A system and method to enhance the data security of e-bank dealings

Abstract

The invention discloses a system for improving security of network bank transaction data. The system includes a data acquiring device for receiving transaction data input by a client, outputting the received transaction data to a data processing device, and storing the data in a data storing device; the data storing device for storing the transaction data input by the data acquiring device and the data input by the data processing device; and the data processing device for generating massage identifying code after receiving a request for user transaction, and sending the generated massage identifying code to a user mobile terminal and storing the code in the data storing device, wherein, after the massage identifying code input by the user is received, whether the massage identifying code is accordant with the massage identifying code stored in the data storing device is judged; and if the result is positive, the transaction request is sent to a bank system mainframe to carry out core business transaction, otherwise, the process is over. A method for improving security of network bank transaction data is also provided. The invention improves security of network bank transaction data.

Description

technical field [0001] The present invention relates to the technical field of online banking transaction data encryption authentication, in particular to a system and method for improving the security of online banking transaction data USBKey encryption authentication by adopting a short message confirmation method. By adding a short message confirmation mechanism in the current general USBKey encryption authentication process, Improve the security of online banking transaction data. Background technique [0002] With the vigorous development of online banking, online banking has been widely recognized and accepted by the majority of users. At present, most online banks provide users with USBKey digital certificate encryption authentication methods for external payment services. [0003] The USBKey digital certificate is a hardware device with a USB interface. As long as the USBKey is inserted into the standard USB interface of the computer, it can start working immediatel...

AI Technical Summary

Problems solved by technology

[0056] However, due to the wide variety of client environments, when the user's computer is attacked by malicious programs, the USBKey digital certificate also faces the problem of "remote control", which may cause potential risks to users

[0057] "Remote control" means that the user's USBKey digital certificate has been inserted into the computer, and malicious programs such as remote control on the computer call the user's USBKey digital certificate to log in to online banking to handle various transfer and remittance transactions (provided that the user's login card number, password, USBKey digital certificate password), causing financial losses to users

[0058] Therefore, at present, when users use USBKey digital certificates to conduct online banking transactions, there are still potential security risks in the transaction data, and the security of online banking transaction data cannot be effectively guaranteed.

Images