WO2017107328A1

WO2017107328A1 - Secure communication method and apparatus for self-service terminal device hardware

Info

Publication number: WO2017107328A1
Application number: PCT/CN2016/077252
Authority: WO
Inventors: 熊飞; 吴胜楠; 陈明宇; 张雲瑞; 梁建明; 李柯烨
Original assignee: 广州广电运通金融电子股份有限公司
Priority date: 2015-12-22
Filing date: 2016-03-24
Publication date: 2017-06-29
Also published as: CN105574445B; CN105574445A

Abstract

Disclosed is a secure communication method for self-service terminal device hardware, which is used for solving the problem that a conventional self-service terminal is vulnerable to a financial crime a criminal commits by simulating device hardware through software to communicate with a host. The method comprises: a local end acquiring original data needing to be sent; the local end encrypting the original data to obtain encrypted data; the local end generating a random number, and partitioning the encrypted data into a data block according to the random number; the local end packaging the data block one by one to generate a corresponding data packet; the local end transmitting the data packet to a peer end, such that the peer end parses and merges the data packet to obtain the encrypted data, and then the peer end decrypting the encrypted data to obtain the original data. Also provided is a secure communication apparatus for self-service terminal device hardware.

Description

Safety communication method and device for self-service terminal equipment hardware

This application claims priority to Chinese Patent Application No. 201510981728.1, entitled "Safe Communication Method and Apparatus for Self-Service Terminal Equipment Hardware", filed on December 22, 2015, the entire contents of which are hereby incorporated by reference. Combined in this application.

Technical field

The present invention relates to the field of financial equipment, and in particular, to a secure communication method and apparatus for self-service terminal equipment hardware.

Background technique

With the improvement of financial crimes, the technical level is constantly improving. Although the safes of ATM machines are not easily accessible, criminals can simulate the movement hardware devices and arrange them on the target ATM machines to achieve continuous simulation. The deposit business bypassed the real movement equipment, which led to financial crimes. The criminals use the test tool to call the CEN XFS standard command, and it is easy to take out the banknotes from the safe without opening the safe door, increasing the risk. The existing security technology requires network security verification, which will increase the unknown risk caused by network authentication. This will greatly reduce the real-time security check and tracking of the host device by the ATMC software, which will be easily taken by criminals.

Summary of the invention

The embodiment of the invention provides a secure communication method and device for self-service terminal device hardware, which can solve the problem that the existing self-service terminal is vulnerable to criminal crimes by the criminals communicating with the host through the hardware of the software simulation device.

The method for the secure communication of the self-service terminal device hardware provided by the embodiment of the present invention is applied to the communication between the host of the self-service terminal and the device hardware, including:

The local end obtains the original data that needs to be sent;

The local end encrypts the original data to obtain encrypted data;

The local end generates a random number, and divides the encrypted data into data blocks according to the random number;

The local end packs the data blocks one by one to generate corresponding data packets;

The local end transmits the data packet to the opposite end, so that the opposite end parses and merges the data packet to obtain the encrypted data, and then the peer end decrypts the encrypted data to obtain the original data.

Optionally, the local end generates a random number, and splitting the encrypted data into data blocks according to the random number includes:

The local end generates a random number within a preset range;

The local end divides the encrypted data into the random number of data blocks.

Optionally, the method for secure communication further includes: the local end pre-generating a pair of asymmetric keys, including a public key and a private key, and pre-importing the public key to the opposite end;

The private key is used to encrypt the original data, and the public key is used to decrypt the encrypted data.

Optionally, the local end encrypts the original data, and obtaining the encrypted data includes:

The local end combines the original data and corresponding time information into a data body;

The local end performs a check operation on the data body to obtain a first operation result;

The local end combines the data body and the first operation result to obtain a verification data body;

The local end encrypts the verification data body to obtain encrypted data;

Decrypting the encrypted data by the peer end, and obtaining the original data includes:

Decrypting the encrypted data by the peer end to obtain a check data body to be tested;

Obtaining, by the peer end, the data body in the data body to be tested, and performing a check operation on the obtained data body to obtain a second operation result;

And determining, by the peer end, whether the second operation result is consistent with the first operation result in the test data body to be tested, and if yes, acquiring the original data in the data body.

