WO2017211231A1 - 基于ccks的cpu卡的充值方法 - Google Patents

基于ccks的cpu卡的充值方法 Download PDF

Info

Publication number
WO2017211231A1
WO2017211231A1 PCT/CN2017/086981 CN2017086981W WO2017211231A1 WO 2017211231 A1 WO2017211231 A1 WO 2017211231A1 CN 2017086981 W CN2017086981 W CN 2017086981W WO 2017211231 A1 WO2017211231 A1 WO 2017211231A1
Authority
WO
WIPO (PCT)
Prior art keywords
cpu card
host
transaction
verification
message
Prior art date
Application number
PCT/CN2017/086981
Other languages
English (en)
French (fr)
Inventor
聂明
Original Assignee
中城智慧科技有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 中城智慧科技有限公司 filed Critical 中城智慧科技有限公司
Publication of WO2017211231A1 publication Critical patent/WO2017211231A1/zh

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/34—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using cards, e.g. integrated circuit [IC] cards or magnetic cards
    • G06Q20/349—Rechargeable cards
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/30—Payment architectures, schemes or protocols characterised by the use of specific devices or networks
    • G06Q20/36—Payment architectures, schemes or protocols characterised by the use of specific devices or networks using electronic wallets or electronic money safes
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3825—Use of electronic signatures
    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06Q—INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR
    • G06Q20/00—Payment architectures, schemes or protocols
    • G06Q20/38—Payment protocols; Details thereof
    • G06Q20/382—Payment protocols; Details thereof insuring higher security of transaction
    • G06Q20/3829—Payment protocols; Details thereof insuring higher security of transaction involving key management

