaction confirmation information by using a communication interface that is matched by the terminal and the smart cryptographic device; or

The terminal obtains the transaction confirmation information by using information input by the terminal.
The method according to any one of claims 1 to 14, wherein after the step of the background system server verifying the transaction confirmation information and executing the transaction after the verification is passed, the method further comprises:

Sending, by the background system server, transaction success receipt information to the terminal; or

The background system server sends transaction success receipt information to the smart cryptographic device through the terminal; after receiving the transaction success receipt information, the smart cryptographic device prompts the transaction success receipt information.
The method according to any one of claims 1 to 15, wherein after the step of the background system server verifying the transaction confirmation information and performing the transaction after the verification is passed, the method further comprises:

The terminal sends refund information to the smart cryptographic device;

After receiving the refund information, the smart cryptographic device prompts the refund information;

Receiving, by the smart cryptographic device, a refund confirmation instruction, and signing the refund information by using a private key of the smart cryptographic device to generate refund confirmation information;

Receiving, by the terminal, the refund confirmation information, verifying the refund confirmation information, and after the verification is passed, signing the refund confirmation information by using a private key of the terminal to generate a refund confirmation package;

Sending, by the terminal, the refund confirmation package and the refund confirmation information to the background system server;

After receiving the refund confirmation package and the refund confirmation information, the background system server separately verifies the refund confirmation package and the refund confirmation information, and performs a refund after all verifications are passed. operating.
The method according to any one of claims 1 to 15, wherein after the step of the background system server verifying the transaction confirmation information and performing the transaction after the verification is passed, the method further comprises:

The smart cryptographic device sends a refund request to the terminal;

The terminal generates refund information, and sends the refund information to the smart cryptographic device;

After receiving the refund information, the smart cryptographic device prompts the refund information;

Receiving, by the smart cryptographic device, a refund confirmation instruction, and signing the refund information by using a private key of the smart cryptographic device to generate refund confirmation information;

Receiving, by the terminal, the refund confirmation information, verifying the refund confirmation information, and after the verification is passed, signing the refund confirmation information by using a private key of the terminal to generate a refund confirmation package;

Sending, by the terminal, the refund confirmation package and the refund confirmation information to the background system server;

After receiving the refund confirmation package and the refund confirmation information, the background system server separately verifies the refund confirmation package and the refund confirmation information, and performs a refund after all verifications are passed. operating.
The method according to any one of claims 1 to 15, wherein after the step of the background system server verifying the transaction confirmation information and performing the transaction after the verification is passed, the method further comprises:

The smart cryptographic device sends a refund request to the terminal;

The terminal generates a refund request identifier, and sends the refund request identifier to the smart password device;

After receiving the refund request identifier, the smart password device generates refund information, and signs the refund information by using the private key of the smart password device to obtain refund confirmation information, and sends the refund confirmation information to the terminal. Sending the refund confirmation information;

Receiving, by the terminal, the refund confirmation information, verifying the refund confirmation information, and after the verification is passed, signing the refund confirmation information by using a private key of the terminal to generate a refund confirmation package;

Sending, by the terminal, the refund confirmation package and the refund confirmation information to the background system server;

After the background system server receives the refund confirmation package and the refund confirmation information, respectively, the refund The confirmation package and the refund confirmation information are verified, and after all verification is passed, the refund operation is performed.
The method of claim 16 or 17, wherein the refund information further comprises an electronic statement.
The method of claim 15 wherein said transaction success receipt information further comprises an electronic statement.
The method according to any one of claims 1 to 18, characterized in that the transaction information further comprises an electronic statement.
The method according to any one of claims 1 to 21, wherein the method further scans the smart cryptographic device within the signal coverage area and obtains the scanned identification information of the smart cryptographic device. include:

The smart cryptographic device enters a state that can be scanned.
The method according to any one of claims 1 to 22, wherein before the terminal acquires user information corresponding to the smart cryptographic device according to the scanned identification information of the smart cryptographic device, the method further include:

The terminal performs mutual authentication with the background system server.
The method according to claim 23, wherein the mutually authenticating the terminal with the background system server comprises:

The terminal generates first to-be-signed information;

Transmitting, by the terminal, the first to-be-signed information and the first authentication request information to a background system server;

After receiving the first to-be-signed information and the first authentication request information, the background system server generates second to-be-signed information;

Sending, by the background system server, the second to-be-signed information and the background system server certificate to the terminal;

After receiving the second to-be-signed information and the background system server certificate, the terminal uses the root certificate corresponding to the pre-stored background system server certificate to verify whether the background system server certificate is legal;

After verifying that the background system server certificate is legal, the terminal signs the first to-be-signed information and the second to-be-signed information by using the private key of the terminal to generate first signature information;

Transmitting, by the terminal, the first signature information and the terminal certificate to the background system server;

The background system server verifies whether the terminal certificate is legal by using a root certificate corresponding to the pre-stored terminal certificate;

After verifying that the terminal certificate is legal, the background system server verifies the first signature information by using a public key in the terminal certificate;

After verifying that the first signature information is passed, the background system server generates a background authentication completion message, and Sending, by the terminal, the background authentication completion message;

After receiving the background authentication completion message, the terminal verifies the background authentication completion message;

After verifying that the background authentication completion message is passed, the terminal generates a terminal authentication first completion message, and sends the terminal authentication first completion message to the background system server;

After receiving the terminal completion first completion message, the background system server verifies the terminal to authenticate the first completion message;

After the background system server verifies that the terminal authentication first completion message is passed, the terminal and the background system server complete mutual authentication.
The method according to claim 24, wherein the first authentication request information comprises identification information of the terminal;

After receiving the first to-be-signed information and the first authentication request information, the background system server determines whether the identification information of the terminal is included in a terminal abnormal list pre-stored in the background system server;

After the background system server determines that the identification information of the terminal is in the abnormal list of the terminal, acquires a lock terminal instruction, and uses the private key of the background system server to sign the locked terminal instruction to obtain the fourth signature information. And sending the locked terminal instruction and the fourth signature information to the terminal;

After receiving the locked terminal instruction and the fourth signature information, the terminal verifies the fourth signature information by using a public key in the pre-stored background system server certificate;

After verifying that the fourth signature information is passed, the terminal performs a locking operation according to the locked terminal instruction.
The method according to any one of claims 1 to 25, wherein before the terminal acquires user information corresponding to the smart cryptographic device according to the scanned identification information of the smart cryptographic device, the method further include:

The terminal performs mutual authentication with the smart cryptographic device.
The method of claim 26, wherein the mutually authenticating the terminal with the smart cryptographic device comprises:

The terminal generates third to-be-signed information;

Transmitting, by the terminal, the third to-be-signed information and the second authentication request information to the smart cryptographic device;

After receiving the third to-be-signed information and the second authentication request information, the smart cryptographic device generates fourth to-be-signed information;

The smart cryptographic device uses the private key of the smart cryptographic device to sign the third to-be-signed information to obtain second signature information, and sends the fourth to-be-signed information and the second signature information to the terminal. And a smart password device certificate;

After receiving the fourth to-be-signed information, the second signature information, and the smart cryptographic device certificate, the terminal verifies whether the smart cryptographic device certificate is legal by using a root certificate corresponding to the pre-stored smart cryptographic device certificate;

After verifying that the smart cryptographic device certificate is legal, the terminal verifies the second signature information by using a public key in the smart cryptographic device certificate;

After verifying that the second signature information is passed, the terminal signs the third to-be-signed information and the fourth to-be-signed information by using the private key of the terminal to obtain third signature information;

Transmitting, by the terminal, the third signature information and the terminal certificate to the smart cryptographic device;

