A method for identifying the integrity of transaction information

Abstract

A method and device for authenticating the integrity of transaction information, the method comprising: a terminal device receives a transaction instruction sent by a host computer, parses the transaction instruction to obtain a first message verification code and transaction information to be verified; the transaction information to be verified is divided into blocks to obtain Transaction information block, generate a third key based on the first key, generate a fourth key based on the second key, generate a fourth key based on the transaction information block, the first key, the second key, the third key and the fourth key Perform calculations to generate authentication message verification codes; judge whether the authentication message verification code matches the first message verification code, if yes, the transaction information is complete, execute the transaction instruction, return the transaction result to the upper computer, and end; otherwise, the transaction information is incomplete, Refuse to execute the transaction order, return an error code to the host computer, and end. Therefore, in the process of calculating the verification code according to the transaction information to be verified, the transaction information to be verified is processed multiple times, and the important data in the transaction information is more secure during the verification process.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method for authenticating the integrity of transaction information. Background technique [0002] With the development of information technology, people pay more and more attention to information security. For example, the upper computer and the terminal equipment encrypt the communication data and share the key to ensure information security, and the server guarantees information security by verifying the password authentication transmitted by the network client. , in the existing technology, the communication data in the communication process of the two parties generally involves important data, such as transaction amount, user name, password, etc., and these important data will be stored in the transaction information. Once the transaction information is illegally intercepted, it will be given to the user. interests bring security risks. Contents of the invention [00...

AI Technical Summary

Problems solved by technology

[0002] With the development of information technology, people pay more and more attention to information security. For example, the upper computer and the terminal equipment encrypt the communication data and share the key to ensure information security, and the server guarantees information security by verifying the password authentication transmitted by the network client. , in the existing technology, the communication data in the communication process of the two parties generally involves important data, such as transaction amount, user name, password, etc., and these important data will be stored in the transaction information. Once the transaction information is illegally intercepted, it will be given to the user. The interests of the security risks

Images