WO2018040922A1

WO2018040922A1 - Data isolation system and method, and method using data isolation system

Info

Publication number: WO2018040922A1
Application number: PCT/CN2017/097808
Authority: WO
Inventors: 孟陆强; 洪逸轩
Original assignee: 福建联迪商用设备有限公司
Priority date: 2016-08-29
Filing date: 2017-08-17
Publication date: 2018-03-08
Also published as: CN106385314A

Abstract

Disclosed are a data isolation system and method, and a method using the data isolation system. The data isolation system comprises: a user POS machine, a server, a signature module, and at least one user module. The user POS machine is connected to the server, the server is connected to the signature module, and the signature module is connected to the user module. The user POS machine comprises a default application area and at least one user application area. The default application area is used for storing application programs and default digital certificates which are shared by users. The user application area is used for storing application programs and user digital certificates of authorized users. The user module comprises the user digital certificates of the corresponding authorized users. The signature module is used for making a digital signature. The sever comprises user application programs. The present invention realizes data isolation between different application areas, and software of a current user cannot be downloaded to other user application areas.

Description

Title of Invention: Data Isolation System, Method, and Method of Utilizing Data Isolation System

[0001] The present invention relates to the field of data security of a POS terminal under multiple users, and more particularly to a data isolation system.

, methods and methods of using data isolation systems.

Background technique

[0002] With the development of electronic technology, the storage capacity of POS terminals continues to expand. Customers may be required to be able to download multiple applications to the same POS terminal, ie multiple applications stored in the POS terminal can have multiple

[0003] Applications stored in POS terminals may belong to different owners, such as banks, customers, supermarkets, etc., and applications may contain sensitive information that is not desired to be accessed by other applications, if not The way to achieve isolation between different user applications, private data in a user's application may be maliciously accessed and modified by other applications, resulting in security issues and property damage.

technical problem

The technical problem to be solved by the present invention is to provide a data isolation system, a method, and a method for utilizing a data isolation system, which realize isolation of application data between different users.

Problem solution

Technical solution

[0005] In order to solve the above technical problem, a technical solution adopted by the present invention is: providing a data isolation system, including a user POS machine, a server, a signature module, and at least one user module, wherein the user POS machine is connected to the server The server is connected to the signature module, and the signature module is connected to the user module; the user POS machine includes a default application area and at least one user application area; and the default application area is used for storing user sharing. An application and a default digital certificate; the user application area is configured to store an application of the authorized user and the user digital certificate; the user module includes the user digital certificate corresponding to the authorized user; Digital signature; the server contains a user application. [0006] wherein the signature module is a POS machine.

[0007] wherein the server is a PC with a download function.

[0008] The signature module is connected to the server through a USB interface.

[0009] In order to solve the above technical problem, another technical solution adopted by the present invention is: Providing a data isolation method, including the following steps:

[0010] S201. The user POS storage area is divided into at least two areas, one of the areas is set as a default application area, and the other area is set as a user application area;

[0011] S202. Install a default digital certificate in the default application area, and install a user digital certificate of the authorized user in the user application area.

[0012] In order to solve the above technical problem, another technical solution adopted by the present invention is: Providing a method for isolating data by using a data isolation system, comprising the following steps:

[0013] S301: Determine whether an area to be downloaded is a default application area; if yes, proceed to step S305.

If not, proceed to step S302;

[0014] S302. Download the digitally signed certificate object file, and verify the certificate object file by using the default digital certificate.

[0015] S303. Divide an area in the remaining user POS storage area as an area to which the program to be downloaded belongs;

[0016] S304: Decapsulate the certificate target file by using the default digital certificate, and download the decapsulated digital certificate in an area to which the program to be downloaded belongs;

[0017] S305. Download the digitally signed program target file, verify and decapsulate the program target file by using the digital certificate, and save the decapsulated application in the area of the to-be-downloaded program. .

[0018] wherein, the step S301, the step S302 further includes the following steps:

[0019] S3011, determining whether the area to which the program to be downloaded belongs is present; if yes, proceeding to step S304 after step S302; if not, proceeding to step S302 and then performing step S303.