Definitions

  • the present invention relates to a method for recharging a card, and more particularly to a method for recharging a CPU card based on CCKS (Combined Credit Key System).
  • CCKS Combin Credit Key System
  • the general bank IC card has been used since the 1990s. With the rapid development of economy and society, it has become the most commonly used non-cash payment tool for residents, and has played a positive role in the economy, society and people's production and life.
  • E-wallet is a kind of payment tool commonly used in shopping for e-commerce activities. Just like the wallet that you carry with you in your life, you can make small daily fast payment.
  • the recharge process is to recharge the bank account's money into the e-wallet. Consumers are exempted from the risk of carrying cash to change, lost, counterfeit, and robbed. In supermarkets, department stores, pharmacies, convenience stores, fast food chains and other retail locations and gas stations. Fast payment in public service areas such as parking lots and tourist attractions is convenient and fast.
  • the bank IC card is a card form made of microelectronic chips conforming to the national ISO7816 standard. It has a standardized operation format, but it also has many limitations, such as limited storage space, no arithmetic processing capability, no offline processing, and non-offline processing. Contact processing, magnetic stripe information is easy to copy, low security, durability and flexibility.
  • the CPU card has a central processing unit (CPU), a random access memory (RAM), a program memory (ROM), a data memory (EEPROM), and an on-chip operating system (COS), and is called a microcomputer.
  • the CPU card has the features of large user space, fast reading, high security, and support for one card.
  • the CPU card is suitable for the micropayment industry.
  • CPU cards Compared with bank IC cards, CPU cards have the following advantages:
  • High security using a central processing unit (CPU) chip, high technical content, can effectively prevent fake card transactions.
  • the funds in the card are stored in commercial banks, which are easy to supervise and have strict risk control mechanisms.
  • the information has strong reliability, anti-magnetic, anti-static, anti-mechanical damage and chemical damage resistance.
  • the information has a long storage period and the number of reading and writing is more than tens of thousands of times.
  • the storage space is large, supporting one card and multiple applications, which is dozens of times more than the storage capacity of the IC card.
  • the present invention provides a CCKS-based CPU card for recharging to improve the recharge security. method.
  • a technical solution for achieving the object of the present invention is: a method for recharging a CPU card based on CCKS, the method comprising the following steps:
  • the terminal initiates a command to start the refill task
  • the CPU card After receiving the command of recharging task, the CPU card checks whether the recharging task is supported. If not, the task is terminated; if supported, the first digital signature verification code C1 is generated;
  • the CPU card uses the first digital signature verification code C1 and the private key of the CPU card to sign the first message information to obtain the first message verification signature code S1, and the first message verification signature code S1 is used by the host to verify the legality of the recharge task and the CPU card, and then the CPU card sends the first digital signature verification code C1, the first message verification signature code S1, and the CPU card recharge information to the terminal;
  • the terminal verifies the received information. If the verification is incorrect, the terminal terminates the recharging task; if the verification is correct, the terminal sends the received information to the host;
  • the host After receiving the information, the host verifies the legality of the refill task and the CPU card.
  • the host calculates the CPU card ID and the corresponding public key from the recharge information of the received CPU card, and the host uses the first digital signature verification code received.
  • the public key of C1 and the CPU card checks the first message verification signature code S1. If the verification fails, the feedback execution error occurs.
  • the recharge task is not accepted and the terminal is notified, the transaction fails; if the verification is successful, The host deducts the amount of recharge from the bank account bound to the CPU card;
  • the host sends a refill task receiving message to the terminal, where the recharging task receiving message includes a transaction date, a transaction time, and a second message verification signature code S2, and the second message verification signature code S2 is used.
  • the CPU card checks the validity of the host, and the host uses the first digital signature verification code C1 and the host private key to sign the second message information to obtain the second message verification signature code S2;
  • the terminal after receiving the recharge task received by the host, the terminal sends a command to update the e-wallet balance on the CPU card to the CPU card;
  • the CPU card After receiving the command to update the e-wallet balance on the CPU card, the CPU card checks the validity of the host, the CPU card calculates the host public key, and the CPU card uses the host public key and the first digital signature verification code C1. The second message verification signature code S2 is checked. If the verification fails, the terminal is notified to end the refill task; if the verification is successful, the CPU card adds the recharged amount to the e-wallet balance, and the CPU card generates the transaction detail update message.
  • the transaction detail update message includes a third message verification signature code S3, and the third message verification signature code S3 is determined by the second digital signature verification code C2 and the private key of the CPU card. Digitally signing transaction detail update data;
  • the terminal receives the transaction detail update message sent by the CPU card, sends the transaction detail update message to the host, and the host transaction detail update message is verified, and the host uses the second digital signature verification code C2 and calculates the CPU card.
  • the public key checks the third message verification signature code S3, and the verification result is saved on the host.
  • the command of the refill task includes fields: a key index number, a transaction amount, and a terminal number.
  • the first digital signature verification code C1 includes fields: an electronic wallet online transaction number, a terminal number, a key index number, a key version number, and a pseudo random number R1, and the pseudo random number R1 is The CPU card is randomly generated.