Optionally, after the obtaining the original data, the peer further includes:

The peer end performs data plausibility check on the original data, and if the check passes, the peer end operates according to the original data.

The security communication device of the self-service terminal device hardware provided by the embodiment of the present invention is applied to the communication between the host and the device hardware of the self-service terminal, including the local end and the opposite end, and the local end includes:

a raw data obtaining module, configured to obtain original data that needs to be sent;

An encryption module, configured to encrypt the original data to obtain encrypted data;

a random segmentation module, configured to generate a random number, and divide the encrypted data into numbers according to the random number Block

a data packet module, configured to package the data blocks one by one to generate a corresponding data packet;

a transmission module, configured to transmit the data packet to the peer end;

The opposite end includes:

Parsing a merge module, configured to parse and merge the data packet to obtain the encrypted data;

And a decryption module, configured to decrypt the encrypted data to obtain the original data.

Optionally, the random segmentation module includes:

a random number generating unit for generating a random number within a preset range;

And a data segmentation unit, configured to divide the encrypted data into the random number of data blocks.

Optionally, the secure communication device further includes:

a key generation module, configured to generate a pair of asymmetric keys in advance, including a public key and a private key;

a public key importing module, configured to import the public key into the peer end in advance;

Optionally, the encryption module includes:

a first merging unit, configured to combine the original data and corresponding time information into a data body;

a first check operation unit, configured to perform a check operation on the data body to obtain a first operation result;

a second merging unit, configured to combine the data body and the first operation result to obtain a check data body;

An encryption unit, configured to encrypt the verification data body to obtain encrypted data;

The decryption module includes:

a decryption unit, configured to decrypt the encrypted data to obtain a check data body to be tested;

a second check operation unit, configured to acquire a data body in the test data body to be tested, and perform a check operation on the acquired data body to obtain a second operation result;

a checking unit, configured to check whether the second operation result is consistent with the first operation result in the check data body to be tested;

a data obtaining unit, configured to acquire the original data in the data body when a check result of the check unit is YES.

Optionally, the peer end further includes:

a plausibility checking module, configured to perform data plausibility check on the original data;

And an operation module, configured to perform operations according to the original data when the check of the plausibility check module passes.

It can be seen from the above technical solutions that the embodiments of the present invention have the following advantages:

In the embodiment of the present invention, first, the local end acquires original data that needs to be sent; the local end encrypts the original data to obtain encrypted data; then, the local end generates a random number, and encrypts according to the random number. The data is divided into data blocks; the local end packs the data blocks one by one to generate a corresponding data packet; finally, the local end transmits the data packet to the opposite end, so that the opposite end will The data packet is parsed and combined to obtain the encrypted data, and then the peer decrypts the encrypted data to obtain the original data. In the embodiment of the present invention, the secure communication method of the self-service terminal device hardware is implemented in the local host of the self-service terminal, does not require network verification, and improves the security of the communication through random packetization, and prevents the criminals from simulating the hardware through the software. Host communication for financial crimes.

DRAWINGS

The drawings are intended to provide a further understanding of the invention, and are intended to be a In the drawing:

1 is a flowchart of an embodiment of a method for securely communicating hardware of a self-service terminal device according to an embodiment of the present invention;

2 is a flowchart of another embodiment of a method for secure communication of hardware of a self-service terminal device according to an embodiment of the present invention;

FIG. 3 is a structural diagram of a self-service terminal system in an application scenario according to a method for secure communication of hardware of a self-service terminal device according to an embodiment of the present invention; FIG.

4 is a structural diagram of data format in a data encryption communication process in an application scenario according to a method for secure communication of hardware of a self-service terminal device according to an embodiment of the present invention;

FIG. 5 is a structural diagram of an embodiment of a secure communication device for a self-service terminal device hardware according to an embodiment of the present invention; FIG.

FIG. 6 is a structural diagram of another embodiment of a secure communication device for a self-service terminal device hardware according to an embodiment of the present invention.

detailed description

The embodiment of the invention provides a secure communication method and device for self-service terminal device hardware, which is used to solve the problem that the existing self-service terminal is vulnerable to financial crimes by the criminals communicating with the host through the hardware of the software simulation device.

In order to make the object, the features and the advantages of the present invention more obvious and easy to understand, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. The described embodiments are only a part of the embodiments of the invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

Referring to FIG. 1, an embodiment of a method for secure communication of a self-service terminal device hardware in an embodiment of the present invention includes:

11. The local end obtains the original data that needs to be sent;

First, the local end can obtain the original data that needs to be sent. It should be noted that when the host of the self-service terminal communicates with the device hardware, the host is the local device, and the device hardware is the peer; and when the device hardware of the self-service terminal communicates with the host, the device hardware is the host, and the device is the host. For the opposite end.

12. The local end encrypts the original data to obtain encrypted data.

After the local end obtains the original data to be sent, the local end can encrypt the original data to obtain encrypted data.

13. The local end generates a random number, and divides the encrypted data into data blocks according to the random number;

After the local data is encrypted at the local end, and the encrypted data is obtained, the local end can generate a random number, and divide the encrypted data into data blocks according to the random number.

14. The local end packs the data blocks one by one to generate corresponding data packets;

After the local end generates a random number and divides the encrypted data into data blocks according to the random number, the local end can pack the data blocks one by one to generate a corresponding data packet.

15. The local end transmits the data packet to the opposite end;

After the data block is packaged one by one at the local end to generate a corresponding data packet, the local end can transmit the data packet to the opposite end.

16. The peer end parses and merges the data packet to obtain the encrypted data.

After the local end transmits the data packet to the peer end, the peer end can parse and merge the data packet to obtain the encrypted data.

17. The peer decrypts the encrypted data to obtain the original data.

After the data packet is parsed and combined at the opposite end to obtain the encrypted data, the peer end can decrypt the encrypted data to obtain the original data.

In this embodiment, first, the local end acquires original data that needs to be sent; the local end encrypts the original data to obtain encrypted data; then, the local end generates a random number, and divides the encrypted data into data according to the random number. The local end packs the data block one by one to generate a corresponding data packet; finally, the local end transmits the data packet to the opposite end, so that the opposite end parses and merges the data packet to obtain the encrypted data. The peer then decrypts the encrypted data to obtain the original data. In this embodiment, the secure communication method of the self-service terminal device hardware is implemented in the local host of the self-service terminal, does not require network verification, and improves the security of the communication through random packetization, and prevents the criminals from simulating the hardware and the host through the software. Communication for financial crimes.

For the sake of understanding, a secure communication method for the self-service terminal device hardware in the embodiment of the present invention is described in detail below. Referring to FIG. 2, another embodiment of the secure communication method for the self-service terminal device hardware in the embodiment of the present invention includes :

21. The local end obtains the original data that needs to be sent;

22. The local end combines the original data and the corresponding time information into a data body;

After the local end obtains the original data that needs to be sent, the local end can combine the original data and the corresponding time information into a data body. It can be understood that the time information corresponds to the original data, and the time information may be the time when the original data is generated, or the time sequence between the plurality of original data.

23. The local end performs a check operation on the data body to obtain a first operation result;

After the local end merges the original data and the corresponding time information into a data body, the local end performs a check operation on the data body to obtain a first operation result. It can be understood that the verification operation may be a CRC (Cyclic Redundancy Code) check, so that the final first operation result is a CRC check operation result.

24. The local end combines the data body and the first operation result to obtain a verification data body.

After the data processing is performed on the data body to obtain a first operation result, the local end may combine the data body and the first operation result to obtain a verification data body. The data structure of the check data body may be preset, for example, the first operation result is placed at the head of the data structure, and the data body is placed after the first operation result. Specifically, the structure of the check data body can be customized, which is not limited in this embodiment.

25. The local end encrypts the check data body by using a private key to obtain encrypted data.

After the data body and the first operation result are combined at the local end to obtain a check data body, the local end may encrypt the check data volume by using a private key to obtain encrypted data. It should be noted that the local end generates a pair of asymmetric keys, including a public key and a private key, and pre-imports the public key to the peer end, where the private key is used to encrypt the original data. The public key is used to decrypt the encrypted data.

26. The local end generates a random number within a preset range;

Before the segmentation, the local end needs to generate a random number within a preset range, and the random number is random for both the local end and the opposite end, thereby preventing the criminals from being known and cracked in advance, thereby improving security. In order to improve the efficiency of data transmission, the random number is generally not too large. For example, the size of the encrypted data is 100 bytes. If the generated random number is 100, the size of the 100 bytes is divided into 100 words and 1 word. The data block of the section, which is very disadvantageous for subsequent data transmission. Therefore, in this embodiment, the random number is generated within a preset numerical range, thereby avoiding the problem that the random number is too large.

27. The local end divides the encrypted data into the random number of data blocks;

After the local end generates a random number in a preset range, the local end divides the encrypted data into the random number of data blocks. For example, when the random number is 5, the encrypted data is divided into 5 data blocks.

28. The local end packs the data blocks one by one to generate corresponding data packets.

After the local end divides the encrypted data into the random number of data blocks, the local end may pack the data blocks one by one to generate corresponding data packets. For example, when there are 5 data blocks, each data block is packed to generate 5 corresponding data packets. Specifically, the header and the trailer may be respectively added on a basis of one data block, so that one data block generates one data packet.

29. The local end transmits the data packet to the opposite end;

After the data block is packaged one by one at the local end to generate a corresponding data packet, the local end transmits the data packet to the opposite end.

30. The peer end parses and merges the data packet to obtain the encrypted data.

After receiving the data packet from the local end, the peer end may parse and merge the data packet to obtain the encrypted data. Specifically, that is, the data packet is parsed into data blocks, and then all the data blocks are merged into the encrypted data.

31. The peer end decrypts the encrypted data by using a public key. If the decryption fails, step 37 is performed. If the decryption succeeds, the check data body to be tested is obtained.

After obtaining the encrypted data, the peer end may decrypt the encrypted data by using the public key. If the decryption fails, step 37 is performed. If the decryption succeeds, the check data body to be tested is obtained. It can be understood that the public key used for decryption is paired with the private key used for encryption, and the public key is pre-imported to the peer end, thereby preventing the criminal person from obtaining the public key on the opposite end by software means. .

32. The peer end acquires a data body in the data body to be tested, and performs a check operation on the obtained data body to obtain a second operation result.

After obtaining the check data body to be tested, the peer end can acquire the data body in the check data body to be tested, and perform a check operation on the obtained data body to obtain a second operation result. It should be noted that the verification operation method of step 32 should be consistent with the verification operation method used in step 23.

33, the peer end verifies that the second operation result is consistent with the first operation result in the test data body to be tested, if yes, step 34 is performed, if not, step 37 is performed;

After the second operation result is obtained, the peer end may check whether the second operation result matches the first operation result in the test data body to be tested. If yes, step 34 is performed, and if not, the step is performed. 37. It can be understood that when the second operation result is consistent with the first operation result, it is indicated that the data body in the obtained test data body to be tested is consistent with the data body on the local end; otherwise, the check data body to be tested exists. The data is wrong and can be processed incorrectly.

34. The peer acquires the original data in the data body.

When the second operation result matches the first operation result, the peer end acquires the original data from the data body.

The peer end performs data plausibility check on the original data, if the check passes, step 36 is performed, and if the check fails, step 37 is performed;

After the peer end obtains the original data in the data body, the peer end may perform data plausibility check on the original data. If the check passes, step 36 is performed. If the check fails, step 37 is performed. The inspection criteria for the data plausibility check can be set according to the actual use, for example To check whether the command combination of the original data is reasonable, or whether the corresponding time information is reasonable or the like.

36. The peer end operates according to the original data;

After the original data passes the data plausibility check, the peer end can operate according to the original data.

37. The peer end performs data discarding processing.

When the decryption of the encrypted data fails, or when the verification of the verification data body fails, or the data validity check of the obtained original data fails, the peer performs data discard processing on the data.

For ease of understanding, a secure communication method of the self-service terminal device hardware in the embodiment of the present invention is described in an actual application scenario:

In this application scenario, the host of the self-service terminal has a data security processing module 102 built therein, and a data security processing module 103 is built in the device hardware. The system structure of the self-service terminal is as shown in FIG. 3 . The self-service terminal host is installed with the upper layer software of the ATMC (system platform of an ATM machine), and the host communicates with the data security processing module 103 of the device hardware through the data security processing module 102 to implement communication between the host and the device hardware. The following describes each link in the communication process, please refer to Figure 3 and Figure 4.

Key generation process:

Step 1: Add a hardware data security processing module 103 to the external communication interface in the device, that is, connect the original device connection cable to the hardware encryption module, and then the new communication interface is extracted by the encryption module to communicate with the host. The connection uses this interface.

Step 2: The ATMC upper layer software 101 generates a pair of asymmetric keys: the public key is A, the private key is B, and the public key A is imported into the hardware device; the hardware device generates the data security processing module 103 through the hardware. A pair of non-factory keys are: the public key is C, the private key is D, and C is sent to the ATMC software.

Data Encryption Communication Process Description:

Step 1: The ATMC upper layer software 101 transmits the binary command data to the data security processing module 102;

Step 2: The data security processing module 102 first copies the binary command data into the original binary data 205 buffer of the check data format 201, and the data collating submodule 302 adds the time information 204 according to the check data format 201, and then The time information 204 and the original binary data 205 are combined into a data body 202, and a CRC checksum operation is performed to generate a CRC check operation result. The CRC 203 combines the CRC 203 and the data body 202 to generate a parity data format 201. The data encryption sub-module 303 encrypts the data of the check data format 201 with the private key B to generate encrypted binary data 207 (hereinafter referred to as data B') of the encrypted data format 206, and then the data splitting module 304 assigns a packet number 212. And the data B' generates a random number according to the clock, and ensures that the size of each split binary data 210 is not less than 20 bytes, and then divides the data block according to the generated random number to obtain The plurality of split binary data 210 adds a split header 209 and a split trailer 211 based on the divided binary data 210 (where the split header 209 includes a header identifier 0xBF, a packet number 212, a block number 213, and a block number 214 The split packet tail 211 is identified as 0xEF) to generate a data packet of the corresponding number of packetized data formats 208. The generated packet of the packetized data format 208 is then transmitted to the data security processing module 103 in sequence via the serial port or USB.

Step 3: The data security processing module 103 receives the transmitted communication data in the data format of the packetized data format 208, and the merge submodule 307 in the data security processing module 103 analyzes the first packetized data format 208. The block number 213 and the block number 214 (where the block number 213 is the number of blocks to be packetized, and the block number 214 is the block position index number of the packetized data) is received by the same packet of the same packetized data format 208, and the same packet is used. The split binary data 210 in the unpacked data format 208 of the number 212 merges the data to obtain data of the encrypted data format 206 (hereinafter referred to as data B'), and the data decryption sub-module 308 decrypts the data B' using the public key A. Checking the data B of the data format 201, the data check sub-module 309 performs a CRC checksum operation on the data body 202 in the data B, and then checks with the CRC 203 in the check data format 201, and if the results do not match, Actively rejecting the original binary data 205 in the check data format 201 to the hardware command master 104, if the result of the check is met, the proofreading data is reasonable (refer to the security check operation) In the step), if the illegitimate, the original binary data 204 in the check data format 201 is rejected from being sent to the hardware command master 104, and if so, the original binary data 205 in the check data format 201 is sent to the hardware. Command master 104.

Step 4: The hardware command master 104 performs command processing after receiving the binary data. The hardware command master 104 returns the result data to the data security processing module 103 after processing the completion command.

Step 5: After receiving the returned data, the data security processing module 103 copies the returned data into the original binary data 219 of the check data format 215, and then the data collating submodule 302 presses the check data format on this basis. 215 adds time information 218 and then time information 218 The original binary data 219 is merged into the data body 216, and a CRC checksum operation is performed to generate a CRC check operation result CRC217, and the CRC 217 and the data body 216 are combined to generate a check data format 215. The data encryption sub-module 303 encrypts the data of the check data format 215 into the encrypted binary data 221 of the encrypted data format 220 (hereinafter referred to as data D') using the private key D, and then the data splitting module 304 assigns a packet number 226. And the data D' generates a random number according to the clock, and ensures that the size of each split binary data 224 is not less than 20 bytes, and then divides the data block according to the generated random number to obtain A plurality of pieces of split binary data 224 are added to the divided binary data 224 to add a split header 223 and a split trailer 225 (where the split header 223 includes a header identifier 0xBF, a packet number 226, a block number 227, and a block number 228 The split packet tail 225 is identified as 0xEF) to generate a corresponding number of packets of the packet data format 222. The divided data packets of the generated packetized data format 222 are then transmitted to the data security processing module 102 in sequence through a serial port or USB.

Step 6: The data security processing module 102 receives the transmitted communication data in the data format of the packetized data format 222, and the merge submodule 307 in the data security processing module 103 analyzes the first packetized data format 222. The block number 227 and the block number 228 (where the block number 227 is the number of blocks to be packetized, and the block number 228 is the block position index number of the packetized data) is received by the same packet of the same packetized data format 222, and the same packet is used. The split binary data 224 in the unpacked data format 222 of the number 226 merges the data to obtain data of the encrypted data format 220 (hereinafter referred to as data D'), and the data decryption sub-module 308 decrypts the data D' using the public key C. Checking the data D of the data format 215, the data check sub-module 309 performs a CRC checksum operation on the data body 216 in the data D, and then checks with the CRC 217 in the check data format 215, and if the results do not match, Proactively refuse to send the original binary data 219 in the check data format 215 to the ATMC upper layer software 101. If the result of the check is met, the proofreading data is reasonable (refer to the security check operation). Step), if it is irrational, the original binary data 219 in the check data format 215 is rejected from being sent to the ATMC upper layer software 101, and if so, the original binary data 219 in the check data format 215 is sent to the ATMC upper layer software. 101.

Step 7: After receiving the binary data D, the ATMC upper layer software 101 can obtain the data returned by the hardware device. This process is a one-time transfer process.

Security check operation steps:

Step 1: Generate a key of the data security processing module 103 according to the steps of the key generation process.

Step 2: Burn the data security processing module 103 main control program into the module.

Step 3: After the data security processing module 103 is powered on for the first time, the data security processing module 103 enters the data sampling mode, and the time corresponding to the command combination and the command combination of the module is automatically recorded.

Step 4: After the sampling is completed, the power of the data security processing module 103 is turned off, and when the power is turned on again, the normal working mode is entered. In this mode, the command data to and from is first checked, and then the rationality of the command combination and the reasonableness of the time are verified (where the command combination of time should not exceed 20% of the error).

Step 5: If a reasonableness exception occurs, the data security processing module 103 terminates the service and records its behavior time and data content for later investigation.

The above describes a secure communication method for the self-service terminal device hardware. A secure communication device for the self-service terminal device hardware is described in detail below. Referring to FIG. 5, the security of the self-service terminal device hardware in the embodiment of the present invention is described. An embodiment of a communication device includes:

Local A5 and opposite end B5;

The local A5 includes:

The original data obtaining module 501 is configured to acquire original data that needs to be sent;

The encryption module 502 is configured to encrypt the original data to obtain encrypted data.