After receiving the third signature information and the terminal certificate, the smart cryptographic device uses the root certificate corresponding to the pre-stored terminal certificate to verify whether the terminal certificate is legal;

After verifying that the terminal certificate is legal, the smart cryptographic device uses the public key in the terminal certificate to verify the third signature information;

After verifying that the third signature information is passed, the smart cryptographic device generates a smart cryptographic device authentication completion message;

Sending, by the smart cryptographic device, the smart cryptographic device authentication completion message to the terminal;

After receiving the smart cryptographic device authentication completion message, the terminal verifies the smart cryptographic device authentication completion message;

After verifying that the smart cryptographic device authentication completion message is passed, the terminal generates a terminal authentication second completion message, and sends the terminal authentication second completion message to the smart cryptographic device;

After receiving the terminal completion second completion message, the smart cryptographic device verifies that the terminal authenticates the second completion message;

After the smart cryptographic device verifies the second authentication message of the terminal authentication, the terminal and the smart cryptographic device complete mutual authentication.
The method according to claim 27, wherein the step of generating the fourth to-be-signed information after the smart cryptographic device receives the third to-be-signed information and the second authentication request information comprises:

After receiving the second authentication request information, the smart cryptographic device converts from a sleep state to an awake state;

The smart cryptographic device generates fourth to-be-signed information in an awake state.
A method according to any one of claims 1 to 28, characterized in that

The information transmitted between the background system server and the terminal is transmitted through the first session key encryption calculation and/or the verification calculation, wherein the first session key is pre-existing in the background system server and the Said in the terminal or the first session key is negotiated by the background system server and the terminal; and/or

The information transmitted between the terminal and the smart cryptographic device is transmitted through a second session key encryption calculation and/or a check calculation, wherein the second session key pre-stores the terminal and the smart In the cryptographic device or in the The second session key is generated by negotiation between the terminal and the smart cryptographic device.
A data security interaction system, comprising:

The terminal is configured to scan the smart cryptographic device in the signal coverage area, and obtain the scanned information of the smart cryptographic device; and obtain the user information corresponding to the smart cryptographic device according to the scanned information of the smart cryptographic device Storing the user information into a pre-established current user list; generating transaction information according to user information corresponding to the smart cryptographic device to be traded, and obtaining transaction request information according to the transaction information; and transmitting the information to the smart cryptographic device Transmitting transaction request information; receiving transaction confirmation information, wherein the transaction confirmation information is generated by the smart cryptographic device; obtaining a transaction data packet according to the transaction confirmation information, and transmitting the transaction data packet to the background system server;

The smart cryptographic device is configured to receive the transaction request information sent by the terminal, obtain the transaction information according to the transaction request information, prompt the transaction information, receive a confirmation instruction, and generate transaction confirmation information;

The background system server is configured to receive the transaction data packet sent by the terminal, obtain the transaction confirmation information according to the transaction data package, verify the transaction confirmation information, and execute the transaction after the verification is passed.
The system of claim 30 wherein:

The terminal is further configured to send the identifier information of the smart cryptographic device and the user information read request to the background system server, and receive response information of the user information read request sent by the background system server, according to the user The response information of the information read request obtains the user information;

The background system server is further configured to receive the identification information of the smart cryptographic device and the user information read request sent by the terminal, and obtain, according to the identification information of the smart cryptographic device, a corresponding to the smart cryptographic device. User information; obtaining response information of the user information read request according to the user information, and transmitting response information of the user information read request to the terminal.
The system of claim 30 wherein:

The terminal is further configured to send a user information read request to the smart cryptographic device according to the scanned identification information of the smart cryptographic device; and receive response information of the user information read request sent by the smart cryptographic device, according to the The response information of the user information read request obtains the user information;

The smart cryptographic device is further configured to obtain pre-stored user information, obtain response information of the user information read request according to the user information, and send the response information of the user information read request to the terminal. .
A system according to any one of claims 30 to 32, wherein