  • the refill information of the CPU card includes fields: balance, online transaction number, key version number, and algorithm identification.
  • the acquisition of the public key of the CPU card includes the following steps:
  • the public key of the CPU card is obtained.
  • the second message information includes fields: transaction amount, transaction type identifier, terminal number, transaction date, and transaction time.
  • the acquisition of the host public key includes the following steps:
  • the second digital signature verification code C2 includes fields: an electronic wallet online transaction number, a terminal number, a key index number, a key version number, and a pseudo random number R2, and the pseudo random number R2 is The CPU card is randomly generated.
  • the transaction detail update data includes fields: an electronic wallet online transaction number, a transaction amount, a transaction type identifier, a terminal number, a transaction date, and a transaction time.
  • the invention has positive effects: 1) The two sides of the transaction in the recharging process of the invention adopt two signatures and authentication methods to ensure the privacy and security of data during the transaction process, even if the information is intercepted during the transaction, the interceptor It is also impossible to crack the contents of the message;
  • Figure 1 is an overall flow chart of the present invention
  • 3 is a processing flow of a host sending a recharge task to a terminal to receive a message
  • FIG. 4 is a flow chart of the CPU card sending a transaction detail update message to the terminal.
  • the present invention discloses a method for recharging a CPU card based on CCKS, and the method includes the following steps:
  • the terminal initiates a command to start the refill task
  • the CPU card After receiving the command of recharging task, the CPU card checks whether the recharging task is supported. If not, the task is terminated; if supported, the first digital signature verification code C1 is generated;
  • the CPU card uses the first digital signature verification code C1 and the private key of the CPU card to sign the first message information to obtain the first message verification signature code S1, and the first message verification signature code S1 is used for Host legality for recharge tasks and CPU cards Performing verification, and then the CPU card sends the first digital signature verification code C1, the first message verification signature code S1, and the CPU card recharge information to the terminal;
  • the terminal verifies the received information. If the verification is incorrect, the terminal terminates the recharging task; if the verification is correct, the terminal sends the received information to the host;
  • the host After receiving the information, the host verifies the legality of the recharge task and the CPU card, and the host calculates the ID of the CPU card and the corresponding public key from the recharge information of the received CPU card, and the host uses the first digital signature verification received.
  • the code C1 and the public key of the CPU card check the first message verification signature code S1. If the verification fails, the feedback execution error, the recharge task is not accepted and the terminal is notified, the transaction fails; if the verification is successful The host deducts the amount of the recharge from the bank account bound to the CPU card;
  • the host sends a recharge task receiving message to the terminal, and the refill task receives the message including the transaction date, the transaction time, and the second message verification signature code S2, and the second message verification signature code S2 is used by the CPU card to perform the host card.
  • the host uses the first digital signature verification code C1 and the host private key to sign the second message information to obtain the second message verification signature code S2;
  • the terminal after receiving the recharge task received by the host, the terminal sends a command to update the e-wallet balance on the CPU card to the CPU card;
  • the CPU card After receiving the command to update the e-wallet balance on the CPU card, the CPU card checks the validity of the host, the CPU card calculates the host public key, and the CPU card uses the host public key and the first digital signature verification code C1. The second message verification signature code S2 is checked. If the verification fails, the terminal is notified to end the refill task; if the verification is successful, the CPU card adds the recharged amount to the e-wallet balance, and the CPU card generates the transaction detail update message.
  • the transaction detail update message includes a third message verification signature code S3, and the third message verification signature code S3 is determined by the second digital signature verification code C2 and the CPU card private key pair transaction details. Update the data for digital signatures;
  • the terminal receives the transaction detail update message sent by the CPU card, sends the transaction detail update message to the host, and the host transaction detail update message is verified, and the host uses the second digital signature verification code C2 and calculates the CPU card.
  • the public key checks the third message verification signature code S3, and the verification result is saved on the host.
  • the command to recharge the task contains fields: key index number, transaction amount, and terminal number.
  • the first digital signature verification code C1 includes fields: an electronic wallet online transaction number, a terminal number, a key index number, a key version number, and a pseudo random number R1, and the pseudo random number R1 is randomly generated by the CPU card.
  • the recharge information of the CPU card includes fields: balance, online transaction number, key version number, and algorithm identification.
  • the acquisition of the public key of the CPU card includes the following steps:
  • the second digital signature verification code C2 includes fields: an electronic wallet online transaction number, a terminal number, a key index number, a key version number, and a pseudo random number R2, which are randomly generated by the CPU card.
  • Transaction detail update data contains fields: e-wallet online transaction number, transaction amount, transaction type identifier, terminal editing Number, transaction date and trading time.
  • the CPU card obtains the private key of the CPU card by using the key index number and the key version number of the receiving terminal; the first message information can be defined by the user.

