CN107743306B - Intelligent POS machine WIFI setting method based on multi-password control and intelligent POS machine - Google Patents
Intelligent POS machine WIFI setting method based on multi-password control and intelligent POS machine Download PDFInfo
- Publication number
- CN107743306B CN107743306B CN201711157516.7A CN201711157516A CN107743306B CN 107743306 B CN107743306 B CN 107743306B CN 201711157516 A CN201711157516 A CN 201711157516A CN 107743306 B CN107743306 B CN 107743306B
- Authority
- CN
- China
- Prior art keywords
- pos machine
- wifi
- intelligent pos
- password
- administrator
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 23
- 230000008569 process Effects 0.000 abstract description 8
- 238000004891 communication Methods 0.000 abstract description 6
- 238000012795 verification Methods 0.000 description 3
- 230000008676 import Effects 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 238000013475 authorization Methods 0.000 description 1
- 230000006378 damage Effects 0.000 description 1
- 238000005429 filling process Methods 0.000 description 1
- 238000004519 manufacturing process Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000006855 networking Effects 0.000 description 1
- 238000004806 packaging method and process Methods 0.000 description 1
- 238000012545 processing Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/04—Key management, e.g. using generic bootstrapping architecture [GBA]
-
- G—PHYSICS
- G07—CHECKING-DEVICES
- G07G—REGISTERING THE RECEIPT OF CASH, VALUABLES, OR TOKENS
- G07G1/00—Cash registers
- G07G1/12—Cash registers electronically operated
- G07G1/14—Systems including one or more distant stations co-operating with a central processing unit
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/06—Authentication
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
- H04W12/08—Access security
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- Cash Registers Or Receiving Machines (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention discloses a multi-password control-based intelligent POS machine WIFI setting method and an intelligent POS machine. The scheme provided by the invention can effectively solve the problem of WIFI communication safety link in the use process of the intelligent POS machine, and guarantees the legality and safety of WIFI access through a strong authentication mode and a mode of combining administrator identification.
Description
Technical Field
The invention relates to a POS machine scheme, in particular to a WIFI setting scheme of an intelligent POS machine.
Background
At present, in the networking transaction of the intelligent POS machine, a 4G link or a WIF link is generally adopted as a communication channel, and in the WIFI link, security authentication is not basically performed, and the intelligent POS machine is directly linked to an available WIFI server, so that transaction data and data of the intelligent POS machine can be stolen.
Therefore, the prior intelligent POS machine has the following problems based on the WIFI communication of general links:
1. lawbreakers can steal user payment account passwords, personal privacy, private property and the like through fishing WiFi.
2. The intelligent POS is used as a financial payment tool, and if the intelligent POS is randomly linked to unsafe WIFI, the problems of financial transaction safety, information leakage and the like can be solved.
3. Meanwhile, the application running on the intelligent POS may have information leakage risk.
Disclosure of Invention
Aiming at the safety problem of the existing intelligent POS machine based on the WIFI link as a communication channel, a new and safe intelligent POS machine WIFI communication scheme is needed.
Therefore, the invention aims to provide the intelligent POS machine WIFI setting method based on multi-password control and the intelligent POS machine, so that the legality and safety of the intelligent POS machine accessing to WIFI are guaranteed.
In order to achieve the purpose, according to the intelligent POS machine WIFI setting method based on multi-password control, at least two managers can jointly identify and link WIFI through at least two manager passwords preset when the intelligent POS machine leaves a factory.
Further, the administrator passwords are respectively distributed to different administrators, and each administrator can only input the administrator password of the administrator.
Further, linking the corresponding WIFI is authorized by the administrator based on the administrator password.
Further, the administrator password is imported by the PC through the USB link, and the imported password is protected by the security chip.
Furthermore, the application of the multiple password authentication is built in the system of the intelligent POS machine, and the multiple password authentication cannot be uninstalled, covered and updated.
Furthermore, the password input box of the intelligent POS machine adopts out-of-order passwords.
Further, if the intelligent POS machine is damaged, the administrator password is deleted.
Further, the WIFI linking process is as follows:
(1) selecting WIFI to be linked;
(2) popping up and inputting a first administrator password box by the authentication application;
(3) popping up an input password keyboard;
(4) the authentication application checks the safety of the running state of the intelligent POS machine;
(5) and sequentially inputting and authenticating all administrator passwords, and verifying the WIFI link after the authentication is successful.
In order to achieve the above object, the present invention provides an intelligent POS machine, including a processor, a memory, and a program stored in the memory and executable on the processor, where the program is loaded by the processor and executes the steps of the above WIFI setting method for the intelligent POS machine.
