CN101686225A - Methods of data encryption and key generation for on-line payment - Google Patents

Abstract

The invention discloses a data encryption method for online payment, including: the user swipes the card through the keyboard and inputs the transaction password; encrypts the magnetic track information and the transaction password; receives and decrypts the magnetic track information, the transaction password and MAC data, and performs Re-encrypt and organize the message; digitally sign the message data; and the web browser send the entire message to the payment gateway. The present invention also discloses a key generation method, including: setting the encryption master key and the MAC master key; applying to the payment gateway for downloading the terminal master key; calling the root key in the encryption machine of the payment gateway; The chip number generates the terminal master key and obtains the terminal public key. Using the data encryption and key generation method of the present invention, when transmitting sensitive data and transaction data of bank cards on the Internet, symmetric encryption, asymmetric encryption and triple encryption of SSL channels are used to realize "one machine, one secret" and "one-time One secret", with extremely high security.

Description

A data encryption and key generation method for online payment

technical field

The invention relates to the field of e-commerce application, in particular to the safe payment technology in the e-commerce application.

Background technique

With the development of the economy and the improvement of people's living standards, bank cards have become a payment tool and means of payment that can be seen everywhere in daily life. For example, POS terminals in shopping malls, supermarkets, airports or hotels provide users with convenient services. Cardholders only need to enter the password of the bank card to realize currencyless payment. In addition, with the vigorous development of e-commerce on the Internet, the online payment business of bank cards has also shown a rapid growth trend. Compared with the traditional business of bank cards, online payment is an emerging business field. Online buyers are making online payments. When you provide your bank card account number and personal password, you can complete the product purchase.

However, in the era of prosperous Internet economy, the risk management system and risk prevention measures have not yet been perfected, which brings high potential risks to the online payment business, and also brings many negative effects to the cardholders using the online payment business. Even, some netizens use self-made false websites to defraud cardholders' bank card account numbers and transaction passwords, and there are endless online economic cases in order to falsely claim the balance in the bank card, which also makes cardholders' enthusiasm for online payment greatly reduced to a certain extent. .

How to provide a safe, easy-to-use, and sufficiently secure payment method is the technical issue that cardholders are most concerned about. At the same time, a safe, easy-to-use, and trusted payment method is also a huge impetus for online merchants to expand business opportunities and increase profits. force. Although, in the prior art, the card issuing bank has launched online banking services for the development of e-commerce, and uses a hardware security chip as the carrier of the transaction certificate to improve the security of the transaction, by binding the bank card and the transaction certificate in the background However, users must first go to the bank to purchase a hardware security chip and bind it to a bank card. The cost is high and the operation steps are cumbersome. Subsequent business changes can only be handled at the bank counter, which brings many problems to users. inconvenient.

On the other hand, personal PCs are becoming more and more popular in family life. Whether the credit card transactions can be introduced into the payment link of online shopping by expanding the financial management functions of ordinary household computers, so as to realize "online ordering and credit card payment" is a question of banking services. It is a difficult problem that urgently needs to be solved in front of the technical personnel of the industry.

Contents of the invention

Aiming at the above-mentioned technical defects in the prior art when users make online payment, the present invention provides a data encryption method and a key generation method for online payment. By designing a security chip and an encryption chip on the motherboard and keyboard of the computer respectively, the encryption and/or decryption of the sensitive data of the bank card is completed, so as to realize the safe transmission of data. Different from the existing online payment business, in this payment system, users not only need to enter the bank card password, but also need to perform card swiping operations on the keyboard of the computer to obtain the magnetic track information data of the bank card, and through the encryption chip on the keyboard. Encrypted and sent to the security chip on the computer's motherboard.

According to one aspect of the present invention, a data encryption method for online payment is provided. The data encryption methods include:

After ordering the goods, the user swipes the card through the keyboard and enters the transaction password to generate the plaintext of the magnetic track information and the plaintext of the transaction password;

The encryption chip encrypts the plaintext of the track information and the plaintext of the transaction password, and converts them into the corresponding ciphertext of the track information, ciphertext of the transaction information and MAC data;

The security chip receives and decrypts the ciphertext of the track information, the ciphertext of the transaction password and MAC data, and converts them into the plaintext of the track information, the plaintext of the transaction password, the plaintext of the transaction data and the security chip number;

The security chip performs secondary encryption on the plaintext of the track information and the plaintext of the transaction password, organizes the message, and adds the plaintext of the transaction data and the security chip number to the message;

The security chip digitally signs the message data, and encrypts the digital signature and the plaintext of the transaction data; and

The web browser sends all the messages to the payment gateway through the SSL protocol.