Landscapes

  • Engineering & Computer Science (AREA)
  • Business, Economics & Management (AREA)
  • Accounting & Taxation (AREA)
  • Physics & Mathematics (AREA)
  • Strategic Management (AREA)
  • General Business, Economics & Management (AREA)
  • General Physics & Mathematics (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Finance (AREA)
  • Microelectronics & Electronic Packaging (AREA)
  • Computer Security & Cryptography (AREA)
  • Financial Or Insurance-Related Operations Such As Payment And Settlement (AREA)

Abstract

一种卡的充值方法，尤其涉及基于CCKS的CPU卡的充值方法，该方法充值过程中的交易双方采用两次签名、认证的方式，保证了交易过程中数据的私密性和安全性，即使交易过程中信息被拦截，拦截者也无法破解出报文的内容；该方法通信的双方不再持有统一密钥，而是根据标识ID和相应的子域标识，计算出对应的验证公钥，只有得到这个公钥，才能对对方进行验证，安全性高。

Description

基于CCKS的CPU卡的充值方法 技术领域
本发明涉及卡的充值方法，尤其涉及一种基于CCKS(CombinedCreditKeySystem)的CPU卡的充值方法。
背景技术
一般的银行IC卡，自上世纪九十年代开始使用，随着经济和社会的快速发展，已成为居民最常用的非现金支付工具，对于经济社会和人民生产生活发挥了积极的作用。
随着电子商务的爆发性传播与兴起，电子钱包的概念也慢慢融入居民的生活。电子钱包是电子商务活动中购物常用的一种支付工具，就像生活中随身携带的钱包一样，能够进行日常小额快速支付。
充值过程是将银行户头的钱充值进电子钱包中，消费者就免除携带现金找零、遗失、伪钞、被抢的风险，在超市、百货、药房、便利店、快餐连锁等零售场所和加油站、停车场、旅游景点等公共服务领域进行快速支付，方便快捷。
银行IC卡是以符合国家ISO7816标准的微电子芯片做成的卡片形式，具有标准化的操作格式，但是也有很多的局限性，例如：存储空间有限、无运算处理能力、不支持脱机处理、非接触处理、磁条信息容易被复制、安全性较低、耐用性和灵活性较差等。
CPU卡内具有中央处理器(CPU)、随机存储器(RAM)、程序存储器(ROM)、数据存储器(EEPROM)以及片内操作系统(COS)，从而被人称之为微型电脑。CPU卡拥有用户空间大、读取随度快、安全性高、支持一卡多用的功能特点。CPU卡适用于小额支付行业。
与银行IC卡相比，CPU卡具有以下优势：
覆盖面宽，能广泛应用于金融、电信、交通、商贸、社保、税收、医疗、保险等方面，几乎涵盖所有的公共事业领域。
使用方便，采用统一标准和先进技术，可以实现联机(远程)、脱机(现场)交易，插卡、非接触(快速)支付，还可用于移动支付或其他支付方式。
安全性高，采用中央处理器(CPU)芯片，技术含量高，能有效防范伪卡交易。卡内资金存放在商业银行，便于监管，风险控制机制较严密。
可靠性强，具有防磁、防静电、防机械损坏和防化学破坏等能力，信息保存年限长，读写次数在数万次以上。
存储空间大，支持一卡多应用，是IC卡存储容量的几十倍以上。
但是，在电子钱包充值过程中，存在着极大的安全隐患，CPU卡的ID容易被伪造，在卡与主机通信过程中信息容易被盗取，造成客户与银行的利益损失。
发明内容
为了克服现有技术的缺陷，本发明提供一种提高充值安全性的基于CCKS的CPU卡的充值 方法。
实现本发明目的的技术方案是：基于CCKS的CPU卡的充值方法，该方法包括如下步骤：
1)终端发起启动充值任务的命令；
2)CPU卡收到充值任务的命令后，CPU卡检查是否支持该充值任务，如果不支持，终止该任务；如果支持，生成第一次数字签名验证码C1；
3)CPU卡用第一次数字签名验证码C1和CPU卡的私钥对第一次报文信息进行签名得到第一次报文验证签名码S1，所述的第一次报文验证签名码S1用于主机对充值任务和CPU卡的合法性进行验证，然后CPU卡将第一次数字签名验证码C1、第一次报文验证签名码S1和CPU卡的充值信息发送至终端；
4)终端对接收的信息进行验证，如果验证错误，则终端终止本次充值任务；如果验证正确，终端将接收到的信息发送至主机；
5)主机接收信息后对充值任务和CPU卡的合法性进行验证，主机由接收的CPU卡的充值信息计算得到CPU卡ID和对应的公钥，主机用收到的第一次数字签名验证码C1和CPU卡的公钥对第一次报文验证签名码S1进行验签，若验证失败，则反馈执行错误，不接受本次充值任务并通知终端，此次交易失败；若验签成功，主机从CPU卡绑定的银行账户中扣减充值的金额；
6)主机向终端发送充值任务接收报文，所述的充值任务接收报文包括交易日期、交易时间和第二次报文验证签名码S2，所述的第二次报文验证签名码S2用于CPU卡对主机进行合法性检查，主机用第一次数字签名验证码C1和主机私钥对第二次报文信息进行签名得到第二次报文验证签名码S2；
7)终端收到主机发送来的充值任务接收报文后，向CPU卡发出更新CPU卡上电子钱包余额的命令；
8)CPU卡接收到更新CPU卡上电子钱包余额的命令后，CPU卡对主机进行合法性检查，CPU卡通过计算得到主机公钥，CPU卡用主机公钥和第一次数字签名验证码C1对第二次报文验证签名码S2进行验签，若验证失败，通知终端，结束充值任务；若验证成功，CPU卡将充值的金额加在电子钱包余额上，CPU卡生成交易明细更新报文发送至终端，所述的交易明细更新报文包含第三次报文验证签名码S3，所述的第三次报文验证签名码S3由第二次数字签名验证码C2和CPU卡的私钥对交易明细更新数据进行数字签名得到；
9)终端收到CPU卡发来的交易明细更新报文，将交易明细更新报文发送给主机，主机交易明细更新报文进行验证，主机使用第二次数字签名验证码C2和计算得到CPU卡的公钥对第三次报文验证签名码S3进行验签，验签结果保存在主机上。
作为本发明的优化方案，充值任务的命令包含字段：密钥索引号、交易金额和终端编号。
作为本发明的优化方案，第一次数字签名验证码C1包含字段：电子钱包联机交易号、终端编号、密钥索引号、密钥版本号和伪随机数R1，所述的伪随机数R1由CPU卡随机产生。
作为本发明的优化方案，CPU卡的充值信息包含字段：余额、联机交易号、密钥版本号和算法标识。
作为本发明的优化方案，CPU卡的公钥的获取包括如下步骤：
a)计算CPU卡的ID；
b)根据CPU卡的ID和子域标识，得到CPU卡的公钥。
作为本发明的优化方案，第二次报文信息包含字段：交易金额、交易类型标识、终端编号、交易日期和交易时间。
作为本发明的优化方案，主机公钥的获取包括如下步骤：
a)计算主机的ID；
b)根据主机的ID和子域标识，得到主机的公钥。
作为本发明的优化方案，第二次数字签名验证码C2包含字段：电子钱包联机交易号、终端编号、密钥索引号、密钥版本号和伪随机数R2，所述的伪随机数R2由CPU卡随机产生。
作为本发明的优化方案，交易明细更新数据包含字段：电子钱包联机交易号、交易金额、交易类型标识、终端编号、交易日期和交易时间。
本发明具有积极的效果：1)本发明在充值过程中的交易双方采用两次签名、认证的方式，保证了交易过程中数据的私密性和安全性，即使交易过程中信息被拦截，拦截者也无法破解出报文的内容；
2)本发明通信的双方不再持有统一密钥，而是根据标识ID和相应的子域标识，计算出对应的验证公钥，只有得到这个公钥，才能对对方进行验证，安全性高。
