CN120316800A

CN120316800A - A method for protecting data transmission during POS personalization

Info

Publication number: CN120316800A
Application number: CN202510482084.5A
Authority: CN
Inventors: 徐春晖
Original assignee: Shandong Kumi Information Technology Co ltd
Current assignee: Shandong Kumi Information Technology Co ltd
Priority date: 2025-04-17
Filing date: 2025-04-17
Publication date: 2025-07-15

Abstract

The present invention relates to the field of information technology, and in particular to a method for protecting data transmission during POS personalization. The method comprises the following steps: in the production process of POS equipment, an asymmetric key pair is automatically generated by a secure area inside the POS equipment; the upper computer software reads the public key of the POS equipment and transmits the public key to the production background; the production background decrypts the sensitive data stored in the database through an encryption machine to obtain plaintext sensitive data; the production background encrypts the plaintext sensitive data using the public key of the POS equipment to generate secondary encrypted data; the secondary encrypted data is transmitted to the POS equipment through the upper computer software; the POS equipment decrypts the secondary encrypted data using the private key stored in its secure area, obtains the plaintext sensitive data and completes the personalized configuration. The present invention realizes the full ciphertext transmission of data from the production background to the POS equipment through asymmetric key technology, secondary encryption mechanism and integrity verification, and significantly improves the security of the personalization process.

Description

Method for protecting data transmission during POS individuation

Technical Field

The invention relates to the technical field of information, in particular to a method for protecting data transmission during POS personalization.

Background

POS (point of sale) devices are used as core tools for financial transactions, and personalized configuration links in the production and manufacturing process involve the transfer of sensitive data, such as Serial Numbers (SN), encryption keys, and the like. In the traditional personalized process, sensitive data is usually stored in an encryption database of a production background, and encryption protection is carried out by depending on an encryption machine. In the personalized process, the production background needs to decrypt the sensitive data through the encryption machine, and then the decrypted plaintext data is transmitted to the upper computer software through a network, a serial port or a USB interface, and finally written into the POS equipment. Although the method has the convenience of operation, the data transmission link has obvious potential safety hazard that sensitive data is exposed to the transmission link in a plaintext form after being decrypted by an encryption machine, and is easy to be intercepted maliciously or stolen, and particularly, the data leakage risk is extremely high in the network transmission or physical interface communication process.

In the prior art, although the problem of data security is partially alleviated by encrypting the storage and transmission link (such as SSL/TLS), the core problem is that the decrypted sensitive data still needs to be transmitted in a plaintext form for the second time. For example, the encrypted data may be stored in the production background memory briefly or may flow through an incompletely protected communication channel before being transferred to the POS device, which provides a multiplicative opportunity for threats such as man-in-the-middle attacks, memory theft, etc. In addition, the traditional method relies on a single encryption level, lacks a dynamic protection mechanism for a transmission link, and is difficult to adapt to a financial equipment production scene with high security requirements.

Disclosure of Invention

The invention provides an innovative data transmission protection scheme, which realizes the whole-course ciphertext transmission of data from a production background to POS equipment through an asymmetric key technology, a secondary encryption mechanism and integrity verification, and remarkably improves the security of a personalized process.

The technical scheme adopted by the invention is that the method for protecting data transmission during POS individuation comprises the following steps:

in the production process of the POS equipment, an asymmetric key pair is automatically generated by a safety area inside the POS equipment, wherein the asymmetric key pair comprises a public key and a private key, and the private key is only stored in the safety area of the POS equipment and is not leaked outside;

Reading a public key of the POS equipment by upper computer software, and transmitting the public key to a production background;

Decrypting the sensitive data stored in the database by the production background through the encryption machine to obtain plaintext sensitive data;

Encrypting the plaintext sensitive data by using a public key of the POS equipment by a production background to generate secondary encrypted data;

step five, transmitting the secondary encryption data to the POS equipment through upper computer software;

Step six, the POS equipment decrypts the secondary encrypted data by utilizing a private key stored in a safe area of the POS equipment to obtain plaintext sensitive data and complete personalized configuration;

The sensitive data always exist in a ciphertext form in the transmission process of the third step to the sixth step.

