Trusted payment computer system

Abstract

A trusted payment computer system relates to the technical field of information security. The system comprises input equipment, a trusted computer mainframe, output equipment and trusted card reading equipment, wherein the input equipment, the trusted computer mainframe and the output equipment are connected in sequence; and the trusted card reading equipment is connected with the trusted computer mainframe by a USB-HID interface. The input equipment includes a keyboard and a mouse and the output equipment is a display. The system is characterized in that TCM chips are embedded in the trusted computer mainframe to serve as the root of trust for measurement, the root of trust for reporting and the root of trust for storage. A system of trust for measurement inside the trusted computer mainframe completes the following step-by-step measurement: measurement of integrity carried out on trusted BIOS by TCM, measurement of integrity carried out on MBR by trusted BIOS, measurement of integrity carried out on OS Kernel by MBR and measurement of integrity carried out on a PE file by a trusted monitoring program. A software system installed on the trusted computer mainframe contains a TCM management program, a trusted card reading equipment management program and a payment transaction management program. The system is convenient and easy to use and can reliably ensure the security of the whole trusted payment transaction.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a trusted payment computer system. Background technique [0002] With the vigorous development of the electronic payment industry, in order to ensure the security of electronic payment, many security measures have been applied to various payment links. Adding a password to an account is the simplest and least secure method. Phishing, fake websites, fraudulent text messages, etc. can easily defraud users' accounts and passwords. A keyboard sniffer can steal a user's username and password by recording the user's keystrokes. In order to prevent the above attacks, browser security controls and soft keyboard technology were born, but the ever-evolving rootkit attack technology can still break through this defense measure. Digital certificate technology is currently the most secure identity authentication technology, but the confidential storage of asymmetric public and...

AI Technical Summary

Problems solved by technology

Since the entered account number and password appear in clear text in the payment terminal computer, it is very vulnerable to security attacks

Moreover, because the user often needs to input a very long number string, it is easy to make mistakes, which reduces the ease of use of electronic payment services and is not convenient for users to use.

Images