USB (Universal Serial Bus) flash disk authorization method and system based on ATM (Automatic Teller Machine) equipment

Abstract

The invention discloses a USB (Universal Serial Bus) flash disk authorization method and a USB flash disk authorization system based on ATM (Automatic Teller Machine) equipment. The method comprises the following steps: acquiring USB flash disk hardware information in advance, specifying target equipment information capable of being visited and authorized valid information and generating USB flash disk fingerprint information; signing on the USB flash disk fingerprint information by adopting a USB flash disk signature private key, transmitting signed USB flash disk fingerprint files into a specified monitoring procedure of the ATM equipment; and after a USB flash disk is inserted into the ATM equipment, monitoring a driver program through the ATM equipment to acquire the current hardware information inserted into the USB flash disk and the USB flash disk fingerprint information, validating whether the inserted USB flash disk is legal by using a USB flash disk signature public key, allowing the normal operation if the inserted USB flash disk is legal, forbidding the current operation of the USB flash disk if the inserted USB flash disk is not legal and simultaneously alarming to a server. The USB flash disk authorization method and the USB flash disk authorization system have the beneficial effects that the authorization to the USB flash disk can be quickly realized, the ATM equipment safely and accurately identify the inserted USB flash disk according to the authorized information to prevent the illegal operation of the USB flash disk, so that the safety is improved.

Description

Technical field [0001] The invention relates to the field of information security processing, in particular to a U disk authorization method and system based on ATM equipment. Background technique [0002] With the development of the economy, self-service equipment (hereinafter referred to as ATM) has become an important channel for banks to contact customers, and many financial transactions are conducted through ATM. While ATM provides customers with convenient and fast services, due to the particularity of the operating environment, U disk is usually used for data copy during maintenance. ATM operating data has many sensitivities, and it cannot be copied through a U disk at will, and the U disk needs to be authorized and managed. [0003] The usual practice now is to formulate relevant policies to restrict maintenance personnel from copying data directly to ATM equipment. Some banks completely prohibit U disk access and release the access to the U disk during a certain period o...

AI Technical Summary

Problems solved by technology

[0004] (1) It brings inconvenience to ATM maintenance. Some production problems need to copy data directly to the production environment. Directly disabling the U disk brings inconvenience to maintenance. During the maintenance process, there are cases where it is necessary to copy the operation log for investigation

[0005] (2) Insufficient control

Only releasing the USB disk access within a specified period of time may lead to problematic USB disks being connected to the system, posing a threat to internal operating data; only specific USB disks of designated maintenance companies can be connected to the system, and other USB disks may Access can not be operated

[0006] (3), the specific operation of U disk is not clear

After the U disk is connected, the operations on the ATM are not clear, and data irrelevant to maintenance may be copied, resulting in the leakage of operating data and posing a threat to the security of cardholder data.

[0007] (4) Illegal operations cannot be notified in time

The bank cannot be notified of illegal operations in time, and security threats cannot be responded to in a timely manner. It can only be learned through investigation afterwards, and the best time to solve the problem is lost, which can easily lead to a passive situation at work.

Images