The terminal is further configured to scan the smart cryptographic device within the signal coverage range, and obtain the scanned identification information of the smart cryptographic device, and obtain identification information of all the smart cryptographic devices within the signal coverage range of the terminal. Generating a real-time identification list; and the smart cryptographic device in the real-time identification list is preset according to a preset time interval The identification information is compared with the identification information of the smart cryptographic device in the current user list; if the identification information of the smart cryptographic device in the real-time identification list is not in the current user list, according to the scanned smart The identification information of the cryptographic device acquires the user information corresponding to the smart cryptographic device; and if the identification information of the smart cryptographic device in the current user list is not in the real-time identification list, deleting the current user list is not included in the current user list. User information of the smart cryptographic device in the real-time identification list.
A system according to any one of claims 30 to 32, wherein

The terminal is further configured to scan the smart cryptographic device within the signal coverage range, and obtain the scanned identification information of the smart cryptographic device, and obtain identification information of all the smart cryptographic devices within the signal coverage range of the terminal. And generating a real-time identifier list; comparing the identifier information of the smart password device in the real-time identifier list with the identifier information of the smart password device in the current user list according to a preset time interval; if the real-time identifier list Acquiring the identification information of the smart cryptographic device in the current user list, obtaining the user information corresponding to the smart cryptographic device according to the scanned identification information of the smart cryptographic device, and obtaining the user information at the terminal And storing the user information in the real-time identifier list; and if the identifier information of the smart cryptographic device in the real-time identifier list is in the current user list, then the User information of the smart cryptographic device is stored in the real-time identification list; Identifying said updated list as a list of current users.
The system of claim 31, wherein

The background system server is further configured to: after the terminal sends the identification information of the smart cryptographic device and the user information read request to the background system server, determine whether the identifier information of the smart cryptographic device is included in the background system server In the abnormal list of the pre-stored smart cryptographic device; after determining that the identification information of the smart cryptographic device is in the abnormal list of the smart cryptographic device, obtaining the instruction to lock the smart cryptographic device, and using the private key pair of the backend system server Locking the smart cryptographic device instruction to obtain a fifth signature information, and transmitting, by the terminal, the locked smart cryptographic device instruction and the fifth signature information to the smart cryptographic device;

The smart cryptographic device is further configured to receive the locked smart cryptographic device command and the fifth signature information, and verify the fifth signature information by using a pre-stored public key in the background system server certificate; After the fifth signature information is passed, the locking operation is performed according to the locked smart cryptographic device instruction.
A system according to any one of claims 30 to 35, wherein

The background system server is further configured to receive a terminal registration application, and review the terminal registration application; after reviewing the terminal registration application, send a terminal key pair generation instruction to the terminal; and receive the terminal Generating, by the public key in the sent terminal key pair, the terminal certificate, and sending the terminal certificate to the terminal;

And the background system server is further configured to receive a smart password device registration application and the smart password The device registration application is reviewed; after the verification of the smart password device registration application is passed, the smart password device key pair generation instruction is sent to the smart password device; and the smart password device key pair sent by the smart password device is received. Generating the smart cryptographic device certificate and transmitting the smart cryptographic device certificate to the smart cryptographic device;

The terminal is further configured to receive the terminal key pair generation instruction sent by the background system server, generate a terminal key pair, and send the public key in the terminal key pair to the background system server; Terminal certificate;

The smart cryptographic device is further configured to receive the smart cryptographic device key pair generation instruction sent by the background system server, generate a smart cryptographic device key pair, and send the smart cryptographic device key to the background system server. The public key of the pair; storing the smart cryptographic device certificate.
The system of claim 36 wherein:

The terminal is further configured to acquire a terminal account cancellation application, use the private key of the terminal to sign the account cancellation application to obtain a sixth signature information, and send the terminal account cancellation application and the office to the background system server. The sixth signature information is received; the terminal completion information sent by the background system server is received, and the private key of the terminal is deleted;

