Online banking transaction method, device and system, and mobile terminal

Abstract

The embodiment of the invention discloses an online banking transaction method, device and system, and a mobile terminal. The method comprises the following steps that: an online banking APP (Application) sends an online banking transaction message to a corresponding TA (Trusted Application); the TA extracts online banking transaction display information from the online banking transaction message, and the online banking transaction display information is displayed through a TUI (Trusted User Interface); and the TA sends verification information input through the TUI and the online banking transaction message to Applet in an SE (Safety Element) module to be processed, and the TA sends a processing result to the online banking APP. By use of the method, the device, the system and the mobileterminal, the user can confirm transaction information in the trusted UI environment, and the correctness of transaction information can be guaranteed; a password is input in the trusted UI environment, and the password can prevent from being leaked; the user can identify the authenticity of the trusted UI environment through reserved information; and the storage and the use of a private key arerestricted in the SE, the private key can prevent from being leaked, and online banking transaction safety is guaranteed.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to an online banking transaction method, device, system and mobile terminal. Background technique [0002] In recent years, the demand for online banking transactions on smart mobile terminals has become increasingly strong, and the number and amount of transactions have increased rapidly, but the security issues are not optimistic. Taking the Android system as an example, risks such as malware infection, phishing software, and rooting of the Android system have always plagued the healthy development of mobile financial services. For online banking transactions on smart mobile terminals, the existing technologies are roughly divided into the following types: 1. Soft certificate scheme: the APP under the Android system is responsible for storing, managing and using the soft certificate and key pair, and use it after verifying the password in the APP The private key sign...

AI Technical Summary

Problems solved by technology

[0003] Both technical solution 1 and technical solution 2 input passwords, store and use private keys in an untrusted execution environment, which cannot guarantee the security of passwords and cannot guarantee that transaction information will not be tampered with; technical solution 1 cannot even guarantee the security of private keys; Solution 2 Although only a part of the private key is saved on the terminal, there are still many problems in the trust of the CA server in the terminal and the operator

Technical Solution 3 also cannot guarantee the security of the password, nor can it guarantee that the transaction information will not be tampered with; although the private key is stored in the TEE environment, compared with eSE, the security level is still lower

Images