The scheme provided by the invention can effectively solve the problem of WIFI communication safety link in the use process of the intelligent POS machine, and guarantees the legality and safety of WIFI access through a strong authentication mode and a mode of combining administrator identification.
Drawings
The invention is further described below in conjunction with the appended drawings and the detailed description.
FIG. 1 is a flowchart illustrating authentication application loading according to an embodiment of the present invention;
FIG. 2 is a flowchart illustrating administrator password importing according to an embodiment of the present invention;
fig. 3 is a flowchart of a WIFI link in an example of the present invention;
fig. 4 is a flowchart of destroying the authentication password according to the embodiment of the present invention.
Detailed Description
In order to make the technical means, the creation characteristics, the achievement purposes and the effects of the invention easy to understand, the invention is further explained below by combining the specific drawings.
According to the scheme, the legality and the safety when the WIFI is connected are achieved through a multi-administrator multi-password control mode.
According to the scheme, at least two administrator passwords are prefabricated through the intelligent POS machine when leaving a factory, the at least two administrator passwords are respectively distributed to different administrators, each administrator can only input the administrator password of the administrator to carry out safe operation when the intelligent POS machine is used, and each administrator is required to respectively carry out safe operation when the intelligent POS machine is used.
During specific implementation, the administrator password (namely, the corresponding authentication password) is preset by the intelligent POS machine when the intelligent POS machine leaves a factory, the administrator password is led in through a USB link in a factory safety area, the led-in password is stored in the safety area of the intelligent POS machine and protected by a safety chip, the password cannot be obtained and deleted, and the reliability of a password source is ensured.
Moreover, the application of multiple password authentication is built in the running system of the intelligent POS machine, such as an android system, and the multiple password authentication is installed along with leaving the factory, cannot be unloaded, cannot be covered, cannot be updated, and ensures the entrance safety.
Moreover, the password input box of the intelligent POS machine adopts out-of-order passwords to prevent screen recording and screen hijacking.
Moreover, if the intelligent POS machine is damaged, the protection password is deleted, so that the WIFI can not be linked.
The WIFI setting scheme that constitutes from this is identified jointly by two at least managers and is linked WIFI's security and reliability, prevents that the user from linking the appearance of action at will.
Meanwhile, the user cannot randomly link WIFI, and the link must be authorized by an administrator, so that the link to the phishing WIFI and a strange WiFi network is avoided, and the running safety of the intelligent POS machine is ensured.
Aiming at the scheme, the intelligent POS machine based on double-password control is taken as an example to explain the implementation process of WIFI setting.
The intelligent POS machine in this example performs the certification application filling first in the production process, and the whole filling process is as follows (see fig. 1):
step 1: and developing and packaging corresponding authentication application APP aiming at the requirements and functional characteristics of the intelligent POS machine.
Step 2: and integrating the packaged authentication application APP into a BIN file of a corresponding android system.
And step 3: and filling the android system integrating the authentication application APP into the corresponding intelligent POS machine.
For the intelligent POS machine filled with the android system of the integrated authentication application APP, two administrator passwords are imported before the intelligent POS machine leaves a factory, and the import process is as follows (see fig. 2):
step 1: in a factory safety area, connecting a PC to an intelligent POS machine through a USB;
step 2: sending a password writing instruction by using a PC (personal computer) end password guiding tool;
and step 3: receiving an instruction by an authentication application at the android terminal;
and 4, step 4: and the authentication application writes the password into the key protection area to finish password import.
Therefore, the intelligent POS machine sealed by two administrators can be imported for factory use.
When the intelligent POS machine is used in a factory, two passwords of the intelligent POS machine are respectively distributed to two different administrators. When in use, each administrator can only input own password to carry out security operation.
Therefore, when the intelligent POS machine is to be linked to the corresponding WIFI, the user cannot be randomly linked to the WIFI, the linking needs to be authorized by two administrators, and the safety and the reliability of the WIFI are identified and linked by the two administrators jointly.
The specific WIFI connection process is as follows (see fig. 3):
step 1: a user selects WIFI to be linked through the intelligent POS machine;
step 2: popping up and inputting a first administrator password box by an authentication application in the intelligent POS machine;
and step 3: popping up an input password keyboard, wherein the password keyboard adopts out-of-order processing;
and 4, step 4: the authentication application checks whether a screen recording application runs in the intelligent POS machine;
and 5: the authentication application checks whether a hijacking program runs in the intelligent POS machine;
step 6: after the running state of the intelligent POS machine is confirmed to be safe, a first administrator password is input by a first administrator, and after the authentication is successful, a second administrator password is prompted to be input;
and 7: inputting a second administrator password by a second administrator, and verifying the WIFI link after the authentication is successful;
and 8: and after the link is successfully connected, the intelligent POS machine safely uses WIFI.
