Method for realizing follow attack prevention in device with data sign determining function

Abstract

The invention provides a method for realizing follow attack prevention in a device with a data sign determining function. The method comprises the following steps of: inputting transaction information by a user, forming accurate transaction data on an online bank client, and sending the transaction data to be signed to the device with the data sign determining function; abstracting and operating in the device when the transaction data sent by the client are received by the device; judging whether the transaction data to be signed are accordant with a transaction data format or not in the device, displaying the transaction data on a display screen if so, waiting to be checked by the user, prompting the sign overtime information on the display screen of the device if the waiting time is overtime, and refusing to sign; pressing a confirmation button if the transaction data are judged to be correct within the waiting time, i.e. the transaction data are signed successfully, and returning the sign result to the online bank client; and prompting the sign canceling information on the display screen of the device if a deletion button is pressed. By adding restriction during the whole transaction process, the whole process cannot be followed or attacked.

Description

technical field [0001] The invention relates to the field of computer information security, and provides a method for preventing follow-up attacks in a device with the function of confirming data signatures. The most typical device of this type is a new generation of USBKey with LCD buttons. Background technique [0002] With the rapid development of the Internet and its global popularity, it has greatly promoted the development of e-commerce and e-government affairs, and has had a positive and far-reaching impact on people's economic activities. However, e-commerce and e-government affairs activities need to be fundamentally Address issues of true identity, non-repudiation of engaged network activity, and confidentiality of data transmissions. At present, the best solution to these information security problems is PKI digital certificate technology. [0003] USBKey has been widely promoted and applied as a secure medium for protecting private keys. Especially its use in ...

AI Technical Summary

Problems solved by technology

[0010] The purpose of the present invention is to propose a method to solve the problem of follow-up attack in the transaction for the device with the function of confirming the data signature, so that the transaction can be carried out safely.

Images