Wherein, the encryption chip is set in the keyboard of the computer, and the security chip is set on the main board of the computer.

Wherein, the encryption chip has an encryption master key and a MAC master key.

Wherein, the security chip has an encryption master key, a MAC master key, a terminal master key and a terminal certificate. Further, the terminal certificate includes a terminal public key, a terminal private key and a payment gateway public key.

Wherein, the encryption master key of the encryption chip and the encryption master key of the security chip have the same key generation algorithm, and the encryption chip and the security chip perform symmetric encryption based on the encryption master key. In addition, the encryption chip of the keyboard uses the encryption master key to negotiate the encryption process key with the security chip of the motherboard, and uses the encryption process key to encrypt the plaintext of the track information and the plaintext of the transaction password.

Among them, the security chip of the main board uses the encryption process key to decrypt the ciphertext of the magnetic track information and the ciphertext of the transaction password from the encryption chip.

Wherein, the encryption chip on the keyboard and the security chip on the motherboard negotiate the steps of the encryption process key including:

Encryption chip preset key generation algorithm;

The security chip presets the same key generation algorithm as the encryption chip;

The encryption chip randomly generates a random factor, and calculates the encryption process key according to the encryption master key and the random factor;

The encryption chip sends a connection request and a random factor to the security chip;

The security chip calculates the encryption process key based on the encryption master key and the random factor; and

Complete the process key agreement based on the symmetric root key.

Among them, secondary encryption means that the security chip negotiates the process key with the payment gateway through the terminal master key, and uses the process key and the 3DES algorithm to encrypt the plaintext of the track information and the plaintext of the transaction password. The 3DES algorithm uses a 128-bit long key.

Among them, the security chip digitally signs the message data through the terminal private key, and uses the public key of the payment gateway to encrypt the digital signature and the plaintext of the transaction data and the random factor of the negotiation process key. The digital signature algorithm uses RSA with a 1024-bit long key. algorithm.

Wherein, implementing key synchronization between the security chip and the encryption chip includes:

Set encryption master key and MAC master key;

Send a request to apply for a key to the security chip through the BIOS;

Using the keyboard driver to automatically inject the applied key into the encryption chip by the BIOS; and

Complete the key synchronization between the security chip and the encryption chip.

According to another aspect of the present invention, a method for generating a key in a data encryption method for online payment is provided, the method comprising:

Set the encryption master key and MAC master key to synchronize the keys between the security chip and the encryption chip;

Send a request to the payment gateway to apply for downloading the terminal master key;

Retrieve the root key in the encryption machine of the payment gateway;

generating a terminal master key distributedly from the root key according to the security chip number; and

Obtain the terminal public key according to the security chip number.

Wherein, the encryption chip is set in the keyboard of the computer, and the security chip is set on the main board of the computer.

Wherein, the encryption chip has an encryption master key and a MAC master key; and, the security chip has an encryption master key, a MAC master key, a terminal master key and a terminal certificate. More specifically, the terminal certificate includes a terminal public key, a terminal private key and a payment gateway public key.

Wherein, after the wallet program on the computer sends the terminal certificate initialization command to the security chip, the security chip generates and saves the RSA key pair. The RSA key pair includes a terminal private key and a terminal public key.

By adopting the data encryption and key generation method of the present invention, the personal PC can be used as a platform to provide a safe online payment environment for cardholders, integrating the convenience of e-commerce on the Internet and the security of a financial management computer, from Computer keyboards, computer motherboards, payment gateways and clearing transfer agencies all adopt encrypted data transmission, and introduce traditional credit card transactions into the payment link of online transactions to realize "online ordering and card payment". While improving the security level of online payment, it also Greatly facilitate the network users. Moreover, using the data encryption and key generation method of the present invention, when transmitting sensitive data and transaction data of bank cards on the Internet, symmetric encryption, asymmetric encryption and triple encryption of SSL channels are used to realize "one machine, one secret" and "One time pad" has extremely high security.

Description of drawings

Readers will have a clearer understanding of various aspects of the present invention after reading the detailed description of the present invention with reference to the accompanying drawings. in,

Fig. 1 shows the schematic flow chart of realizing online payment based on the financial management computer in the present invention;

Fig. 2 shows the structural representation of the financial management computer used to realize online payment in the present invention;

Fig. 3 shows the schematic diagram of the principle of activating the financial management computer before using the online payment service in the present invention;

Fig. 4 shows a schematic diagram of data encryption in the process of receiving messages from the cardholder swiping the card to the third-party payment gateway when the financial management computer of the present invention is used for online payment;

Fig. 5 shows the storage diagram of various keys adopted for online payment according to the present invention;