Advantageous effects of the invention

Beneficial effect

[0020] The beneficial effects of the present invention are: a private number in an application belonging to a user that is different from the prior art According to the invention, a data isolation system, a method and a method for using the data isolation system can be implemented by maliciously accessing and modifying other applications, thereby providing an application area. Only one user, one user's application software only exists in one application area, so that data in one application area can access each other, and data between different application areas cannot access each other; by digital signature method, A user software can only be downloaded to the user application area, and cannot be maliciously downloaded to other user application areas. Through the invention, the isolation of application data between different users is realized.

Brief description of the drawing

DRAWINGS

1 is a diagram of a data isolation system provided by the present invention;

2 is a flow chart of a data isolation method provided by the present invention;

3 is a flow chart of an application embodiment of a method for isolating data by using a data isolation system according to the present invention;

4 is a flow chart of another application embodiment of a method for isolating data by using a data isolation system provided by the present invention.

detailed description

Referring to FIG. 1, the present invention provides a data isolation system, including a user POS machine, a server, a signature module, and at least one user module, where the user POS machine is connected to the server, the server and the signature. The module is connected to the user module; the user POS machine includes a default application area and at least one user application area; the default application area is used to store an application shared by the user and a default digital certificate; The user application area is configured to store an application of the authorized user and the user digital certificate; the user module includes the user digital certificate corresponding to the authorized user; the signature module is used for digital signature; the server includes User application. Preferably, the signature module is a POS machine, that is, a POS machine dedicated to digital signatures. The digital signature refers to a function of digitally encrypting a file or program using a digital certificate, and the expression is a common expression in the art. Preferably, the server is a PC with a download function. Preferably, the signature module is connected to the server through a USB interface. In the present invention, there is a one-to-one correspondence between the application area and the user, that is, one application area belongs to only one user, and one user's application software exists only in one application area. Data in one application area can be accessed from each other, and data between different application areas cannot be accessed from each other. Based on the above description, after the program is downloaded, it is necessary to explain to the user POS machine which application area of the user POS machine the program is to be saved. If the application area exists in the user POS machine, the program is directly saved in the application area; if the application area does not exist in the user POS machine, the user POS machine creates the corresponding application area and then saves the program to the specified application area. The application area mechanism ensures that programs and data in different application areas cannot access each other. However, this does not guarantee that the application Appl belonging to the application area Areal is maliciously downloaded to the application area Area2, so that Appl can access the data of Area2.

[0027] Accordingly, the present invention provides a data isolation method. Referring to FIG. 2, the data isolation method provided by the present invention includes the following steps:

[0028] S201. The user POS storage area is divided into at least two areas, one of the areas is set as a default application area, and the other area is set as a user application area;

[0029] S202. Install a default digital certificate in the default application area, and install a user digital certificate of the authorized user in the user application area.

[0030] In the present invention, step S201 divides the storage area in the user POS machine into a plurality of user application areas, and the application area and the user have a one-to-one correspondence, that is: one application area belongs to only one user, one user The application software only exists in one application area. Data in one application area can be accessed from each other, and data between different application areas cannot be accessed from each other. The default application area is an application that stores default digital certificates, system programs, and user shares. Step S202 is to install a default digital certificate in the default application area by using a digital signature mechanism, and install a digital certificate of the user of the authorized user in the user application area; and the digital signature mechanism ensures that the application of the user cannot be Malicious download to other user application areas. Through the above description, using the present invention, there is a default application area in the user POS machine, and a default digital certificate is stored in the default application area. If the user wants to download the application in the default application area, the application can be downloaded after being digitally signed by the signature module; if the user wants to download the application to the non-existent user application area, the user POS machine needs to The user application area is created, and the user's digital certificate needs to be downloaded to the created user application area before the application can be downloaded to the created user application area. [0031] In the process of downloading the user digital certificate, the user digital certificate is digitally signed by the signature module to generate a certificate object file, and after the user POS machine uses the default digital certificate to verify the certificate object file, the user application can be downloaded. In the district. In this case, the user has been authenticated by the user POS machine, and the created user application area belongs to the user only, and other users cannot download the application into the user application area. To download an application to this user application area, it must be authenticated by the user's digital certificate before it can be downloaded to this user application area. The application of this user application area belongs to this user only.

