WO2019080109A1

WO2019080109A1 - Terminal random number generation method and system

Info

Publication number: WO2019080109A1
Application number: PCT/CN2017/108072
Authority: WO
Inventors: 彭波涛
Original assignee: 福建联迪商用设备有限公司
Priority date: 2017-10-27
Filing date: 2017-10-27
Publication date: 2019-05-02
Also published as: CN107980135A; CN107980135B

Abstract

A terminal random number generation method and system. The method comprises: generate a true random number by means of a hardware random number generator; securely transmit the true random number to a terminal; and the terminal uses the received true random number as a random number seed to generate a random number sequence by means of a pseudo-random number generator. According to the method and system, the true random number is generated by an external hardware random number generator and is securely transmitted to the terminal, and the terminal uses the true random number as the random number seed to disperse lots of random numbers by means of the pseudo-random number generator. Therefore, the method significantly reduces terminal costs, and ensures that the random number meets the requirements of unpredictability and randomness.

Description

Method and system for generating terminal random number

[0001] The present invention relates to the field of terminal security, and in particular, to a method and system for generating a random number of a terminal.

Background technique

[0002] Financial payment terminals often need to use random numbers, such as: 1. For generating a key pair, according to the key management specification, random number generation must be used to ensure that the content of the key is unpredictable and undetectable; The process for encrypting data fills the data, ensuring the same data to be encrypted, and the result of each encryption is different, thereby preventing replay attacks; 3. For the identity authentication system, using the random number as a challenge factor to send to The other party to the communication asks the other party to return the correct response. The role of random numbers is to ensure that the problem with each challenge is "random".

[0003] Common random number generators include two types: a pseudo random number generator and a hardware random number generator.

[0004] The pseudo random number generator is implemented by a software-only algorithm. According to the input random number seed, a random number sequence is generated according to a certain generation rule. The algorithm of this random number generator is usually fixed, such as the pseudo-random number function that comes with the standard C library. If the seed is fixed, the generated random number sequence is also fixed.

[0005] Hardware random number generator (English: hardware random number generator), also known as True Random Number Generator (TRNG) is a device that generates random numbers through physical processes rather than computer programs. Such devices are typically based on microscopic phenomena that produce low-level, statistically random "noise" signals such as thermodynamic noise, photoelectric effects, and quantum phenomena. These physical processes are theoretically completely unpredictable and have been confirmed by experiments. By repeatedly sampling these random signals, a series of random numbers are generated.

[0006] For terminals with higher security requirements, such as financial POS machines, whether using a pseudo-random number generator or a hardware random number generator to generate random numbers, there are certain defects, which are reflected in:

[0007] (1) A pseudo-random number generator, since the algorithm and sequence for generating a random number are fixed, so as long as the first random number seed can be obtained, theoretically, all subsequent generations can be derived. The random number sequence, so the "unpredictable" nature of the subsequently generated random number cannot be satisfied. And to ensure The "unpredictability" of random seed seeds requires the use of random numbers as seeds, thus forming the paradox of "chicken or egg first."

[0008] Therefore, pseudo-random numbers are usually applied to situations where security requirements are not particularly strict, and a seed is randomly set by software (for example, the system is used as a seed), but the seed can be analyzed. For devices with high security requirements such as financial POS terminals, the requirements cannot be met.

[0009] (2) The hardware random number generator has the following disadvantages:

[0010] a need to have dedicated hardware as a support, thus increasing the hardware cost of the terminal equipment;

[0011] b. The hardware random number generator is not stable enough to ensure that the random number generated each time is sufficiently random, because random signals such as natural noise are not always always random. In order to ensure that a sufficiently stable random signal is collected, it is often necessary to down-convert the CPU to achieve a random number, which will affect the speed of the terminal.

technical problem

[0012] The technical problem to be solved by the present invention is to provide a method and system for generating a random number of a terminal to ensure unpredictability and randomness of the generated random number.

Problem solution

Technical solution

[0013] In order to solve the above technical problem, the technical solution adopted by the present invention is:

[0014] A method for generating a terminal random number includes:

[0015] generating a true random number by a hardware random number generator;

[0016] securely transmitting the true random number to the terminal;

[0017] The terminal generates a random number sequence by using a pseudo random number generator with the received true random number as a random number seed. [0018] Another technical solution provided by the present invention is:

[0019] A system for generating a random number of a terminal, comprising a hardware random number generator, a secure transmission module, and a final mountain

[0020] the hardware random number generator is configured to generate a true random number;

[0021] the security transmission module is configured to securely transmit the true random number to the terminal;

[0022] The terminal includes: [0023] a pseudo random number generator, configured to generate a random number sequence by using the received true random number as a random number seed. Advantageous effects of the invention

Beneficial effect

[0024] The present invention has the following advantages: The present invention generates a true random number by an external hardware random number generator, and transmits it to the terminal securely, and the terminal uses the pseudo random number generator as a random number seed to distribute a large number of random numbers. Number, to meet the needs of everyday applications. The terminal uses the above method to generate a random number sequence. For the terminal manufacturer, it is not necessary to have a hardware random number generator in each terminal. In total, only one hardware random number generator can be configured to meet the requirements, thereby greatly reducing the cost of the terminal. Peer, using a random number as the random number seed of the terminal, can ensure the unpredictability of the random number seed and the random number sequence generated by the terminal according to this; further, the secure communication technology is used to realize the secure injection of the random number seed, Ensure that the random number seed of each terminal is unpredictable and undetectable, thus significantly improving the security of the random number seed. The invention has high practicability in a terminal system with high safety requirements.

Brief description of the drawing

DRAWINGS

1 is a schematic flow chart of a method for generating a random number of a terminal according to the present invention;

2 is a general block diagram of a random number generation system of the present invention;

3 is a schematic flow chart of a method according to Embodiment 1 of the present invention;

4 is a schematic flowchart of a specific implementation of a random number secure transmission according to Embodiment 1 of the present invention; [0029] FIG. 5 is a schematic flowchart of a specific manner for a terminal to generate a large number of random numbers according to Embodiment 2 of the present invention;

6 is a schematic diagram of interaction between modules of a random number generating system according to Embodiment 4 of the present invention.

[0031] Description of the label:

[0032] 1, hardware random number generator; 2, POS terminal; 3, encryption module; 4, communication module;

[0033] 41, communication module A; 42, communication module B;

[0034] 5, the decryption module; 6, pseudo-random number generator; 7, the random number sequence using the module.

Detailed ways

[0035] The most critical idea of the present invention is: generating a true random number by an external hardware random number generator, and arranging it The whole transmission is transmitted to the terminal, and the terminal uses the pseudo random number generator as a random number seed to disperse a large number of random numbers. The invention has the advantages of significantly reducing the terminal cost and ensuring that the random number meets the requirements of unpredictability and randomness.

[0036]

[0037] Referring to FIG. 1 and FIG. 2, the present invention provides a method for generating a random number of a terminal, including:

[0038] generating a true random number by a hardware random number generator;

[0039] securely transmitting the true random number to the terminal;

[0040] the terminal generates a random number sequence by using a pseudo random number generator to receive the true random number as a random number seed

[0041] Further, the securely transmitting the true random number to the terminal storage is specifically:

[0042] encrypting the true random number;

[0043] the terminal downloads and obtains the encrypted true random number;

[0044] The terminal decrypts the encrypted true random number to obtain the true random number.

[0045] As can be seen from the above description, transmission to the terminal by means of encrypted communication ensures the security and unpredictability of the random number seed in the terminal.

[0046] Further, the securely transmitting the true random number to the terminal is specifically:

[0047] Before the terminal leaves the factory, the corresponding true random number is downloaded to the terminal through the encrypted communication method.

[0048] As can be seen from the above description, the true random number is obtained in a secure controlled environment before the terminal leaves the factory, and the opportunity for stealing illegal molecules is not provided, thereby further ensuring the security and unpredictability of the random number seed.

[0049] Further, the generating a true random number by using a hardware random number generator is specifically:

[0050] Depending on the number of terminals, a corresponding number of true random numbers are generated by the hardware random number generator and uniquely associated with each terminal.

[0051] As can be seen from the above description, for the terminal manufacturer, the cost of the built-in hardware random number generator module is required for each terminal, and only one set of hardware random number generators is dedicated to generate random number seeds for all terminals. That is, thus greatly reducing the hardware cost and maintenance cost of the terminal.

