The invention discloses a novel terminal safety soft secret
key management method. According to the method, information of two transaction parties are selected by a soft secret key
system as identification ID, public and private key pairs are formed through mapping on the basis of business subdomain identification; for
online payment, a two-dimensional code is generated at a receiving party; after the two-dimensional code is scanned by a
payment party, signature is carried out by utilizing a private key pair randomized number, and information is sent to a background
management system; signature
verification is realized by the background
management system through utilizing public key pair signature information; if signature
verification succeeds, transaction is processed; for offline
payment, signature is carried out by the receiving party through utilizing the private key pair randomized number, and a two-dimensional code is generated; the two-dimensional code is scanned by the
payment party, and signature
verification is realized through public key pair signature information; if signature verification succeeds, payment is carried out by the payment party according to transaction information; signature is carried out by the payment party through utilizing the private key pair randomized number, a two-dimensional code is generated; the two-dimensional code is scanned by the receiving party, and signature verification is realized through public key pair signature information; if signature verification succeeds, payment is successfully realized for the receiving party. Through the method,
system safety is not only improved,
system disposition cost is further reduced, transaction validness is fully guaranteed, and invalid information tampering and information
steganography can be avoided.