The background system server is further configured to: after receiving the terminal account cancellation application and the sixth signature information sent by the terminal, verifying the sixth signature information by using a public key in the pre-stored terminal certificate After verifying that the sixth signature information is passed, deleting the pre-stored terminal certificate, and generating a terminal account completion information, and sending the terminal account completion information to the terminal;

and / or

The smart cryptographic device is further configured to obtain a smart PIN device account cancellation application, use the private key of the smart cryptographic device to sign the account cancellation application to obtain a seventh signature information, and send the seventh signature information to the background system server. Receiving the smart password device account cancellation application and the seventh signature information; receiving the smart password device account completion information sent by the background system server, and deleting the private key of the smart password device;

The background system server is further configured to receive the smart cryptographic device account cancellation application and the seventh signature information sent by the smart cryptographic device, and use the public key in the pre-stored smart cryptographic device certificate to Seventh signature information is verified; after verifying that the seventh signature information is passed, the pre-stored smart password device certificate is deleted, and the smart password device account completion information is generated, and the smart password device pin is sent to the smart password device. The user completes the information.
The system of claim 31, wherein

The background system server is further configured to send user authorization request information to the smart cryptographic device through the terminal; and after receiving the authorization information sent by the smart cryptographic device by the terminal, send the user information to the terminal Read the response information of the request;

The smart cryptographic device is further configured to receive the user authorization request information, generate authorization information, and send the authorization information to the background system server by using the terminal.
The system of claim 38, wherein

The smart cryptographic device is further configured to: after receiving the user authorization request information, transition from a sleep state to an awake state; and generate authorization information in the awake state.
A system according to any one of claims 30 to 39, wherein

The smart cryptographic device is further configured to receive the transaction request information, and switch from a sleep state to an awake state; and obtain the transaction information according to the transaction request information in an awake state.
A system according to any one of claims 30 to 40, wherein

The smart cryptographic device is further configured to sign the transaction information by using a private key of the smart cryptographic device, generate transaction signature information as transaction confirmation information or generate a dynamic password as transaction confirmation information.
A system according to any one of claims 30 to 40, wherein

The smart cryptographic device is further configured to generate a single transaction identifier, and use the private key of the smart cryptographic device to sign the transaction information and the single transaction identifier to generate transaction signature information as transaction confirmation information; or

The smart cryptographic device is further configured to generate a single transaction identifier, and use the private key of the smart cryptographic device to sign the single transaction identifier to obtain signature information of a single transaction identifier, and generate a dynamic password, which will be a single time The signature information of the transaction identifier and the dynamic password are used as transaction confirmation information.
A system according to claim 41 or claim 42 wherein:

The terminal is further configured to receive an acoustic wave signal sent by the smart cryptographic device and decode the acoustic wave signal to obtain transaction confirmation information; or

Acquiring image information displayed by the smart cryptographic device and decoding the image information to obtain the transaction confirmation information; or

Receiving, by the communication interface that the terminal matches the smart cryptographic device, the transaction confirmation information; or

The transaction confirmation information is obtained by the information input by the terminal.
A system according to any one of claims 30 to 43 wherein:

The background system server is further configured to: after verifying the transaction confirmation information, and executing the transaction after the verification is passed, sending the transaction success receipt information to the terminal; and/or using the terminal to the smart password The device sends a transaction success receipt information;

The smart cryptographic device is further configured to receive the transaction success receipt information, prompting the transaction to successfully return receipt information.
A system according to any one of claims 30 to 44, wherein

The terminal is further configured to: in the background system server, verify the transaction confirmation information, and after executing the transaction after the verification is passed, send the refund information to the smart password device; receive the refund confirmation information, and the refund The confirmation information is verified, and after the verification is passed, the refund confirmation information is signed by using the private key of the terminal to generate a refund confirmation package; and the refund confirmation package is sent to the background system server Refund confirmation information;