The random segmentation module 503 is configured to generate a random number, and divide the encrypted data into data blocks according to the random number;

a data packet module 504, configured to package the data blocks one by one to generate a corresponding data packet;

a transmission module 505, configured to transmit the data packet to the opposite end B5;

The opposite end B5 includes:

The parsing and merging module 506 is configured to parse and merge the data packet to obtain the encrypted data.

The decryption module 507 is configured to decrypt the encrypted data to obtain the original data.

In this embodiment, first, the original data obtaining module 501 acquires the original data that needs to be sent; the encryption module 502 encrypts the original data to obtain the encrypted data; then, the random segmentation module 503 generates a random number, and encrypts according to the random number. The data is divided into data blocks; the data packet module 504 packs the data blocks one by one to generate corresponding data packets; then, the transmission module 505 transmits the data packets to the pair. End B5; after the peer B5 receives the data packet, the parsing and merging module 506 parses and merges the data packet to obtain the encrypted data. Finally, the decrypting module 507 decrypts the encrypted data to obtain the original data. In this embodiment, the secure communication device of the self-service terminal device hardware is implemented in the local host of the self-service terminal, does not require network verification, and improves the security of the communication through random packetization, and prevents the criminals from simulating the hardware and the host through the software. Communication for financial crimes.

For the sake of understanding, a secure communication device for the self-service terminal device hardware in the embodiment of the present invention is described in detail below. Referring to FIG. 6, another embodiment of the secure communication device for the self-service terminal device hardware in the embodiment of the present invention includes :

Local A6 and opposite end B6;

The local A6 includes:

The original data obtaining module 601 is configured to obtain original data that needs to be sent;

The encryption module 602 is configured to encrypt the original data to obtain encrypted data.

The random segmentation module 603 is configured to generate a random number, and divide the encrypted data into data blocks according to the random number;

a data packet module 604, configured to package the data blocks one by one to generate a corresponding data packet;

The transmission module 605 is configured to transmit the data packet to the opposite end B6;

The opposite end B6 includes:

The parsing and merging module 606 is configured to parse and merge the data packet to obtain the encrypted data.

The decryption module 607 is configured to decrypt the encrypted data to obtain the original data.

The random slicing module 603 in this embodiment may include:

The random number generating unit 6031 is configured to generate a random number within a preset range;

The data segmentation unit 6032 is configured to divide the encrypted data into the random number of data blocks.

The secure communication device in this embodiment may further include:

a key generation module 608, configured to generate a pair of asymmetric keys in advance, including a public key and a private key;

The public key importing module 609 is configured to import the public key to the opposite end B6 in advance;

The encryption module 602 in this embodiment may include:

a first merging unit 6021, configured to combine the original data and the corresponding time information into a data body;

The first check operation unit 6022 is configured to perform a check operation on the data body to obtain a first operation. result;

a second merging unit 6023, configured to combine the data body and the first operation result to obtain a check data body;

The encryption unit 6024 is configured to encrypt the verification data volume to obtain encrypted data.

The decryption module 607 includes:

The decrypting unit 6071 is configured to decrypt the encrypted data to obtain a check data body to be tested;

The second check operation unit 6072 is configured to acquire a data body in the test data body to be tested, and perform a check operation on the acquired data body to obtain a second operation result;

a checking unit 6073, configured to check whether the second operation result is consistent with the first operation result in the test data body to be tested;

The data obtaining unit 6074 is configured to acquire the original data in the data body when the verification result of the verification unit 6073 is YES.

The peer B6 in this embodiment further includes:

a plausibility check module 610, configured to perform data plausibility check on the original data;

The operation module 611 is configured to perform operations according to the original data when the check of the plausibility check module 610 passes.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus, and method may be implemented in other manners. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. You can choose some or all of them according to actual needs. The unit is to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the embodiments are modified, or the equivalents of the technical features are replaced by the equivalents of the technical solutions of the embodiments of the present invention.