[0052] Further, the true random number is an initial random number seed of the terminal;

[0053] The method further includes:

[0054] intercepting a random number of a preset number of bytes from the random number sequence as a new random number seed; [0055] The terminal generates a new random number sequence according to the new random number seed by using a pseudo random number generator.

[0056] It can be seen from the above description that the self-feedback mode is adopted, and a random number is generated in the terminal, and a random number of a preset number of bytes is selected from the first generated random number sequence as a new seed for generating the next random number, so that Constant self-feedback can make the process of generating the entire random number more random and unpredictable.

[0057] Further, the number of bytes of the random number sequence generated by the terminal according to the true random number is greater than or equal to the preset number of bytes.

[0058] Further, the preset number of bytes is 8 bytes.

[0059] According to the above description, at least a random number sequence of preset bytes is generated, which can satisfy daily applications.

And can get new random number seeds accordingly.

[0060] Further, the method further includes:

[0061] the hardware random number generator and the terminal acquire and store the transmission protection key in a secure controlled environment;

[0062] The hardware random number generator uses the transmission protection key to encrypt the generated true random number in the plaintext form to obtain a true random number in the form of a ciphertext.

[0063] Further, the terminal generates a random number sequence by using a pseudo random number generator to receive the true random number as a random number seed, which is specifically:

[0064] the terminal receives the true random number in the form of cipher text;

[0065] the terminal decrypts the true random number in the ciphertext form by using a pre-stored transmission protection key to obtain a true random number in a plaintext form;

[0066] The terminal generates a random number sequence by using a pseudo random number generator with the true random number in the plaintext form as a random number seed.

[0067] It can be seen from the above that the encrypted communication technology is used to implement the injection of the random number seed security to the terminal, ensuring that the random number seed of each terminal is unpredictable and undetectable, and the security of the random number seed is ensured.

[0068] Further, the terminal is a financial POS terminal.

As can be seen from the above, the present invention has a good application in a financial POS terminal having a high security level requirement.

[0070] The invention cleverly utilizes a combination of "soft" and "hard" to generate random numbers, which overcomes the disadvantages of the existing pseudo random number generator and the hardware random number generator, and is embodied in: [0071] (1) Since the random number seed is derived from an external hardware random number generator, and the communication process is encrypted, the "unpredictable" characteristic is satisfied, and the seed can be detected in the pseudo random number generator. The problem;

[0072] (2) A large number of random numbers required for the terminal application process are mainly implemented by software algorithms, and the true random number is only used as a seed, thus overcoming the disadvantage of unstable hardware random numbers. For the random number seed, since each terminal only needs to be injected once, and the inter-turn is not particularly serious, it is completely possible to down-convert the external true random number generator, so that it can collect enough random signals as seeds. Thereby further increasing the randomness of the generated true random numbers.

[0073] (3) A self-feedback mode is employed. After the terminal generates a random number sequence, an 8-byte random number is selected from the newly generated random number sequence (if the newly generated random number sequence is less than 8 bytes, at least an 8-byte random number sequence is generated, and the required part is needed. Provided to the user) as a new seed for the next random number, so that continuous self-feedback can make the whole random number generation process more random and unpredictable.

[0074] (4) By using the technology of the present invention, the 128M bit random number sequence generated by the terminal is collected by the terminal, and analyzed and tested by an internationally dedicated random number analysis tool (for example, NIST STS-1.8 tool). The test passed, thus demonstrating the validity of the random number generator.

[0075]

[0076] Another technical solution provided by the present invention is:

[0077] A system for generating a terminal random number, comprising a hardware random number generator, a security transmission module, and a terminal mountain

[0078] the hardware random number generator is configured to generate a true random number;

[0079] the security transmission module is configured to securely transmit the true random number to the terminal;

[0080] the terminal includes:

[0081] A pseudo random number generator, configured to generate a random number sequence by using the received true random number as a random number seed.

[0082] Further, the security transmission module includes:

[0083] an encryption unit, located in the hardware random number generator, configured to encrypt the true random number;

[0084] a download unit, located in the terminal, configured to download, by the terminal, the encrypted true random number;

[0085] a decryption unit, located at the terminal, configured to decrypt the encrypted true random number by the terminal, to obtain the true random number [0086] Further, the security transmission module is specifically configured to download a corresponding true random number to the terminal by using an encrypted communication method before the terminal leaves the factory.