Fig. 6 shows the generation schematic diagram of the terminal master key and the terminal public key stored on the motherboard of the financial management computer of the present invention;

Fig. 7 shows a schematic diagram of the principles of negotiating encryption process keys based on the encryption master key between the security chip on the motherboard of the financial management computer and the encryption chip on the keyboard of the present invention;

Fig. 8 shows a functional block diagram for realizing key synchronization between a security chip and an encryption chip in the present invention;

Fig. 9 shows a schematic flow diagram of initializing the security chip on the motherboard of the wealth management computer of the present invention;

Fig. 10 shows a schematic flow chart of the registration of the bank card used for online payment on the payment gateway according to the present invention;

Fig. 11 shows the payment flow diagram of the present invention based on the online payment system of the financial management computer; and

Fig. 12 shows a schematic diagram of the collection process of the online payment system based on the wealth management computer of the present invention.

Detailed ways

The specific implementation manners of the present invention will be described in further detail below with reference to the accompanying drawings.

Fig. 1 shows a schematic flow diagram of realizing online payment based on a wealth management computer in the present invention. Here, the wealth management computer refers to a home computer with an online payment function. Those skilled in the art should understand that Fig. 1 can not only represent the structural composition of the payment system of the present invention, but also illustrate the specific flow chart of the payment system for online payment.

Referring to FIG. 1 , the payment system includes: a financial management computer 10 of a network user, a payment gateway 20 , a clearing transfer agency 30 , a card issuing bank 40 , and an online merchant 50 . Among them, the network user is a user of the card issuing bank and China UnionPay, holds a UnionPay card and is the owner of the wealth management computer, and is responsible for the card swiping behavior on the wealth management computer; the payment gateway 20 (also known as the acquiring service agency) expands the use of wealth management The Internet B2C merchants of computer payment provide acquiring services such as fund settlement and error request submission for online merchants; the clearing and switching agency 30 is the network that operates financial management computers connected to the front-end and exchange, and provides inter-bank payment and clearing services; the card issuing bank 40 is the card issuer of the bank card held by the network user; and the network merchant 50 is a unit or organization that provides business services to cardholders through the Internet. It should be pointed out that the card issuing bank can directly receive the sensitive data and transaction data from the payment gateway without going through the clearing transfer agency, and return the response information to the payment gateway. More specifically, the wealth management computer 10 includes at least a motherboard 104 and a keyboard 102 .

When using the above payment system for online payment, it mainly includes the following steps:

Step S1, the network user as the cardholder visits the online network merchant 50 through the financial management computer 10, orders goods and selects the financial management computer payment method to pay;

Step S2, accept the financial computer payment method, and redirect the webpage to the unified payment page of China UnionPay;

Step S3, the financial management computer 10 of the network user detects the waiting payment information from the payment gateway 20, and the special indicator light on the keyboard of the financial management computer 10 lights up to prompt the user to swipe the card and input the password;

Step S4, the cardholder swipes the card through the keyboard integrated with the card reader, and after entering the transaction password, the magnetic track information and the transaction password are sent to the security chip on the main board of the financial management computer 10 in an encrypted manner;

Step S5, the security chip receives the magnetic track information and the transaction password from the keyboard, encrypts it again and sends it to the payment gateway 20 together with the transaction data;

Step S6, the payment gateway 20 judges whether the received information is legal, and if it is legal, it sends the transaction information to the settlement transfer agency 30; if it is not legal, it ends and returns;

Step S7, the clearing transfer agency 30 forwards the transaction information to the issuing bank 40;

Step S8, the card issuing bank 40 returns a response to the clearing transfer agency 30;

Step S9, the clearing transfer agency 30 forwards the return response from the issuing bank to the payment gateway 20;

Step S10, the payment gateway 20 notifies the online network merchant 50 of the transaction result;

Step S11, the online network merchant 50 matches the transaction result with the order, and returns a transaction result notification response;

Step S12, the payment gateway 20 returns the payment result page to the wealth management computer 10, and the user returns to the online merchant website through the link in the payment result page to check and confirm the payment result; and

In step S13, the online network merchant 50 sends corresponding commodities to the cardholder.

Among them, in the above steps, the payment gateway refers to the payment gateway of China UnionPay, which is mainly used to expand Internet B2C merchants based on financial computer payment methods, and provide merchants with acquiring services such as fund settlement and error request submission.

Wherein, in the above steps, the cardholder makes payment by swiping the card on the financial management computer. However, the person who swipes the card and the cardholder can be the same person or different people.