If the intelligent POS machine is damaged in the using process, the authentication password in the intelligent POS machine is deleted. The destruction process of the authentication password is as follows (see fig. 4):
step 1: the safety chip in the intelligent POS machine detects the safety of the intelligent POS machine system in real time;
step 2: after detecting that the safety of the intelligent POS machine is damaged, the safety chip deletes all passwords;
and step 3: the authentication application does not support WIFI access in a password-free state.
According to the embodiment, the security of WIFI link can be effectively solved through double-password verification in the scheme: the verification password is stored in a safety area, and the verification password is led in after being pre-installed and cannot be tampered; moreover, when WIFI linking is carried out, two administrators need to carry out authorization operation based on two different administrator passwords to jointly evaluate risks; finally, if the intelligent POS is destroyed, the security password will be eliminated and the link will not be possible.
The foregoing shows and describes the general principles, essential features, and advantages of the invention. It will be understood by those skilled in the art that the present invention is not limited to the embodiments described above, which are described in the specification and illustrated only to illustrate the principle of the present invention, but that various changes and modifications may be made therein without departing from the spirit and scope of the present invention, which fall within the scope of the invention as claimed. The scope of the invention is defined by the appended claims and equivalents thereof.
Claims (9)
1. The intelligent POS machine WIFI setting method based on multi-password control is characterized in that at least two administrator passwords prefabricated when the intelligent POS machine leaves a factory are stored in a safety area; the intelligent POS machine is configured to require each administrator to perform safety operation respectively when in use, and when the intelligent POS machine is to be linked to corresponding WIFI, the linked WIFI is identified by at least two administrators together.
2. The WIFI setup method of claim 1, wherein administrator passwords are respectively assigned to different administrators, and each administrator can only input the administrator password of the administrator.
3. The WIFI setup method of claim 1, wherein linking the corresponding WIFI is authorized by an administrator based on an administrator password.
4. The WIFI setup method for the intelligent POS machine according to claim 1, wherein an administrator password is imported by the PC through a USB link, and the imported password is protected by the security chip.
5. The WIFI setup method of claim 1, wherein the multiple password authentication applications are built in the system of the intelligent POS, and cannot be uninstalled, covered or updated.
6. The WIFI setup method of the intelligent POS machine according to claim 1, wherein the password input box of the intelligent POS machine adopts an out-of-order password.
7. The WIFI setup method of claim 1, wherein if the POS is destroyed, the administrator password is deleted.
8. The WIFI setting method of the intelligent POS machine according to claim 1, wherein the WIFI link flow is as follows:
(1) selecting WIFI to be linked;
(2) popping up and inputting a first administrator password box by the authentication application;
(3) popping up an input password keyboard;
(4) the authentication application checks the safety of the running state of the intelligent POS machine;
(5) and sequentially inputting and authenticating all administrator passwords, and verifying the WIFI link after the authentication is successful.
9. Intelligent POS machine comprising a processor, a memory and a program stored on the memory and executable on the processor, characterized in that the program is loaded by the processor and performs the steps of the intelligent POS machine WIFI setup method according to any one of claims 1 to 8.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711157516.7A CN107743306B (en) | 2017-11-20 | 2017-11-20 | Intelligent POS machine WIFI setting method based on multi-password control and intelligent POS machine |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201711157516.7A CN107743306B (en) | 2017-11-20 | 2017-11-20 | Intelligent POS machine WIFI setting method based on multi-password control and intelligent POS machine |
Publications (2)
Publication Number | Publication Date |
---|---|
CN107743306A CN107743306A (en) | 2018-02-27 |
CN107743306B true CN107743306B (en) | 2021-08-24 |
Family
ID=61238799
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201711157516.7A Active CN107743306B (en) | 2017-11-20 | 2017-11-20 | Intelligent POS machine WIFI setting method based on multi-password control and intelligent POS machine |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN107743306B (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN115460464B (en) * | 2022-09-29 | 2023-07-25 | 成都长虹网络科技有限责任公司 | Method for realizing quick access after factory restoration of set top box |
Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102271035A (en) * | 2011-09-02 | 2011-12-07 | 华为技术有限公司 | Password transmission method and device |
CN103580855A (en) * | 2013-11-07 | 2014-02-12 | 江南大学 | Usbkey management plan based on sharing technology |
CN102571349B (en) * | 2011-12-29 | 2015-02-11 | 北京握奇数据系统有限公司 | Information updating method for smart key, smart key and system |
US8984636B2 (en) * | 2005-07-29 | 2015-03-17 | Bit9, Inc. | Content extractor and analysis system |
CN105656621A (en) * | 2014-11-12 | 2016-06-08 | 江苏威盾网络科技有限公司 | Safety management method for cryptographic device |
CN106664556A (en) * | 2014-08-19 | 2017-05-10 | 高通股份有限公司 | Network access authentication with point-of-sale devices |
CN107276983A (en) * | 2017-05-12 | 2017-10-20 | 西安电子科技大学 | A kind of the traffic security control method and system synchronous with cloud based on DPI |
Family Cites Families (3)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN100481032C (en) * | 2007-04-06 | 2009-04-22 | 北京理工大学 | USB interface lock based on double-USB key apparatus |
US10360362B2 (en) * | 2014-04-30 | 2019-07-23 | Qualcomm Incorporated | Apparatuses and methods for fast onboarding an internet-enabled device |
CN106059771A (en) * | 2016-05-06 | 2016-10-26 | 上海动联信息技术股份有限公司 | Intelligent POS machine secret key management system and method |
-
2017
- 2017-11-20 CN CN201711157516.7A patent/CN107743306B/en active Active
Patent Citations (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8984636B2 (en) * | 2005-07-29 | 2015-03-17 | Bit9, Inc. | Content extractor and analysis system |
CN102271035A (en) * | 2011-09-02 | 2011-12-07 | 华为技术有限公司 | Password transmission method and device |
CN102571349B (en) * | 2011-12-29 | 2015-02-11 | 北京握奇数据系统有限公司 | Information updating method for smart key, smart key and system |
CN103580855A (en) * | 2013-11-07 | 2014-02-12 | 江南大学 | Usbkey management plan based on sharing technology |
CN106664556A (en) * | 2014-08-19 | 2017-05-10 | 高通股份有限公司 | Network access authentication with point-of-sale devices |
CN105656621A (en) * | 2014-11-12 | 2016-06-08 | 江苏威盾网络科技有限公司 | Safety management method for cryptographic device |
CN107276983A (en) * | 2017-05-12 | 2017-10-20 | 西安电子科技大学 | A kind of the traffic security control method and system synchronous with cloud based on DPI |
Also Published As
Publication number | Publication date |
---|---|
CN107743306A (en) | 2018-02-27 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN112513857B (en) | Personalized cryptographic secure access control in trusted execution environments | |
US9306954B2 (en) | Apparatus, systems and method for virtual desktop access and management | |
CA2838763C (en) | Credential authentication methods and systems | |
US7780080B2 (en) | Portable device and methods for performing secure transactions | |
CN107430658B (en) | Security software certification and verifying | |
CN105934751B (en) | Data erasure for target devices | |
CN107563213B (en) | Safety secrecy control device for preventing data extraction of storage equipment | |
CN103069384A (en) | Host device and method for securely booting the host device with operating system code loaded from a storage device | |
CN105531710A (en) | Method of authorizing an operation to be performed on a targeted computing device | |
CN105531664A (en) | Mobile communication device and method of operating thereof | |
CN104182695B (en) | The system and method guaranteeing the confidentiality of information used by authentication vs. authorization during the operation | |
KR102695457B1 (en) | A secure element for processing a digital key and operation metho thereof | |
CN109086578A (en) | A kind of method that soft ware authorization uses, equipment and storage medium | |
CN105247833B (en) | Self-certified apparatus and method for | |
CN104850764A (en) | Smart card based software protection method and system | |
US11190356B2 (en) | Secure policy ingestion into trusted execution environments | |
EP3001341B1 (en) | NFC device, software installation method, software uninstallation method, computer program and article of manufacture | |
EP3387605B1 (en) | Interception of touch pad events for handling in a secure environment | |
EP3850512B1 (en) | Server and method for identifying integrity of application | |
CN106548097A (en) | The operation method and device of network device software | |
CN110633172A (en) | USB flash disk and data synchronization method thereof | |
CN107743306B (en) | Intelligent POS machine WIFI setting method based on multi-password control and intelligent POS machine | |
US11593780B1 (en) | Creation and validation of a secure list of security certificates | |
Lee et al. | A study on a secure USB mechanism that prevents the exposure of authentication information for smart human care services | |
CN102831468A (en) | Intelligent card chip of mobile terminal as well as initialization and use method thereof |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |