TMK (Terminal Master Key) secure downloading method and system

Abstract

The invention discloses a TMK (Terminal Master Key) secure downloading method, which comprises the steps that 1) a hardware and security module generates a TK (Transmission Key), wherein the TK comprises an asymmetrical TEK (Transmission Encryption Key) and an asymmetric transmission AUK (Authentication Key), a public key Pu_tek of the TEK and a public key Pu_auk of the AUK are transmitted to a KMS (Key Management Service) system and a private key Pr_tek of the TEK and the private key Pr_auk of the AUK are injected into a POS (Point Of Sale) terminal through a secure method; 2) the POS terminal and the KMS system use the asymmetrical transmission AUK for bidirectional authentication; 3) if the AUK passes the authentication, the KMS system uses the Pu_tek to encrypt the TMK and transmits a master key ciphertext to the POS terminal; 4) the POS terminal uses the Pr_tek to decrypt the master key ciphertext Ctmk_tk to obtain a TMK. The TMK secure downloading method has the beneficial effects that the effect of remotely downloading the TMK by the POS terminal can be realized through the TK; since the TK comprises the asymmetric transmission AUK and the TEK, the transmission security of the TMK is effectively guaranteed.

Description

technical field [0001] The invention relates to the field of electronic payment, in particular to a method and system for safely downloading a terminal master key TMK. Background technique [0002] Bank card (BANK Card) is becoming more and more popular as a payment tool. Common bank card payment systems include point of sale terminals (Point Of Sale, POS), POS acquiring system (POSP), password keyboard (PIN PAD) and hardware encryption machine (Hardware and Security Module, HSM). Among them, the POS terminal can accept bank card information, has communication function, and accepts the instructions of the teller to complete the financial transaction information and related information exchange equipment; the POS acquiring system centrally manages the POS terminal, including parameter download, key download, acceptance, It is a centralized management and transaction processing system that processes or forwards transaction requests from POS terminals and returns transaction r...

AI Technical Summary

Problems solved by technology

As a result, the workload of the maintenance center computer room is heavy; after the equipment leaves the factory, it needs to be transported to the security computer room of the management center to download the key before it can be deployed to the merchant, and the transportation cost increases; in order to centralize the download of the key, a lot of manpower and working time are required, and the maintenance cost is high. , long maintenance period, etc.

Images