[0087] Further, the number of the terminals is two or more;

[0088] The hardware random number generator is specifically configured to generate a corresponding number of true random numbers by a hardware random number generator according to the number of terminals, and uniquely correspond to each terminal.

[0090] Further, the true random number generated by the hardware random number generator is an initial random number seed of the terminal; [0090] the terminal further includes:

[0091] an intercepting module, configured to intercept a random number of a preset number of bytes from the random number sequence as a new random number seed;

[0092] The pseudo random number generator is further configured to generate a new random number sequence according to the new random number seed.

[0093] Further, the pseudo random number generator is specifically configured to generate a random number sequence whose number of bytes is greater than or equal to the preset number of bytes according to the true random number.

[0094] Further, the preset number of bytes is 8 bytes.

[0095] Further, the hardware random number generator is further configured to acquire and store a transmission protection key in a secure controlled environment, and encrypt the generated true random number in a plaintext form by using the transmission protection key. Obtaining a true random number in cipher text form;

[0096] The terminal is further configured to acquire and store a transmission protection key in a secure controlled environment.

[0097] Further, the terminal further includes:

[0098] a receiving module, configured to receive a true random number in a cipher text form;

[0099] a decryption module, configured to decrypt the true random number in the ciphertext form by using a pre-stored transmission protection key to obtain a true random number in a plaintext form;

[0100] The pseudo random number generator is specifically configured to generate a random number sequence by using a true random number in the plaintext form as a random number seed.

[0101] Further, the terminal is a financial POS terminal.

[0102]

Embodiment 1

[0104] Please refer to FIG. 3 and FIG. 4, this embodiment provides a method for generating a random number of a terminal, which is applicable to security, etc. Terminals with higher requirements, such as financial POS terminals, are used to ensure the unpredictability of random numbers generated by terminals.

, randomness and effectiveness; peers can significantly reduce terminal hardware costs and maintenance costs.

[0105] This embodiment uses a terminal as a financial POS terminal as an example for description.

[0106] The method of this embodiment is implemented based on an external hardware random number generator and a plurality of POS terminals. Specifically, including:

[0107] S1: A true random number is generated by an external hardware random number generator.

[0108] Specifically, the number of corresponding terminals is generated by the hardware random number generator to generate a unique corresponding random number seed for each POS terminal as the initial random number seed. In this embodiment, a POS terminal only needs one initial random number seed, and the number is small, and the daytime is also loose. Therefore, the hardware random number generator is preferably down-converted to acquire a sufficiently random signal as the initial random number seed of the POS terminal, thereby ensuring the high randomness of the initial random number seed.

[0109] Preferably, the external hardware random number generator generates more than two true random numbers at a time to satisfy the batch.

The demand of the POS terminal improves the efficiency of assigning a random number seed to the terminal.

[0110] S2: Securely transmitting the true random number to the terminal.

[0111] Preferably, the true random number generated by the hardware random number generator is transmitted to the POS terminal by using an encrypted communication method to ensure that the initial random number seed of the POS terminal is unpredictable and undetectable, and the security of the initial random number seed is ensured. .

[0112] Alternatively, it can be implemented in the following manner:

[0113] S21: The hardware random number generator and the terminal acquire and securely store the transmission protection key in a secure controlled environment.

[0114] Specifically, as shown in FIG. 4, in the secure controlled environment, the same transmission protection key Kp conforming to the TDES (Triple Data Encryption Standard) requirement is set between the hardware random number generator and the target POS terminal. . For example, the POS of some banks needs to use a parent POS to download the key required for the payment transaction to the target POS (the terminal of this embodiment) in a secure controlled environment. At this time, it can be used to encrypt the initial. The TDES transport protection key Kp of the random number seed is downloaded and downloaded to ensure the high security and reliability of the encrypted random number seed key.

[0115] S22: The hardware random number generator uses the transmission protection key to encrypt the generated true random number in the plaintext form to obtain a true random number in the ciphertext form. [0116] Specifically, as shown in FIG. 4, in an external hardware random number generator (for example, a parent POS), the T DES transmission protection key Kp is used, and the TDES encryption algorithm is used, and the true random number in the plaintext form is used. The plaintext P) is encrypted, and the encrypted real random number (referred to as ciphertext C) in the form of ciphertext is sent to the target P OS as the initial random number seed of the target POS; wherein, C = TDES (Encrypt, Kp, P ).

[0117] S23: Before the terminal leaves the factory, securely download the corresponding encrypted true random number to the terminal.

[0118] Optionally, corresponding to S21 to S23, that is, before the target POS leaves the factory, the ciphertext C is securely downloaded, and is stored securely.

[0119] S3: The terminal generates a random number sequence by using a pseudo random number generator and using the received true random number as a random number seed.

[0120] Preferably, after receiving the encrypted true random number, the terminal obtains a true random number through decryption processing.

[0121] Optionally, corresponding to S21 to S23, the following manner can be implemented:

[0122] S31: The terminal decrypts the true random number in the ciphertext form by using the pre-stored transmission protection key to obtain a true random number in a plaintext form.

[0123] Specifically, as shown in FIG. 4, after receiving the ciphertext C, the target POS uses the TDES transmission protection key Kp to decrypt the received ciphertext C by using the TDES decryption algorithm, and obtains the data P1 after decryption. Decryption is the plaintext P) above; where PI = TDES(Decrypt, Kp, C).

[0124] S32: The terminal generates a random number sequence by using a pseudo random number generator to use the true random number in the plaintext form as a random number seed.

[0125] Specifically, the data P1 is used as the initial random number seed of the target POS, and a large number of random numbers are generated by a software algorithm to meet the requirements of the application.

[0126]

[0127] Embodiment 2

Referring to FIG. 5, the embodiment is further extended according to the first embodiment, and a specific manner of generating a large number of random numbers by the terminal is added.

[0129] In this embodiment, step S32 of the first embodiment specifically includes:

[0130] S321: The terminal uses the true random number as the initial random number seed to generate a random number sequence.

[0131] Specifically, the data P1 is used as an initial random number seed, and a corresponding random number sequence is generated by a software algorithm.

Preferably, the total number of bytes of the generated random number sequence is greater than or equal to a preset byte, such as 8 bytes. Preset byte Set the number of bytes required based on the random number seed.

[0132] S322: intercepting the random number of the preset number of bytes from the random number sequence as a new random number seed

[0133] If the actual use does not require a random number of preset bytes, only the random number of the number of bytes required by the application is provided.

[0134] S323: The terminal generates a new random number sequence according to the new random number seed by using a pseudo random number generator.

[0135] In this embodiment, the first generated 吋 uses the seed obtained from the external hardware random number generating device, and subsequently generates 吋 directly intercepts 8 bytes from the last generated random number sequence as a new seed, and then The software algorithm is used for distributed processing to obtain the required batch random number sequence. Through such continuous self-reflex, the process of generating the entire random number can be more random and unpredictable for a hundred years.

[0136]

[0137] Embodiment 3

[0138] This embodiment corresponds to the first embodiment, and provides a system for generating a random number of a terminal, including a hardware random number generator, a security transmission module, and a plurality of terminals. Here, a description will be given by taking a POS device whose terminal has a higher security level as an example.

[0139] the hardware random number generator is configured to generate a true random number; the true random number is an initial random number seed of the terminal;

[0140] Preferably, the hardware random number generator is specifically configured to generate, according to the number of terminals, a corresponding number of true random numbers by a hardware random number generator to uniquely correspond to each terminal.

[0141] Optionally, the hardware random number generator is further configured to acquire and store a transmission protection key in a secure controlled environment, and encrypt the generated true random number in a plaintext form by using the transmission protection key , obtaining a true random number in cipher text form;

[0142] the security transmission module is configured to securely transmit the true random number to the terminal;

[0143] Preferably, the security transmission module is specifically configured to download a corresponding true random number to the terminal by using an encrypted communication method before the terminal leaves the factory.

[0144] Optionally, the security transmission module specifically includes:

[0145] an encryption unit, located in the hardware random number generator, configured to encrypt the true random number; [0146] The download unit is located at the terminal, and is used for downloading and obtaining the encrypted true random number by the terminal;

[0147] The decryption unit is located at the terminal, and is configured to decrypt the encrypted true random number by the terminal, and obtain the true random number.

[0148] the terminal includes:

[0149] a pseudo random number generator, configured to generate a random number sequence by using the received true random number as a random number seed; [0150] Optionally, the terminal is further configured to acquire and store the transmission in a secure controlled environment. Protection key

[0151] The terminal further includes:

[0152] a receiving module, configured to receive a true random number in a cipher text form;

[0153] a decryption module, configured to decrypt the true random number in the ciphertext form by using a pre-stored transmission protection key to obtain a true random number in a plaintext form;

[0154] The pseudo random number generator is specifically configured to generate a random number sequence by using a true random number in the plaintext form as a random number seed.

[0155] Optionally, the pseudo random number generator is further configured to generate a new random number sequence according to the new random number seed. Preferably, a sequence of random numbers whose number of bytes is greater than or equal to the preset number of bytes is generated. Further preferably, the preset number of bytes is 8 bytes.

[0156] Optionally, the terminal further includes:

And [0157] an intercepting module, configured to intercept a random number of a preset number of bytes from the random number sequence as a new random number seed.

[0158]

Embodiment 4

[0160] This embodiment provides a random number system corresponding to the first embodiment and the second embodiment.

[0161] The system includes an external hardware random number generating device and a plurality of POS terminals 2.

[0162] As shown in FIG. 6, the entire random number generation system includes the following modules:

[0163] 1. External hardware random number generating device

[0164] The device internally contains:

[0165] hardware random number generator 1 : responsible for generating a random number seed by hardware and then transmitting it to the encryption module;

[0166] Encryption Module 3: The module is responsible for encrypting the random number seed to obtain an encrypted random number seed. Then transmitted to the communication module A 41 in the communication module 4;

[0167] Communication module A 41: This module is responsible for transmitting the encrypted random number seed to each POS terminal; [0168] 2. POS terminal

[0169] The terminal internally contains:

[0170] communication module B 42: the module is responsible for receiving the encrypted random number seed from the external random number generating device, and then transmitting the encrypted random seed to the POS terminal;

[0171] decryption module 5: The module is responsible for decrypting the encrypted random number seed obtained from the communication module B, and obtaining a random number seed plaintext;

[0172] pseudo random number generator 6: responsible for reading the externally written random number seed (first generated, using the seed obtained from the external random number generating device, and subsequently generated 吋 directly from the last generated random number sequence Intercept 8 bytes as a new seed), and then use software algorithm to perform distributed processing to obtain the required batch random number sequence;

[0173] The random number sequence uses the module 7: This module is responsible for reading the batch random number sequence 歹 |J from the software random number generation module, and applying it to the occasion.

[0174]

[0175] In summary, the method and system for generating a random number of a terminal provided by the present invention not only greatly reduce the hardware cost and maintenance cost of the random number generated by the terminal; but also ensure the random number seed and the random number generated by the terminal accordingly. The unpredictability of the sequence; further, the random number generation process uses the secure communication technology to realize the safe injection of the random number seed, which can ensure that the random number seed of each terminal is unpredictable and undetectable, and significantly improves the random number seed again. Security; Further, through the self-feedback mode, the process of generating the entire random number becomes more random and unpredictable, and finally the random number used by the terminal is highly random and unpredictable. The invention has high practicability in a terminal system with high security requirements.

[0176]

Claims

Claim

[Claim 1] A method for generating a random number of a terminal, comprising:

Generating a true random number by a hardware random number generator;

Securely transmitting the true random number to the terminal;

The terminal generates a random number sequence by using a pseudo random number generator to receive the true random number as a random number seed.

[Claim 2] The method for generating a random number of a terminal according to claim 1, wherein the securely transmitting the true random number to the terminal is specifically:

Encrypting the true random number;

The terminal downloads the encrypted true random number;

The terminal decrypts the encrypted true random number to obtain the true random number.

[Claim 3] The method for generating a random number of a terminal according to claim 1, wherein the securely transmitting the true random number to the terminal is specifically:

Before the terminal leaves the factory, download the corresponding true random number to the terminal through encrypted communication.

[Claim 4] A method for generating a random number of a terminal according to claim 1, wherein the generating a true random number by using a hardware random number generator is specifically: according to the number of terminals, random by hardware The number generator generates a corresponding number of true random numbers that uniquely correspond to each terminal.

[Claim 5] The method for generating a terminal random number according to claim 1 or 4, wherein the true random number is an initial random number seed of the terminal;

The method further includes:

And extracting a random number of a preset number of bytes from the random number sequence as a new random number seed; the terminal generates a new random number sequence according to the new random number seed by using a pseudo random number generator.

[Claim 6] The method for generating a random number of a terminal according to claim 5, wherein the number of bytes of the random number sequence generated by the terminal according to the true random number is greater than or equal to the preset number of bytes .

[Claim 7] A method for generating a terminal random number according to claim 5 or 6, wherein The preset number of bytes is 8 bytes.

The method for generating a random number of a terminal according to claim 1, further comprising:

The hardware random number generator and the terminal acquire and store the transmission protection key in a secure controlled environment. The hardware random number generator uses the transmission protection key to encrypt the true random number generated in the plaintext form to obtain a true random number in the ciphertext form. number.

The method for generating a random number of a terminal according to claim 8, wherein the terminal generates a random number sequence by using a pseudo random number generator to receive the true random number as a random number seed, specifically:

The terminal receives the true random number in the form of cipher text;

The terminal decrypts the true random number in the ciphertext form by using a pre-stored transmission protection key to obtain a true random number in a plaintext form;

The terminal generates a random number sequence by using a pseudo random number generator to use the true random number in the plaintext form as a random number seed.

The method for generating a random number of a terminal according to claim 1, wherein the terminal is a financial POS terminal.

A system for generating a terminal random number, comprising: a hardware random number generator, a security transmission module, and a terminal;

The hardware random number generator is configured to generate a true random number;

The secure transmission module is configured to securely transmit the true random number to the terminal;

The terminal includes:

A pseudo random number generator is configured to generate a random number sequence by using the received true random number as a random number seed.

The system for generating a random number of a terminal according to claim 11, wherein the secure transmission module comprises:

An encryption unit, located in the hardware random number generator, is configured to encrypt the true random number; the download unit is located at the terminal, and is used for downloading and obtaining the encrypted true random number by the terminal; The decryption unit is located at the terminal, and is configured to decrypt the encrypted true random number by the terminal, and obtain the true random number.

[Claim 13] A system for generating a random number of a terminal according to claim 11, wherein the secure transmission module is specifically configured to download a corresponding true random number by using an encrypted communication method before the terminal leaves the factory. terminal.

[Claim 14] A system for generating a random number of a terminal according to claim 11, wherein the number of the terminals is two or more;

The hardware random number generator is specifically configured to generate, according to the number of terminals, a corresponding number of true random numbers by a hardware random number generator to uniquely correspond to each terminal.

[Claim 15] The system for generating a terminal random number according to claim 11 or 14, wherein the true random number generated by the hardware random number generator is an initial random number seed of the terminal; Also includes:

An intercepting module, configured to intercept a random number of a preset number of bytes from the random number sequence as a new random number seed;

The pseudo random number generator is further configured to generate a new random number sequence according to the new random number seed.

[Claim 16] The system for generating a random number of a terminal according to claim 15, wherein the pseudo random number generator is specifically configured to generate, according to the true random number, a number of bytes greater than or equal to A sequence of random numbers with a preset number of bytes.

[Claim 17] A system for generating a terminal random number according to claim 15 or 16, wherein the preset number of bytes is 8 bytes.

[Claim 18] The system for generating a random number of a terminal according to claim 11, wherein the hardware random number generator is further configured to acquire and store a transmission protection key in a secure controlled environment. And using the transmission protection key to encrypt the true random number in the plaintext form to obtain a true random number in the form of a ciphertext;

The terminal is further configured to acquire and store a transmission protection key in a secure controlled environment.

The system of claim 18, wherein the terminal further comprises: a receiving module, configured to receive a true random number in a cipher text form;

a decryption module, configured to decrypt the true random number in the ciphertext form by using a pre-stored transmission protection key to obtain a true random number in a plaintext form;

The pseudo random number generator is specifically configured to generate a random number sequence by using a true random number in the plaintext form as a random number seed.

[Claim 20] A system for generating a terminal random number according to claim 11, wherein the terminal is a financial POS terminal.