Claims

A secure communication method for a self-service terminal device hardware, which is applied to communication between a host of the self-service terminal and device hardware, and is characterized in that:

The local end obtains the original data that needs to be sent;

The local end encrypts the original data to obtain encrypted data;

The local end generates a random number, and divides the encrypted data into data blocks according to the random number;

The local end packs the data blocks one by one to generate corresponding data packets;

The local end transmits the data packet to the opposite end, so that the opposite end parses and merges the data packet to obtain the encrypted data, and then the peer end decrypts the encrypted data to obtain the original data.
The secure communication method according to claim 1, wherein the local end generates a random number, and splitting the encrypted data into data blocks according to the random number includes:

The local end generates a random number within a preset range;

The local end divides the encrypted data into the random number of data blocks.
The secure communication method according to claim 1, wherein the secure communication method further comprises: the local end pre-generating a pair of asymmetric keys, including a public key and a private key, and prepending the public key Imported to the opposite end;

The private key is used to encrypt the original data, and the public key is used to decrypt the encrypted data.
The secure communication method according to claim 1, wherein the local end encrypts the original data to obtain encrypted data, and specifically includes:

The local end combines the original data and corresponding time information into a data body;

The local end performs a check operation on the data body to obtain a first operation result;

The local end combines the data body and the first operation result to obtain a verification data body;

The local end encrypts the verification data body to obtain encrypted data;

The peer end decrypts the encrypted data to obtain the original data, and specifically includes:

Decrypting the encrypted data by the peer end to obtain a check data body to be tested;

Obtaining, by the peer end, the data body in the data body to be tested, and performing a check operation on the obtained data body to obtain a second operation result;

The peer end verifies the second operation result and the first operation result in the test data body to be tested If they match, if they match, the original data in the data body is obtained.
The secure communication method according to claim 4, wherein the peer further comprises: after obtaining the original data:

The peer end performs data plausibility check on the original data, and if the check passes, the peer end operates according to the original data.
A secure communication device for the self-service terminal device hardware is applied to the communication between the host and the device hardware of the self-service terminal, and is characterized in that it includes a local end and a peer end, and the local end includes:

a raw data obtaining module, configured to obtain original data that needs to be sent;

An encryption module, configured to encrypt the original data to obtain encrypted data;

a random segmentation module, configured to generate a random number, and divide the encrypted data into data blocks according to the random number;

a data packet module, configured to package the data blocks one by one to generate a corresponding data packet;

a transmission module, configured to transmit the data packet to the peer end;

The opposite end includes:

Parsing a merge module, configured to parse and merge the data packet to obtain the encrypted data;

And a decryption module, configured to decrypt the encrypted data to obtain the original data.
The secure communication device according to claim 6, wherein the random segmentation module comprises:

a random number generating unit for generating a random number within a preset range;

And a data segmentation unit, configured to divide the encrypted data into the random number of data blocks.
The secure communication device of claim 6, wherein the secure communication device further comprises:

a key generation module, configured to generate a pair of asymmetric keys in advance, including a public key and a private key;

a public key importing module, configured to import the public key into the peer end in advance;

The private key is used to encrypt the original data, and the public key is used to decrypt the encrypted data.
The secure communication device according to claim 6, wherein the encryption module comprises:

a first merging unit, configured to combine the original data and corresponding time information into a data body;

a first check operation unit, configured to perform a check operation on the data body to obtain a first operation result;

a second merging unit, configured to combine the data body and the first operation result to obtain a check data body;

An encryption unit, configured to encrypt the verification data body to obtain encrypted data;

The decryption module includes:

a decryption unit, configured to decrypt the encrypted data to obtain a check data body to be tested;

a second check operation unit, configured to acquire a data body in the test data body to be tested, and perform a check operation on the acquired data body to obtain a second operation result;

a checking unit, configured to check whether the second operation result is consistent with the first operation result in the check data body to be tested;

a data obtaining unit, configured to acquire the original data in the data body when a check result of the check unit is YES.
The secure communication device according to claim 9, wherein the opposite end further comprises:

a plausibility checking module, configured to perform data plausibility check on the original data;

And an operation module, configured to perform operations according to the original data when the check of the plausibility check module passes.