附图说明
为了使本发明的内容更容易被清楚地理解，下面根据具体实施例并结合附图，对本发明作进一步详细的说明：
图1为本发明的整体流程图；
图2为CPU卡收到充值任务的命令的处理流程；
图3为主机向终端发送充值任务接收报文的处理流程；
图4为CPU卡向终端发送交易明细更新报文流程。
具体实施方式
如图1-4所示，本发明公开了基于CCKS的CPU卡的充值方法，该方法包括如下步骤：
1)终端发起启动充值任务的命令；
2)CPU卡收到充值任务的命令后，CPU卡检查是否支持该充值任务，如果不支持，终止该任务；如果支持，生成第一次数字签名验证码C1；
3)CPU卡用第一次数字签名验证码C1和CPU卡的私钥对第一次报文信息进行签名得到第一次报文验证签名码S1，第一次报文验证签名码S1用于主机对充值任务和CPU卡的合法性 进行验证，然后CPU卡将第一次数字签名验证码C1、第一次报文验证签名码S1和CPU卡的充值信息发送至终端；
4)终端对接收的信息进行验证，如果验证错误，则终端终止本次充值任务；如果验证正确，终端将接收到的信息发送至主机；
5)主机接收信息后对充值任务和CPU卡的合法性进行验证，主机由接收的CPU卡的充值信息计算得到CPU卡的ID和对应的公钥，主机用收到的第一次数字签名验证码C1和CPU卡的公钥对第一次报文验证签名码S1进行验签，若验证失败，则反馈执行错误，不接受本次充值任务并通知终端，此次交易失败；若验签成功，主机从CPU卡绑定的银行账户中扣减充值的金额；
6)主机向终端发送充值任务接收报文，充值任务接收报文包括交易日期、交易时间和第二次报文验证签名码S2，第二次报文验证签名码S2用于CPU卡对主机进行合法性检查，主机用第一次数字签名验证码C1和主机私钥对第二次报文信息进行签名得到第二次报文验证签名码S2；
7)终端收到主机发送来的充值任务接收报文后，向CPU卡发出更新CPU卡上电子钱包余额的命令；
8)CPU卡接收到更新CPU卡上电子钱包余额的命令后，CPU卡对主机进行合法性检查，CPU卡通过计算得到主机公钥，CPU卡用主机公钥和第一次数字签名验证码C1对第二次报文验证签名码S2进行验签，若验证失败，通知终端，结束充值任务；若验证成功，CPU卡将充值的金额加在电子钱包余额上，CPU卡生成交易明细更新报文发送至终端，所述的交易明细更新报文包含第三次报文验证签名码S3，第三次报文验证签名码S3由第二次数字签名验证码C2和CPU卡的私钥对交易明细更新数据进行数字签名得到；
9)终端收到CPU卡发来的交易明细更新报文，将交易明细更新报文发送给主机，主机交易明细更新报文进行验证，主机使用第二次数字签名验证码C2和计算得到CPU卡的公钥对第三次报文验证签名码S3进行验签，验签结果保存在主机上。
充值任务的命令包含字段：密钥索引号、交易金额和终端编号。
其中，第一次数字签名验证码C1包含字段：电子钱包联机交易号、终端编号、密钥索引号、密钥版本号和伪随机数R1，伪随机数R1由CPU卡随机产生。
CPU卡的充值信息包含字段：余额、联机交易号、密钥版本号和算法标识。
CPU卡的公钥的获取包括如下步骤：
a)计算主机的ID；
b)根据主机的ID和子域标识，得到主机的公钥。
第二次数字签名验证码C2包含字段：电子钱包联机交易号、终端编号、密钥索引号、密钥版本号和伪随机数R2，伪随机数R2由CPU卡随机产生。
交易明细更新数据包含字段：电子钱包联机交易号、交易金额、交易类型标识、终端编 号、交易日期和交易时间。
其中，CPU卡利用收到终端的密钥索引号、密钥版本号得到CPU卡的私钥；第一次报文信息可以由用户自己定义。
以上所述的具体实施例，对本发明的目的、技术方案和有益效果进行了进一步详细说明，所应理解的是，以上所述仅为本发明的具体实施例而已，并不用于限制本发明，凡在本发明的精神和原则之内，所做的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (9)