Fig. 2 shows a schematic structural diagram of a wealth management computer for realizing online payment according to the present invention. Referring to FIG. 2 , the wealth management computer 10 includes at least a main board 104 and a keyboard 102 , wherein the main board 104 has a security chip 1041 , and the keyboard 102 has an encryption chip 1021 , a card reader, and a payment indicator light. As shown in Figure 1, when the payment system of the present invention performs online security payment, the web page is first redirected to the unified payment page of UnionPay, and when the special indicator light of the keyboard lights up, the cardholder uses the card reader to swipe the card and enter the transaction password , at this time, the encryption chip 1021 transmits the magnetic track information and transaction password input by the cardholder to the security chip 1041 on the motherboard in an encrypted manner, and the security chip 1041 decrypts the encrypted information and organizes the transaction message, and encrypts the transaction again through the security chip The sensitive transaction data in the message is sent to the background. The key mechanism and negotiation between the security chip 1041 and the encryption chip 1021 will be specifically described in the subsequent drawings.

Preferably, the keypad for inputting the transaction password is a PIN pad, or at least a PIN input device that reaches the security level of a PIN pad. Among them, the keyboard is equipped with a special switch key, and only when switching to the online payment method based on the financial management computer, the card reader receives the magnetic track information of the bank card, and at the same time, the encryption chip built into the keyboard encrypts the transaction password entered by the user.

Among them, the keyboard is also equipped with a dedicated indicator light and its driver. When the network user submits a payment request at the payment gateway, the computer will receive the information of waiting for payment, and the special indicator light of the keyboard will light up to prompt the user to perform card swiping operations. Further, wait for the payment setting to be timed out. When the cardholder has not swiped the card for payment for a certain period of time, the special indicator light on the keyboard will go out, and the cardholder must submit a payment request on the unified payment page of the payment gateway again. This prevents counterfeit swipe keypads that cannot respond in real time to pending payment information.

Fig. 3 shows a schematic diagram of the principle of activating the financial management computer before using the online payment service in the present invention. With reference to Fig. 3, in the present invention, the home computer with safety chip on its mainboard and encryption chip on its keyboard must be activated before using the financial management function. The specific activation process is as follows:

First, the network user enters the corresponding menu item in the basic input output system (BIOS) setting, and selects to activate the financial management function of the computer;

Then, the BIOS sends commands to the keyboard to check the status of the keyboard, confirming that the keyboard is equipped with an encryption chip; sending commands to the motherboard to check the status of the motherboard, confirming that the security chip is installed on the motherboard; at this time, both the keyboard and the motherboard receive corresponding query commands and return status information;

Step S3, the BIOS sends an initialization activation command and receives a response message from the motherboard; and the motherboard returns a unique response message;

Step S4, analyzing the response information and sending the new transmission key to the keyboard, receiving the response information of the keyboard; and writing the new key into the keyboard, locking the communication mechanism between the encryption chip of the keyboard and the security chip of the motherboard;

In step S5, the BIOS sends an activation keyboard command to activate the financial management function of the computer; the motherboard sets a new transmission key, records the serial number of the keyboard, and activates the financial management function.

Fig. 4 shows a schematic diagram of data encryption in the process of receiving a message from the cardholder swiping the card to the third-party payment gateway when the financial management computer of the present invention is used for online payment. Referring to FIG. 4 , the encrypted data transmission process mainly involves the encryption chip of the keyboard, the security chip of the motherboard and the third-party payment gateway. Moreover, data encryption mainly exists from the cardholder using the keyboard integrated with the card reader to swipe the card to the security chip on the main board, and from the security chip on the main board to the third-party payment gateway. In the following, nodes (1), (2), (3), (4) and (5) in the process are used to describe in detail.

It should be pointed out that the ciphertext of track information, ciphertext of transaction password, ciphertext of transaction data and digital signature in Fig. Encrypted data or data after decryption of encrypted data.

Node (1), the network user swipes the card through the keyboard and enters the transaction password to generate the plaintext of the track information corresponding to the track information and the plaintext of the transaction password corresponding to the transaction password. The encryption chip of the keyboard uses the encryption process key and the MAC process key to convert The plaintext of the magnetic track information and the plaintext of the transaction password are converted into the ciphertext of the magnetic track information, the ciphertext of the transaction information and MAC data;

Node (2), after the security chip of the main board receives the track information ciphertext, transaction information ciphertext and MAC data from the encryption chip, it first uses the MAC process key to verify that the data has not been changed, and then uses the encryption process key to decrypt the track Information ciphertext and transaction password ciphertext, and converted into track information plaintext, transaction password plaintext, transaction data plaintext and security chip number, here, the communication between the encryption chip of the keyboard and the security chip of the motherboard adopts a symmetric encryption mechanism, the keyboard The encryption chip of the keyboard uses the encryption master key to negotiate the encryption process key with the security chip of the motherboard, and uses the encryption process key to decrypt the ciphertext of the track information and the transaction password ciphertext; and the encryption chip of the keyboard uses the MAC master key to negotiate the MAC process Key, and then use the MAC process key to calculate the message verification code of the ciphertext to ensure that the data has not been changed;