[0032] Referring to FIG. 3 and FIG. 4, the method for isolating data by using a data isolation system provided by the present invention includes the following steps:

[0033] S301: Determine whether the area to be downloaded is the default application area; if yes, proceed to step S305.

If not, proceed to step S302;

[0034] S302. Download the digitally signed certificate object file, and verify the certificate object file by using the default digital certificate.

[0035] S303. Divide an area in the remaining user POS storage area as an area to which the program to be downloaded belongs;

[0036] S304: Decapsulate the certificate target file by using the default digital certificate, and download the decapsulated digital certificate in an area to which the program to be downloaded belongs;

[0037] S305. Download the digitally signed program target file, verify and decapsulate the program target file by using the digital certificate, and save the decapsulated application in the area of the to-be-downloaded program. .

[0038] The step S301 and the step S302 further include the following steps:

[0039] S3011, determining whether the area to which the program to be downloaded belongs is present; if yes, proceeding to step S304 after step S302; if not, proceeding to step S302 and then performing step S303.

[0040] In the present invention, there is a one-to-one correspondence between the application area and the user, that is, one application area belongs to only one user, and one user's application software exists only in one application area. Data in one application area can be accessed from each other, and data between different application areas cannot be accessed from each other. Based on the above description, after the program is downloaded, it is necessary to explain to the user POS machine which application area of the user POS machine the program is to be saved. If the application area exists in the user POS machine, the program is directly saved in the application area; in the user POS machine If the application area does not exist, the user POS machine creates the corresponding application area and then saves the program to the specified application area. The application area mechanism ensures that programs and data in different application areas cannot access each other. However, this does not guarantee that the application Appl belonging to the application area Areal is maliciously downloaded to the application area Area2, so that Appl can access the data of Area2.

[0041] In the preferred embodiment of the present invention, the user POS machine has planned the default application area Areal of the user POS machine, and preloads the digital certificate Crtl corresponding to the default application area. If the program Appl sent by the user wants to download to Areal, first digitally sign Appl using the private key corresponding to Crtl, generate the target file Sgnl, and then download Sgnl to the user POS machine, and the user POS machine will save Appl to the system. . If the user's program App2 wants to download to Area2, you must first download the certificate Crt2 corresponding to Area2 to the user's POS machine. The Crt2 certificate needs to be digitally signed with the private key corresponding to Crtl, then generate the target file Crt2', and then download Crt2' to the user's P OS machine, and the user POS machine will save the Crt2 certificate to the system. After that, the App2 is digitally signed with the private key corresponding to Crt2, and then the target file Sgn2 is generated, and then Sgn2 is downloaded to the user POS machine, and the user PO S machine saves App2 to the system.

[0042] In another preferred embodiment, the method for isolating data by using a data isolation system provided by the present invention includes the following steps:

[0043] S401, determining whether the area to be downloaded is the default application area; if yes, proceeding to step S405; if not, proceeding to step S402;

[0044] S402, determining whether the area to be downloaded the program has the user digital certificate; if yes, proceed to step S405; if not, proceed to step S403;

[0045] S403. Send a control signal to the signature module, and control the signature module to digitally sign the user digital certificate to be downloaded by using the default digital certificate private key, and generate a certificate target file.

[0046] S404. Download the certificate target file, verify, unpack the certificate target file, and save the user digital certificate by using the default digital certificate.

[0047] S405. Perform digital signature on the download application by using the user digital certificate private key to generate an application target file.

[0048] S406. Download the application target file.

[0049] S407. Verify, unpack the application target file by using the user digital certificate, and save the application. [0050] wherein, the step S404 is the following steps:

[0041] S4041, determining whether the belonging area exists; if yes, proceeding to step S4044; if not, proceeding to step S4042;

[0052] S4042: download the certificate target file;

[0053] S4043: verify the certificate target file by using the default digital certificate, and create the belonging area

, proceeding to step S4046;

[0054] S4044. Download the certificate target file.

[0055] S4045, verifying the certificate object file by using the default digital certificate, proceeding to step S4046;

[0056] S4046: Decapsulate the certificate target file by using the default digital certificate, and save the user digital certificate.