  1. 基于CCKS的CPU卡的充值方法，其特征在于，该方法包括如下步骤：
    1)终端发起启动充值任务的命令；
    2)CPU卡收到充值任务的命令后，CPU卡检查是否支持该充值任务，如果不支持，终止该任务；如果支持，生成第一次数字签名验证码C1；
    3)CPU卡用第一次数字签名验证码C1和CPU卡的私钥对第一次报文信息进行签名得到第一次报文验证签名码S1，所述的第一次报文验证签名码S1用于主机对充值任务和CPU卡的合法性进行验证，然后CPU卡将第一次数字签名验证码C1、第一次报文验证签名码S1和CPU卡的充值信息发送至终端；
    4)终端对接收的信息进行验证，如果验证错误，则终端终止本次充值任务；如果验证正确，终端将接收到的信息发送至主机；
    5)主机接收信息后对充值任务和CPU卡的合法性进行验证，主机由接收的CPU卡的充值信息计算得到CPU卡ID和对应的公钥，主机用收到的第一次数字签名验证码C1和CPU卡的公钥对第一次报文验证签名码S1进行验签，若验证失败，则反馈执行错误，不接受本次充值任务并通知终端，此次交易失败；若验签成功，主机从CPU卡绑定的银行账户中扣减充值的金额；
    6)主机向终端发送充值任务接收报文，所述的充值任务接收报文包括交易日期、交易时间和第二次报文验证签名码S2，所述的第二次报文验证签名码S2用于CPU卡对主机进行合法性检查，主机用第一次数字签名验证码C1和主机私钥对第二次报文信息进行签名得到第二次报文验证签名码S2；
    7)终端收到主机发送来的充值任务接收报文后，向CPU卡发出更新CPU卡上电子钱包余额的命令；
    8)CPU卡接收到更新CPU卡上电子钱包余额的命令后，CPU卡对主机进行合法性检查，CPU卡通过计算得到主机公钥，CPU卡用主机公钥和第一次数字签名验证码C1对第二次报文验证签名码S2进行验签，若验证失败，通知终端，结束充值任务；若验证成功，CPU卡将充值的金额加在电子钱包余额上，CPU卡生成交易明细更新报文发送至终端，所述的交易明细更新报文包含第三次报文验证签名码S3，所述的第三次报文验证签名码S3由第二次数字签名验证码C2和CPU卡的私钥对交易明细更新数据进行数字签名得到；
    9)终端收到CPU卡发来的交易明细更新报文，将交易明细更新报文发送给主机，主机交易明细更新报文进行验证，主机使用第二次数字签名验证码C2和计算得到CPU卡的公钥对第三次报文验证签名码S3进行验签，验签结果保存在主机上。
  2. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：所述充值任务 的命令包含字段：密钥索引号、交易金额和终端编号。
  3. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：所述的第一次数字签名验证码C1包含字段：电子钱包联机交易号、终端编号、密钥索引号、密钥版本号和伪随机数R1，所述的伪随机数R1由CPU卡随机产生。
  4. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：所述CPU卡的充值信息包含字段：余额、联机交易号、密钥版本号和算法标识。
  5. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：CPU卡的公钥的获取包括如下步骤：
    a)计算CPU卡的ID；
    b)根据CPU卡的ID和子域标识，得到CPU卡的公钥。
  6. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：所述第二次报文信息包含字段：交易金额、交易类型标识、终端编号、交易日期和交易时间。
  7. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：主机公钥的获取包括如下步骤：
    a)计算主机的ID；
    b)根据主机的ID和子域标识，得到主机的公钥。
  8. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：所述第二次数字签名验证码C2包含字段：电子钱包联机交易号、终端编号、密钥索引号、密钥版本号和伪随机数R2，所述的伪随机数R2由CPU卡随机产生。
  9. 根据权利要求1所述的基于CCKS的CPU卡的充值方法，其特征在于：交易明细更新数据包含字段：电子钱包联机交易号、交易金额、交易类型标识、终端编号、交易日期和交易时间。
PCT/CN2017/086981 2016-06-06 2017-06-02 基于ccks的cpu卡的充值方法 WO2017211231A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610393195.XA CN106096959A (zh) 2016-06-06 2016-06-06 基于ccks的cpu卡的充值方法
CN201610393195.X 2016-06-06