The smart cryptographic device is further configured to: after receiving the refund information sent by the terminal, prompting the refund information; receiving a refund confirmation instruction, and using the private key of the smart cryptographic device to refund the refund The information is signed and a refund confirmation message is generated;

The background system server is further configured to: after receiving the refund confirmation package and the refund confirmation information sent by the terminal, verify the refund confirmation package and the refund confirmation information respectively, and After all verification is passed, a refund operation is performed.
A system according to any one of claims 30 to 44, wherein

The smart cryptographic device is further configured to verify the transaction confirmation information in the background system server, and send a refund request to the terminal after the transaction is executed after the verification is passed; and receive the refund sent by the terminal After the information, prompting the refund information; receiving a refund confirmation instruction, and signing the refund information by using a private key of the smart password device to generate a refund confirmation information;

The terminal is further configured to generate refund information, and send the refund information to the smart password device; receive the refund confirmation information, verify the refund confirmation information, and after the verification is passed, And signing the refund confirmation information by using a private key of the terminal to generate a refund confirmation package; and sending the refund confirmation package and the refund confirmation information to the background system server;

The background system server is further configured to receive the refund confirmation package and the refund confirmation information sent by the terminal, and verify the refund confirmation package and the refund confirmation information respectively, and After the verification is passed, the refund operation is performed.
A system according to any one of claims 30 to 44, wherein

The smart cryptographic device is further configured to verify the transaction confirmation information in the background system server, and send a refund request to the terminal after performing the transaction after the verification is passed; and receive the refund request identifier sent by the terminal Generating refund information, and signing the refund information by using a private key of the smart cryptographic device to obtain refund confirmation information, and sending the refund confirmation information to the terminal;

The terminal is further configured to generate a refund request identifier, and send the refund request identifier to the smart password device; receive the refund confirmation information, verify the refund confirmation information, and pass the verification Afterwards, the refund confirmation information is signed by using the private key of the terminal to generate a refund confirmation package; and the backend system server is sent Declaring the refund confirmation package and the refund confirmation information;

The background system server is further configured to receive the refund confirmation package and the refund confirmation information sent by the terminal, and verify the refund confirmation package and the refund confirmation information respectively, and After the verification is passed, the refund operation is performed.
A system according to claim 45 or 46, wherein said refund information further comprises an electronic statement.
The system of claim 44 wherein said transaction success receipt information further comprises an electronic statement.
A system according to any one of claims 30 to 47, wherein the transaction information further comprises an electronic statement.
A system according to any one of claims 30 to 50, wherein

The smart cryptographic device is further configured to enter a scannable state before being scanned by the terminal within the signal coverage.
A system according to any one of claims 30 to 51, wherein

The terminal also performs mutual authentication with the background system server.
The system of claim 52, wherein

The terminal is further configured to generate first to-be-signed information; send the first to-be-signed information and the first authentication request information to the background system server; receive the second to-be-signed information sent by the background system server, and the background a system server certificate, using the root certificate corresponding to the pre-stored background system server certificate to verify whether the background system server certificate is legal; after verifying that the background system server certificate is legal, using the private key of the terminal to sign the first to sign The information and the second to-be-signed information are signed to generate first signature information; the first signature information and the terminal certificate are sent to the background system server; after receiving the background authentication completion message sent by the background system server, the verification office After the background authentication completion message is verified, the terminal authentication first completion message is generated, and the terminal authentication first completion message is sent to the background system server;

The background system server is further configured to receive the first to-be-signed information and the first authentication request information sent by the terminal, generate second to-be-signed information, and send the second to-be-signed information to the terminal. And the background system server certificate; verifying whether the terminal certificate is legal by using a root certificate corresponding to the pre-stored terminal certificate; and verifying that the terminal certificate is legal, verifying the first signature information by using a public key in the terminal certificate; After the first signature information is verified, the background authentication completion message is generated, and the background authentication completion message is sent to the terminal; the terminal authentication first completion message sent by the terminal is received, and the terminal authentication is verified. After completing the message, after verifying that the terminal authentication first completion message is passed, the terminal and the background system server complete mutual authentication.
The system of claim 53 wherein:

The background system server is further configured to receive the first to-be-signed information and the first authentication request information sent by the terminal, where the first authentication request information includes identification information of the terminal; Whether the identification information of the terminal is included in the terminal abnormal list pre-stored in the background system server; after determining that the identification information of the terminal is in the abnormal list of the terminal, acquiring a locking terminal instruction, and using the background system The private key of the server signs the locked terminal instruction to obtain the fourth signature information, and sends the locked terminal instruction and the fourth signature information to the terminal;

The terminal is further configured to receive the locked terminal command and the fourth signature information sent by the background system server, and verify the fourth signature information by using a pre-stored public key in the background system server certificate. After verifying that the fourth signature information is passed, performing a locking operation according to the locked terminal instruction.
A system according to any one of claims 30 to 54, wherein

The terminal also performs mutual authentication with the smart cryptographic device.
The system of claim 55, wherein

The terminal is further configured to generate third to-be-signed information, and send the third to-be-signed information and the second authentication request information to the smart cryptographic device, and receive the fourth to-be-signed information sent by the smart cryptographic device. And the second signature information and the smart cryptographic device certificate, verifying whether the smart cryptographic device certificate is legal by using a root certificate corresponding to the pre-stored smart cryptographic device certificate; and after verifying that the smart cryptographic device certificate is legal, using the The public key in the smart cryptographic device certificate verifies the second signature information; after verifying that the second signature information is passed, using the private key of the terminal to the third to-be-signed information and the fourth to-be-signed information And signing the signature information to obtain the third signature information; sending the third signature information and the terminal certificate to the smart cryptographic device; and receiving the smart cryptographic device authentication completion message sent by the smart cryptographic device to verify the smart a password device authentication completion message; after verifying that the smart password device authentication completion message is passed, generating a terminal identification Second completion message, transmitting the authentication to the terminal device of the second smart password complete message;

The smart cryptographic device is further configured to receive the third to-be-signed information and the second authentication request information sent by the terminal, to generate fourth to-be-signed information, and use the private key of the smart cryptographic device to The third to-be-signed information is signed to obtain the second signature information, and the fourth to-be-signed information, the second signature information, and the smart cryptographic device certificate are sent to the terminal; and the third signature sent by the terminal is received. After the information and the terminal certificate, verifying whether the terminal certificate is legal by using the root certificate corresponding to the pre-stored terminal certificate; and after verifying that the terminal certificate is legal, using the public key in the terminal certificate to the third And verifying the signature information; after verifying that the third signature information is passed, generating a smart cryptographic device authentication completion message; transmitting the smart cryptographic device authentication completion message to the terminal; and receiving the terminal authentication second sent by the terminal After completing the message, verify that the terminal authentication is completed second. After the terminal authenticates the second completion message, the terminal and the smart cryptographic device complete mutual authentication.
The system of claim 56 wherein:

The smart cryptographic device is further configured to: after receiving the second authentication request information, transition from a sleep state to an awake state; and generate a fourth to-be-signed information in the awake state.
A system according to any one of claims 30 to 57, wherein

The information transmitted between the background system server and the terminal is transmitted through the first session key encryption calculation and/or the verification calculation, wherein the first session key is pre-existing in the background system server and the Said in the terminal or the first session key is negotiated by the background system server and the terminal; and/or

The information transmitted between the terminal and the smart cryptographic device is transmitted through a second session key encryption calculation and/or a check calculation, wherein the second session key pre-stores the terminal and the smart The second session key is generated in the cryptographic device or negotiated by the terminal and the smart cryptographic device.