Node (3), the security chip of the main board negotiates the process key with the third-party payment gateway through the terminal master key, and uses the process key and 3DES algorithm to encrypt and generate the track information ciphertext and transaction ciphertext, in which the 3DES algorithm uses 128 bits Long key, and add order information and other transaction data plaintext and security chip number to the message;

Node (4), the security chip on the main board digitally signs the message data through the terminal private key, and then uses the payment gateway public key in the terminal certificate to encrypt the digital signature and the plain text of the transaction data in node (3) and the negotiation process key random factor. where the asymmetric encryption and digital signature algorithms use the RSA algorithm with a 1024-bit long key; and

Node (5), the web browser sends all the messages to the third-party payment gateway through the SSL protocol. After the third-party payment gateway receives the message, it first distributes the public key corresponding to the terminal through the security chip number, and uses its own private key Decrypt the transaction data ciphertext, random factor and digital signature, and use the terminal public key to check the digital signature, then use the random factor and the terminal master key to calculate the process key, and finally use the process key to decrypt the plaintext of the track information and the transaction password clear text. After obtaining all data plaintext, the third-party payment gateway encrypts the transaction password with the working key negotiated with the clearing transfer agency, and forwards it to the clearing transfer agency through the financial network together with the track information and transaction data.

It can be known from the above data transmission process that the payment system of the present invention has the following characteristics compared with the online payment method in the prior art:

Through the encryption chip of the keyboard, the magnetic track information generated by the user swiping the card and the transaction password entered are encrypted to be transmitted to the security chip of the main board;

When transmitting data on the Internet, symmetric encryption, asymmetric encryption and triple encryption of SSL channels are used to realize "one secret for one machine" and "one secret for one time"; here, one secret for each computer means that each financial management computer is unique key; one-time pad refers to the use of different encryption keys on each transmission node;

Track information and transaction passwords are transmitted encrypted on any node of the network;

The PINpad uses MAC to ensure that sensitive data will not be changed before it reaches the security chip on the main board; through terminal certificate signature and HTTP communication protocol to ensure the integrity of transaction transmission on the Internet; and through terminal certificate signature to ensure the non-repudiation of transactions and save financial transactions The original message (including signature) to ensure that it is well documented in the event of a dispute.

Fig. 5 shows a storage diagram of various keys used for online payment according to the present invention. As shown in FIG. 5 , the encryption chip 1021 of the keyboard has an encryption master key and a MAC master key, and the security chip 1041 of the motherboard has an encryption master key, a MAC master key, a terminal master key and a terminal certificate. Among them, the terminal certificate includes its own public key and private key and the public key of the third-party payment gateway, which is used for asymmetric encryption with the third-party payment gateway; the encryption master key is used for symmetric encryption between the security chip and the encryption chip, and negotiated Encryption process key; and MAC master key for negotiating the MAC process key. In addition, the terminal master key is used for symmetric encryption between the motherboard's security chip and the third-party payment gateway.

Fig. 6 shows a schematic diagram of generating a terminal master key and a terminal public key stored on the motherboard of the financial management computer according to the present invention. As mentioned above, the terminal master key is used for symmetric encryption between the security chip on the motherboard and the third-party payment gateway. The process key and the 3DES algorithm encrypt the plaintext of the transaction password and the plaintext of the track information. Referring to Figure 6, generating a terminal master key and a terminal public key includes:

Step 600, sending a request to the third-party payment gateway to apply for downloading the terminal master key;

Step 602, calling the root key in the encryption machine of the third-party payment gateway;

Step 604, generating terminal master keys distributedly from the root key according to the security chip number; and

Step 606, obtain the terminal public key according to the security chip number.

Wherein, the acquired terminal contract is used to check the digital signature.

Among them, the encryption machine of the third-party payment gateway is mainly used for encryption and decryption operations, including: using the payment gateway's own private key to decrypt transaction data ciphertext, random factors and digital signatures; the process of calculating based on random factors and terminal master keys Key, decrypted to obtain the plaintext of the track information and the plaintext of the transaction password; use the working key negotiated with the clearing transfer agency to encrypt the transaction password.

