System and method for realizing identity identification and data authentication based on security medium confidential short message

Abstract

The invention provides a system and method for realizing identity identification and data authentication based on a security medium confidential short message. The system comprises a function extension SIM card, a mobile terminal application program, and a cloud-side server, wherein the function extension SIM card comprises a security chip, a buzzer, and an indicator light, wherein the security chip is formed by integrating a control module and a security processing module; a JAVA-based platform operation system, an authentication application, a STK application and a multi-application management platform are installed in the function extension SIM card; the cloud-side server comprises an authentication server, a CA server and a business server; the authentication server is used for managing the authentication application; the CA server is used for generating and managing a certificate; the business server is used for managing the third-party application; the JAVA-based platform operation system is used for providing operating environment and an API interface; the multi-application management platform is used for the security and management of the authentication application and the STK application; the authentication application is used for performing signature authentication; and the STK application is used for the input-output of the data in the function extension SIM card.

Description

technical field [0001] The invention relates to the technical field of mobile payment security communication, in particular to a system and method for realizing identity authentication and data authentication based on a security medium and a secret short message. Background technique [0002] In the context of the rapid development of Internet finance, mobile Internet is penetrating into various industries. With the popularity of mobile phones and other mobile terminals and the maturity of the mobile payment market, more and more users choose to handle financial services on the mobile terminal. At the same time, when handling financial services on mobile terminals, user identity authentication and data authentication are the first link to ensure the security of financial applications and the basis of other security mechanisms. It has become a key problem to be solved urgently in mobile Internet finance. [0003] Based on the existing mobile phone baseband chips, most mobil...

AI Technical Summary

Problems solved by technology

In the field of micropayments, the identity authentication method of SMS verification code is generally used at present. The advantages of this method are high convenience, low cost, and easy popularization. However, this method has great security risks: Encryption technology is not used in the sending process, which is prone to risks such as SMS in-transit attack, malicious forwarding, SMS interception, and SMS tampering. Moreover, the customer who receives the SMS cannot be guaranteed to be the customer himself. Once the mobile phone card is copied or the verified SMS is hijacked and forwarded, then It will lead to illegal theft of the user's mobile banking

The security of identity authentication for mobile phone external audio shield / Bluetooth shield is relatively high, but the convenience and adaptability of external mobile phone external devices are not high, the overall cost is high, and it is not easy to be popularized on a large scale

At the same time, the existing authentication methods based on SMS and special dynamic password devices generally use soft algorithms for signature and encryption on the client side, and there are risks of data leakage and malicious attacks during the key and password calculation process, which cannot guarantee that the user can see that is signed

Images