As a further improvement of the present invention, the asymmetric key algorithm is selected from one of RSA, ECC, DSA, and the key length satisfies RSA2048 and ECC256 strength.

In the fourth step, the production background generates a HASH digest value for the plaintext sensitive data and transmits the HASH digest value and the secondarily encrypted data to the POS device, and after the POS device decrypts, the POS device regenerates the digest value for the plaintext sensitive data by the same HASH algorithm and compares the digest value with the received HASH digest value to verify the integrity of the data.

As a further improvement of the present invention, the HASH algorithm is selected from one of SHA1, SHA256, SM 3.

As a further improvement of the invention, the asymmetric key pair is dynamically generated by the POS device in an initialization phase and automatically destroyed after the personalized configuration is completed.

As a further improvement of the present invention, the secure area is a Hardware Security Module (HSM), a Trusted Execution Environment (TEE), for ensuring physical isolation and tamper resistance of the private key.

As a further improvement of the invention, the transmission path of the secondary encryption data comprises one or more of a network, a serial port and a USB interface, and the data is kept in a ciphertext state in the transmission process.

As a further improvement of the invention, an isolated communication protocol is adopted between the encryptor and the production background, and the key management of the encryptor accords with the financial-level security standard.

In the third step, the decryption operation of the encryptor on the sensitive data and the encryption transferring operation in the fourth step are continuously executed in the secure sandbox, so that the exposure of the plaintext sensitive data to the memory in the production background is avoided.

As a further improvement of the invention, the method is suitable for the mass production scene of POS equipment, and supports the parallel execution of personalized configuration of a plurality of POS equipment.

The invention has the beneficial effects that by means of an asymmetric encryption technology, dynamic key management and a whole-course ciphertext transmission mechanism, the security of the whole link of sensitive data in the personalized POS process is ensured, meanwhile, the efficient production and the cost optimization are considered, the risk of data leakage caused by plaintext exposure in the traditional method is thoroughly eliminated, the parallel processing and flexible adaptation of multiple devices are supported, and a solution with high security and high reliability is provided for the manufacture of financial equipment.

Drawings

Fig. 1 is a block diagram of a method of protecting data transfer during POS personalization in accordance with the present invention.

Detailed Description

In order to make the technical problems, technical schemes and beneficial effects to be solved more clear, the application is further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the embodiments described herein are merely illustrative of the present application and are not intended to limit the present application.

The invention provides a method for protecting data transmission during POS individuation, which comprises the following steps:

In the production process of the POS equipment, an asymmetric key pair is automatically generated by a safety area inside the POS equipment, wherein the asymmetric key pair comprises a public key and a private key, and the private key is only stored in the safety area of the POS equipment and is not leaked;

Step two, the upper computer software reads the public key of the POS equipment and transmits the public key to the production background;

encrypting the plaintext sensitive data by using a public key of the POS equipment at the production background to generate secondary encrypted data;

step five, the secondary encryption data are transmitted to POS equipment through upper computer software;

The POS equipment decrypts the secondary encrypted data by utilizing a private key stored in a safe area of the POS equipment to obtain plaintext sensitive data and complete personalized configuration;

the sensitive data always exist in the form of ciphertext in the transmission process of the third step to the sixth step.

The asymmetric key algorithm is selected from RSA, ECC, DSA, and the key length meets RSA2048 and ECC256 strength.

In the fourth step of the invention, the production background generates the HASH digest value for the plaintext sensitive data and transmits the HASH digest value and the secondary encrypted data to the POS equipment, and after the POS equipment decrypts, the HASH digest value is regenerated for the plaintext sensitive data by the same HASH algorithm and is compared with the received HASH digest value so as to verify the integrity of the data.

The HASH algorithm is selected from one of SHA1, SHA256 and SM 3.

The asymmetric key pair is dynamically generated by the POS equipment in an initialization stage, and is automatically destroyed after personalized configuration is completed.

The security area is a Hardware Security Module (HSM) and a Trusted Execution Environment (TEE) and is used for ensuring the physical isolation and tamper resistance of the private key.

The transmission path of the secondary encryption data comprises one or more of a network, a serial port and a USB interface, and the data is kept in a ciphertext state in the transmission process.

In the invention, an isolated communication protocol is adopted between the encryption machine and the production background, and the key management of the encryption machine accords with the financial security standard.

In the third step of the invention, the decryption operation of the encryption machine on the sensitive data and the encryption transferring operation in the fourth step are continuously executed in the safe sandbox, so that the exposure of the plaintext sensitive data to the memory of the production background is avoided.

The method is suitable for the mass production scene of the POS equipment, and supports the parallel execution of personalized configuration of a plurality of POS equipment.

Examples:

The implementation scenario is that a financial device manufacturing enterprise needs to perform personalized configuration on a batch of POS devices, wherein the personalized configuration comprises sensitive data such as a written device Serial Number (SN), a transaction key and the like. The conventional method has the risk of data leakage, so the secure transmission method is adopted.

The specific implementation steps are as follows:

Step one (generation and storage of asymmetric Key pair)

When the production line is started, each POS device is automatically called a Hardware Security Module (HSM) in an initialization stage, and RSA2048 asymmetric key pairs (a public key PK and a private key SK) are dynamically generated.

The private key SK is permanently stored in a secure storage area of the HSM and external access is forbidden, and the public key PK is read by upper computer software through serial communication.

Step two (public key transfer to production background)

The upper computer software transmits the public key PK to the production background server through the encrypted USB channel, and records the unique identifier (such as the MAC address) of the corresponding POS equipment.

Step three, step four (decryption and encryption of sensitive data)

The production background extracts the sensitive data (such as SN and master key MK) to be written into the POS device from the encryption database, and decrypts the sensitive data into plaintext data by using an AES-256 key through a financial-grade encryptor (conforming to PCIDSS standard).

Immediately in a secure sandbox environment, RSA encryption is carried out on the plaintext data by using the public key PK of the POS equipment, and secondary encrypted data C1 is generated.

Meanwhile, the SHA256 digest value H1 is calculated for the plaintext data and C1 and H1 are bound to the data packet.

Step five (secure transmission of encrypted data)

The data packet (c1+h1) is transmitted to the host software via the isolated network (using TLS1.3 protocol) and then sent to the corresponding POS device via the USB interface.

Step six (data decryption and integrity verification)

The HSM of the POS device decrypts the C1 by using the private key SK and restores the C1 into plaintext data.

The SHA256 digest value H2 is recalculated for the decrypted plaintext data and compared to the received H1. If H1 = H2, the verification is passed, the plaintext data is written into the safe storage area of the equipment, if not, an alarm is triggered and the configuration flow is terminated.

Key destruction and batch processing (extended implementation)

After personalized configuration is completed, the HSM of the POS equipment automatically destroys the dynamically generated private key SK, so that the temporary property of the key is ensured.

And a plurality of POS devices on the production line execute the flow in parallel, and the upper computer software manages public key transmission and data packet distribution of each device through a task queue, so that high-efficiency mass production is realized.

Key parameters and configuration examples:

(1) Asymmetric encryption algorithm RSA2048 (default) or ECC256 (applicable to low power devices)

(2) HASH algorithm SHA256 (default) or SM3 (adapting to domestic password standard scenario).

(3) The security area is realized by adopting an Infrax SLM97 series HSM chip to support physical tamper resistance and side channel attack protection.

(4) Encryptor protocol the encryptor communicates with the hardware encryption channel authenticated by the FIPS140-2 in the production background.

And (3) effect verification:

(1) The security is that the sensitive data in the transmission link is ciphertext in the whole course, even if the network is monitored or the USB interface is intercepted, an attacker can only acquire RSA encrypted data and HASH abstract and cannot restore plaintext.

(2) The efficiency is that the parallel processing capacity of 100 stations/hour is supported, and the key management bottleneck is avoided by a key dynamic generation and destruction mechanism.

(3) Compliance, meeting the requirements of the financial industry PCIPIN Security and GM/T0054-2018 standard.

Summarizing, the embodiment shows the application of the invention in POS equipment mass production through a specific operation flow, verifies the advantages of the POS equipment mass production in the aspects of high safety, high efficiency and compliance, and provides a reliable solution for financial equipment manufacture.