Fig. 7 shows a schematic diagram of the principles of the security chip on the main board of the financial management computer and the encryption chip on the keyboard negotiating the key of the encryption process based on the encryption master key according to the present invention. As mentioned above, the encryption chip of the keyboard and the security chip of the main board adopt a communication mechanism of symmetric encryption. Specifically, the encryption chip of the keyboard uses the encryption master key to negotiate with the security chip of the main board to On the other hand, after the security chip receives the ciphertext of the track information and the ciphertext of the transaction cipher, it uses the same encryption process key to decrypt the ciphertext of the track information and the ciphertext of the transaction cipher. The negotiated encryption process keys include:

Step 700, encryption chip preset key generation algorithm;

Step 702, the security chip presets the same key generation algorithm as that of the encryption chip;

Step 704, the encryption chip randomly generates a random factor, and calculates the encryption process key according to the encryption master key and the random factor;

Step 706, the encryption chip of the keyboard sends a connection request and a random factor to the security chip of the motherboard;

Step 708, the security chip calculates the encryption process key according to the encryption master key and the random factor; and

Step 710, complete the process key agreement based on the symmetric root key.

Those skilled in the art should understand that the encryption chip of the keyboard can use the MAC master key to negotiate the MAC process key in a method similar to the above process, and similarly, the security chip of the motherboard can use the terminal master key to negotiate the process with the third-party payment gateway keys; and third-party payment gateways can negotiate working keys with clearing intermediaries.

FIG. 8 shows a functional block diagram for implementing key synchronization between a security chip and an encryption chip in the present invention. Referring to Figure 8, the encryption chip of the keyboard and the security chip of the motherboard use the encryption master key and the MAC master key for data transmission, and the encryption master key and the MAC master key are only used to ensure the transmission of data information from the keyboard to the security chip. Integrity, independent of third-party payment gateways. Realizing key synchronization between security chip and encryption chip includes:

Step 800, setting encryption master key and MAC master key;

Step 802, sending a request for a key to the security chip through the BIOS;

Step 804, using the keyboard driver to automatically inject the applied key into the encryption chip by the BIOS; and

Step 806, completing key synchronization between the security chip and the encryption chip.

FIG. 9 shows a schematic flow diagram of initialization of the security chip on the motherboard of the financial management computer of the present invention. When a network user uses a bank card to make online payment on a wealth management computer, the bank card must first be registered on the third-party payment gateway before it can be used, that is, the third-party payment gateway can recognize the cardholder's bank card. For this reason, a program for managing registered bank cards is specially set up on the wealth management computer, which is mainly to safely transmit the user's bank card information to a third-party payment gateway for registration. Only bank cards that have been registered in the payment gateway can handle online payment services. Because the program for registering bank cards is similar to the function of a wallet, we might as well call it a wallet program. The wallet program can be a separate application program, or a program running on a webpage, which is used to initialize the security chip on the motherboard, manage registered bank cards and set default payment cards.

From the perspective of safe payment, the user's bank card information will be encrypted by the security chip before being transmitted on the Internet every time a transaction is made. Its initialization process includes:

The wallet program queries the validity of the certificate;

The security chip returns the certificate status to the wallet program. If the certificate is valid, the initialization process is ended. If the certificate is invalid, a certificate initialization command is sent to the security chip;

After the security chip receives the initialization command, it generates an RSA key pair, saves the private key of the security chip, and returns the public key of the security chip to the wallet program;

The wallet program receives the public key of the security chip, obtains personal information and sends it to the payment gateway for digital signature;

Send the information to be signed to CA for signature, and return the digital certificate to the wallet program; and

The wallet program receives the certificate and sends the command STORE_CERT to save it to the security chip.

Among them, the digital certificate stored on the security chip can be used to encrypt or sign the transaction. If the certificate is invalid or does not exist, the online payment will not be completed.

As shown in Figure 9, the cardholder's bank card can only be used after it is registered on the third-party payment gateway. Therefore, FIG. 10 shows a schematic flowchart of the registration of the bank card used for online payment on the payment gateway according to the present invention. The registration process includes:

The user opens the wallet program and selects the function of registering a bank card;

The financial management computer prompts the user to swipe the card and enter the PIN;

The user swipes the card and enters the PIN;

The wealth management computer encrypts the magnetic track information and transaction password of the card and sends it to the third-party payment gateway;

The third-party payment gateway decrypts the magnetic track information and transaction password of the received bank card, sends it to the corresponding card issuing bank for verification, and returns a response message to the financial management computer according to the verification result of the card issuing bank; and

The wealth management computer receives the response information and prompts whether the bank card registration is successful or failed.

The above briefly describes the main steps of registering a bank card for online payment on the payment gateway. Here, in order to introduce the registration process in more detail, we might as well divide it into four nodes, specifically: the wallet program prompts the user to swipe the card and enter the PIN; The text is processed, the wallet program sends the data to the third-party payment gateway, and the third-party payment gateway binds the bank card. The detailed operation steps of the four nodes are as follows:

(1) The wallet program prompts the user to swipe the card and enter the PIN

a. The wallet program of the financial management computer sends a card swiping signal to the keyboard, and the special indicator light of the keyboard lights up to prompt the user to swipe the card;

b. When the user swipes the card, the keyboard encrypts the magnetic track information of the bank card and waits for reading;

c. The wallet program reads the ciphertext of the magnetic track information and sends it to the security chip;

d. The wallet program prompts the user for a PIN; and

e. The user enters the PIN, and the keyboard encrypts the transaction password and waits for it to be read.

(2) The security chip on the motherboard processes the ciphertext of the magnetic track information and the ciphertext of the transaction password from the encryption chip

a. The security chip replaces the ciphertext and signature only after receiving the ciphertext of the magnetic track information and the ciphertext of the transaction password;

b. After the security chip receives the ciphertext of the track information, it decrypts it, checks whether the format is correct, and if successful, sets the flag to indicate that the track information is ready;

c. After the security chip receives the transaction password ciphertext, it decrypts it, checks whether the format is correct, and if successful, sets the flag to indicate that the transaction password is ready;

d. After each flag is set, check whether the track information and transaction password are available, if so, go to the next step, otherwise wait for the flag to be set;

e. The security chip generates a 16-bit long random symmetric key SK, and encrypts the transaction password and track information with SK;

f. The information obtained by encrypting the SK with the public key of the third-party payment gateway is called an envelope, and the private key of the security chip is used to sign the transaction password ciphertext and the track information ciphertext according to a certain format to obtain the signature information;

g. Return the ciphertext of the transaction password and the ciphertext of the track information; and

h. Return envelope and signature information.

(3) The wallet program sends data to the third-party payment gateway

a. Prompt to enter information such as bank card name and email; and

b. Combine personalized information, envelope, signature information, magnetic track information ciphertext and transaction password ciphertext together to form a message and send it to the third-party payment gateway.

(4) Third-party payment gateway binding bank card

a. After receiving the message, the third-party payment gateway uses the private key to unlock the envelope and obtain the SK;

b. Use the SK track information ciphertext to decrypt the PIN, and re-encrypt the track information with the bank's terminal key;

c. Send the track information and transaction password to the issuing bank for verification; and

d. Return a successful response message to the wallet program

Among them, if the verification is successful, the bank card number and the hardware serial number of the wealth management computer are bound to form a corresponding relationship and stored in the security chip; if the verification fails, a response message is returned to prompt the user to register unsuccessfully.

Fig. 11 shows a schematic diagram of the payment process of the online payment system based on the wealth management computer of the present invention. The payment process includes:

Internet users browse the website, purchase goods and designate the payment method using the financial management computer;

The user selects the bank card for payment and confirms it;

The financial computer activates the wallet program, prompting the user to swipe the card and enter the PIN;

The user performs a card swiping operation on the keyboard and enters the PIN;

The financial management computer receives encrypted magnetic track information and encrypted PIN;

Check whether the current bank card is in the authentication card list of the security chip. If not, prompt the user that the payment cannot be made. If it exists, obtain the order information and bank card information and organize the message to be sent to the payment gateway;

The payment gateway receives the message, checks the binding relationship, and after confirming that the transaction is possible, forwards the message to the clearing transfer agency and obtains the response information from the clearing transfer agency;

The payment gateway sends a payment success message to the merchant and gets the order query URL;

The merchant receives the payment success message, matches the order, and prepares to ship;

The payment gateway returns a response message to the financial management computer, and the financial management computer receives the response message and prompts the end of the transaction; and

The user chooses to continue shopping or exit.

Among them, activating the wallet program for online payment can be divided into two types, one is to automatically jump to the unified payment page of the payment gateway when selecting payment on the shopping website, and the payment page calls the wallet program through the wallet interface; the other is to click On the payment page, the target page is automatically directed to a shopping information file in a certain format automatically generated by the merchant website, and the file type is associated with the wallet program on the financial management computer.

Fig. 12 shows a schematic diagram of the collection process of the online payment system based on the wealth management computer of the present invention. Similar to the payment process shown in Figure 11, the collection process includes:

Internet users purchase goods and designate payment methods using financial management computers;

The merchant activates the financial management computer to collect and transfer money, and requires the user to swipe the card and enter the PIN;

The financial computer activates the collection program;

The user swipes the card and enters the PIN;

The financial management computer receives the encrypted magnetic track information and encrypted PIN, and organizes the message to be sent to the payment gateway;

The payment gateway receives the message, checks the binding relationship, and after confirming that the transaction is possible, forwards the message to the clearing transfer agency and obtains the response information from the clearing transfer agency;

The payment gateway sends a payment success message to the merchant and gets the order query URL;

The merchant receives the transfer notification and confirms the success of the payment;

The payment gateway returns the response information to the financial management computer, and the financial management computer receives the response information and prompts that the transaction is completed; and

The merchant delivers the product to the user.