[0057] In this embodiment, the user POS machine has planned the default application area Areal of the user POS machine, and preloads the digital certificate Crtl corresponding to the default application area. If the program Appl sent by the user wants to download to Areal, first digitally sign Appl using the private key corresponding to Crtl, generate the target file Sgnl, and then download Sgnl to the user POS machine, and the user POS machine will save Appl to the system. . If the user's program App2 wants to download to Area2, you must first download the certificate Crt2 corresponding to Area2 to the user's POS machine. The Crt2 certificate needs to be digitally signed with the private key corresponding to Crtl, then generate the target file Crt2', and then download Crt2' to the user POS machine.

The user POS machine will save the Crt2 certificate to the system. After that, the App2 number is first signed with the private key corresponding to Crt2, and the target file Sgn2 is generated, and then Sgn2 is downloaded to the user POS machine, and the user POS machine saves App2 to the system. If the user application area of the user already exists and the user digital certificate of the user is already stored in the user application area, the application may be directly digitally signed to form a program target file, and the user digital certificate is used to After the program object file is verified and unsealed, the application is saved in the user application area of the user.

[0058] The above-mentioned "digital signature of Appl using the private key corresponding to Crtl" means that data is encrypted by Appl using the private key corresponding to Crtl, which is common in the art.

[0059] In summary, the present invention ensures that Appl located in Areal cannot access data in Area2 through the application area mechanism, and App2 located in Area2 cannot access data in Area1;

Through the digital signature mechanism, Sgnl cannot be downloaded to Ar _ea 2, and Sgn2 cannot be downloaded to Areal. The invention has the beneficial effects that: the private data in the application belonging to one user different from the prior art may be maliciously accessed and modified by other applications, thereby causing security problems and property losses, and the present invention provides a data isolation. The system, the method and the method for using the data isolation system, by dividing the application area, make one application area belong to only one user, and one user's application software exists only in one application area, so that data in one application area can mutually Access, and data between different application areas cannot access each other; by means of digital signature, a user software can only be downloaded to the user application area, and cannot be maliciously downloaded to other user application areas. Through the invention, the isolation of application data between different users is realized.

Claims

Claim

A data isolation system characterized by:

The user POS machine is connected to the server, the server is connected to the signature module, and the signature module is connected to the user module.

The user POS machine includes a default application area and at least one user application area; the default application area is configured to store an application shared by the user and a default digital certificate; and the user application area is used to store an authorized user's application and user. a digital certificate; the user module includes the user digital certificate corresponding to the authorized user; the signature module is used for digital signature; and the server includes a user application.

The data isolation system according to claim 1, wherein: said signature module is a P OS machine.

The data isolation system according to claim 1 or 2, wherein: said server is a PC having a download function.

The data isolation system according to claim 1 or 2, wherein: said signature module is connected to said server via a USB interface.

The data isolation system according to claim 3, wherein: said signature module is connected to said server via a USB interface.

A data isolation method, comprising the steps of:

5201. Divide the user POS storage area into at least two areas, set one of the areas as a default application area, and set the other area as a user application area;

5202. Install a default digital certificate in the default application area, and install a user digital certificate of the authorized user in the user application area.

A method for isolating data by using the data isolation system of claim 1 is characterized by the following steps:

5301, determining whether the area to be downloaded is the default application area; if yes, proceeding to step S305; if not, proceeding to step S302;

5302. Download the digitally signed certificate object file, and use the default digital certificate. Verifying the certificate object file;

5303. Divide an area in the remaining user POS storage area as the area to which the program to be downloaded belongs;

S304: Decapsulating the certificate object file by using the default digital certificate, and downloading the decapsulated digital certificate in an area of the to-be-downloaded program;

5305. Download the digitally signed program target file, verify and decapsulate the program target file by using the digital certificate, and save the decapsulated application in the area to which the program to be downloaded belongs.

[Claim 8] The method of isolating data according to claim 7, wherein said step S

301. The step S302 further includes the following steps:

S3011: Determine whether the area to which the program to be downloaded belongs is present; if yes, proceed to step S304 after step S302; if not, proceed to step S302 to perform step S303.