In summary, the method for protecting data transmission during POS personalization of the present invention fully considers production efficiency and cost effectiveness while ensuring data transmission security. By adopting the asymmetric key technology, the invention not only realizes the whole ciphertext transmission of the sensitive data, but also further enhances the safety and reliability of the data transmission through a dynamic key management and integrity checking mechanism. In addition, the method also supports the parallel execution of personalized configuration of a plurality of POS devices, and the production efficiency is obviously improved. In the aspect of cost, although some advanced security technologies and hardware modules are introduced, the overall cost is effectively reduced by optimizing key management and transmission flow, so that the scheme has wide application prospect in the field of financial equipment manufacturing. In a word, the invention provides an innovative data transmission protection scheme, provides a solution with high safety, high efficiency and compliance for the manufacture of financial equipment, and has great practical significance and popularization value.

The foregoing embodiments are merely for illustrating the technical solution of the present invention, but not for limiting the same, and although the present invention has been described in detail with reference to the foregoing embodiments, it will be understood by those skilled in the art that modifications may be made to the technical solution described in the foregoing embodiments or equivalents may be substituted for parts of the technical features thereof, and such modifications or substitutions do not depart from the spirit and scope of the technical solution of the embodiments of the present invention.

Claims

1. A method for protecting data transmission during POS personalization, characterized by comprising the following steps:

Step 1: During the production process of the POS device, an asymmetric key pair is automatically generated by the secure area inside the POS device. The asymmetric key pair includes a public key and a private key, and the private key is only stored in the secure area of the POS device and is not disclosed to the outside.

Step 2: The host computer software reads the public key of the POS device and transmits the public key to the production background;

Step 3: The production backend uses an encryption machine to decrypt the sensitive data stored in the database to obtain the plaintext sensitive data;

Step 4: The production backend uses the public key of the POS device to encrypt the plaintext sensitive data to generate secondary encrypted data;

Step 5: Transmitting the secondary encrypted data to the POS device via the host computer software;

Step 6: The POS device uses the private key stored in its secure area to decrypt the secondary encrypted data, obtains the plaintext sensitive data and completes the personalized configuration;

The sensitive data always exists in ciphertext form during the transmission process from step three to step six.

2. The method for protecting data transmission during personalization of a POS according to claim 1, wherein the asymmetric key algorithm is selected from one of RSA, ECC, and DSA, and the key length meets the strength of RSA2048 and ECC256.

3. According to the method for protecting data transmission during POS personalization described in claim 1, it is characterized in that in the step 4, the production background generates a HASH summary value for the plaintext sensitive data, and transmits the HASH summary value and the secondary encrypted data to the POS device together; after the POS device decrypts, the summary value of the plaintext sensitive data is regenerated through the same HASH algorithm, and compared with the received HASH summary value to verify the data integrity.

4. A method for protecting data transmission during POS personalization according to claim 3, characterized in that the HASH algorithm is selected from one of SHA1, SHA256, and SM3.

5. The method for protecting data transmission during POS personalization according to claim 1, characterized in that the asymmetric key pair is dynamically generated by the POS device during the initialization phase and is automatically destroyed after the personalized configuration is completed.

6. A method for protecting data transmission during POS personalization according to claim 1, characterized in that the security area is a hardware security module (HSM) and a trusted execution environment (TEE) for ensuring physical isolation and tamper-proofing of private keys.

7. A method for protecting data transmission during POS personalization according to claim 1, characterized in that the transmission path of the secondary encrypted data includes one or more of the network, serial port, and USB interface, and the data remains in a ciphertext state during the transmission process.

8. A method for protecting data transmission during POS personalization according to claim 1, characterized in that an isolated communication protocol is used between the encryption machine and the production background, and the key management of the encryption machine complies with financial-grade security standards.

9. A method for protecting data transmission during POS personalization according to claim 1, characterized in that in the step 3, the decryption operation of the encryption machine on the sensitive data and the encryption operation in step 4 are continuously performed in a secure sandbox to prevent the plaintext sensitive data from being exposed to the memory of the production background.

10. A method for protecting data transmission during POS personalization according to claim 1, characterized in that the method is applicable to mass production scenarios of POS devices and supports multiple POS devices to execute personalized configuration in parallel.