Hereinbefore, specific embodiments of the present invention have been described with reference to the accompanying drawings. However, those skilled in the art can understand that without departing from the spirit and scope of the present invention, various changes and substitutions can be made to the specific embodiments of the present invention. These changes and substitutions all fall within the scope defined by the claims of the present invention.

Claims (15)

1. A data encryption method for online payment, comprising the steps of:

after a user orders a commodity, swiping a card through a keyboard and inputting a transaction password so as to generate a magnetic track information plaintext and a transaction password plaintext;

the encryption chip encrypts the magnetic track information plaintext and the transaction password plaintext and converts the magnetic track information plaintext and the transaction password plaintext into corresponding magnetic track information ciphertext, transaction information ciphertext and MAC data;

the safety chip receives and decrypts the magnetic track information ciphertext, the transaction password ciphertext and the MAC data, and converts the magnetic track information ciphertext, the transaction password plaintext, the transaction data plaintext and the safety chip number;

the safety chip carries out secondary encryption on the magnetic track information plaintext and the transaction password plaintext and organizes a message, and the transaction data plaintext and the safety chip number are added into the message;

the security chip carries out digital signature on the message data and encrypts the digital signature and the transaction data plaintext; and

and the network browser sends all the messages to the payment gateway through the SSL protocol.

2. The method of claim 1, wherein the cryptographic chip is disposed within a keyboard of a computer and the security chip is disposed on a motherboard of the computer.

3. The method of claim 1, wherein the cryptographic chip has a cryptographic master key and a MAC master key.

4. The method of claim 1, wherein the secure chip has an encryption master key, a MAC master key, a terminal master key, and a terminal certificate.

5. The method of claim 3 or 4, wherein the cryptographic master key of the cryptographic chip and the key generation algorithm of the cryptographic master key of the secure chip are the same, and the cryptographic chip and the secure chip perform symmetric encryption based on the cryptographic master key.

6. The method of claim 5, wherein the cryptographic chip of the keyboard negotiates a cryptographic process key with the secure chip of the motherboard using the cryptographic master key and encrypts track information plaintext and transaction password plaintext using the cryptographic process key.

7. The method of claim 6, wherein the step of negotiating an encryption process key comprises:

the encryption chip presets a key generation algorithm;

the security chip presets a key generation algorithm the same as that of the encryption chip;

the encryption chip randomly generates a random factor, and calculates an encryption process key according to the encryption main key and the random factor;

the encryption chip sends a connection request and a random factor to the security chip;

the security chip calculates an encryption process key according to the encryption main key and the random factor; and

and completing the key agreement based on the symmetric root key.

8. The method of claim 1, wherein the secondary encryption is that the security chip negotiates a process key with the payment gateway through a terminal master key and encrypts track information plaintext and transaction password plaintext using the process key and a 3DES algorithm.

9. The method of claim 1, wherein the security chip digitally signs the message data with a terminal private key, and encrypts the digital signature and the transaction data plaintext with a payment gateway public key and negotiates a random factor for a process key.

10. The method of claim 1, wherein the performing key synchronization between the secure chip and the cryptographic chip comprises:

setting an encryption master key and an MAC master key;

sending a request for applying a secret key to the security chip through the BIOS;

automatically injecting the applied key into the encryption chip by the BIOS by using a keyboard driver; and

and completing the key synchronization between the security chip and the encryption chip.

11. A key generation method in the data encryption method according to claim 1, characterized by comprising:

setting an encryption main key and an MAC main key to synchronize keys between the security chip and the encryption chip;

sending a request to a payment gateway to apply for downloading a terminal master key;

calling a root key in the payment gateway encryption machine;

generating a terminal master key by the root key in a scattered manner according to the serial number of the security chip; and

and acquiring the terminal public key according to the security chip number.

12. The method of claim 11, wherein the cryptographic chip is disposed within a keyboard of a computer and the security chip is disposed on a motherboard of the computer.

13. The method of claim 11, wherein the cryptographic chip has a cryptographic master key and a MAC master key.

14. The method of claim 11, wherein the secure chip has an encryption master key, a MAC master key, a terminal master key, and a terminal certificate.

15. The method of claim 11, wherein the secure chip generates and stores an RSA key pair after the wallet program on the computer sends a terminal certificate initialization command to the secure chip.

Images