Publications (1)

Publication Number Publication Date
WO2017211231A1 true WO2017211231A1 (zh) 2017-12-14

Family

ID=57448302

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2017/086981 WO2017211231A1 (zh) 2016-06-06 2017-06-02 基于ccks的cpu卡的充值方法

Country Status (2)

Country Link
CN (1) CN106096959A (zh)
WO (1) WO2017211231A1 (zh)

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113748642A (zh) * 2019-02-26 2021-12-03 上海亚融信息技术有限公司 数字签名终端和安全通信方法

Families Citing this family (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106096959A (zh) * 2016-06-06 2016-11-09 中城智慧科技有限公司 基于ccks的cpu卡的充值方法
CN107508842A (zh) * 2017-09-30 2017-12-22 中城智慧科技有限公司 一种基于ccks的智能电表控制模块和方法
CN110766383B (zh) * 2018-07-27 2024-04-09 中城智慧科技有限公司 一种支持匿名或实名的离线交易的数字钱包及使用方法

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2010043107A1 (zh) * 2008-10-16 2010-04-22 中国银联股份有限公司 一种电子现金的转账方法
CN101799954A (zh) * 2009-11-20 2010-08-11 北京飞天诚信科技有限公司 一种对双电子钱包进行圈存的方法
CN103544596A (zh) * 2013-11-07 2014-01-29 珠海市金邦达保密卡有限公司 安全设备、圈存系统和圈存方法
CN106096959A (zh) * 2016-06-06 2016-11-09 中城智慧科技有限公司 基于ccks的cpu卡的充值方法

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5884292A (en) * 1993-05-06 1999-03-16 Pitney Bowes Inc. System for smart card funds refill
CN101211451B (zh) * 2007-12-21 2016-08-03 飞天诚信科技股份有限公司 基于数字签名的圈存系统和方法
CN104202160B (zh) * 2014-09-09 2018-02-16 南京联创科技集团股份有限公司 Cpu卡在线充值加密通信方法
CN105205664A (zh) * 2015-09-25 2015-12-30 中城智慧科技有限公司 一种新型的离线支付方法

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2010043107A1 (zh) * 2008-10-16 2010-04-22 中国银联股份有限公司 一种电子现金的转账方法
CN101799954A (zh) * 2009-11-20 2010-08-11 北京飞天诚信科技有限公司 一种对双电子钱包进行圈存的方法
CN103544596A (zh) * 2013-11-07 2014-01-29 珠海市金邦达保密卡有限公司 安全设备、圈存系统和圈存方法
CN106096959A (zh) * 2016-06-06 2016-11-09 中城智慧科技有限公司 基于ccks的cpu卡的充值方法

Cited By (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN113748642A (zh) * 2019-02-26 2021-12-03 上海亚融信息技术有限公司 数字签名终端和安全通信方法

Also Published As

Publication number Publication date
CN106096959A (zh) 2016-11-09

Similar Documents

Publication Publication Date Title
US12002037B2 (en) Consumer authentication system and method
US11941591B2 (en) Device including encrypted data for expiration date and verification value creation
US9195926B2 (en) Portable e-wallet and universal card
CN115187242A (zh) 唯一令牌认证验证值
CN110169035B (zh) 具有协议特性的绑定密码
CN101512957A (zh) 使用网络的交易认证
WO2017211231A1 (zh) 基于ccks的cpu卡的充值方法
EP3437302A1 (en) System and method for correlating diverse location data for data security
US20240078304A1 (en) Mobile user authentication system and method
WO2007149830A2 (en) Portable consumer device configured to generate dynamic authentication data
US20240104530A1 (en) Data processing utilizing a digital tag
US20140008432A1 (en) Method for hub and spokes pin verification for credit cards with card information stored in a magnetic stripe
US20220207526A1 (en) Secure contactless credential exchange
RU2480922C2 (ru) Установление подлинности операций с использованием сети
CN104023142B (zh) 一种可发送短信钱币的手机
US20240086500A1 (en) Remote creation of virtual credential bound to physical location
US20240086896A1 (en) Mobile wallets and companion smart cards
CN117999553A (zh) 多重交互处理
WO2014008922A1 (en) Method for hub and spokes pin verification for credit cards with card information stored in a magnetic stripe

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 17809670

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

122 Ep: pct application non-entry in european phase

Ref document number: 17809670

Country of ref document: EP

Kind code of ref document: A1