KR20130082845A - Automatic teller machine for generating a master key and method employing the same - Google Patents

Abstract

The present invention relates to a financial automated device capable of generating a master key for use in a financial automated device and a method for implementing the same. An embodiment of the present invention provides a method for generating a master key through communication between a host, an IC card, or a SAM by an automated teller machine, the method comprising: performing authentication between the host and an IC card or a SAM; Requesting a first master key from the host when the authentication is completed, requesting a second master key from the IC card or SAM, and receiving the first master key and the second master key; Generating a third master key; Calculating a fourth master key by performing a predetermined operation on the first master key, the second master key, and the third master key; And synchronizing by transmitting the fourth master key to the host. As such, the security can be improved through a financial automation device capable of generating a master key at a key injection time and a method of implementing the same.

Description

AUTOMATIC TELLER MACHINE FOR GENERATING A MASTER KEY AND METHOD EMPLOYING THE SAME}

The present invention relates to a financial automation device capable of generating a master key used in a financial device and a method of implementing the same.

Conventionally, two persons in charge of the master key of the automated teller machine (for example, ATM) are divided and injected at the site, so the risk of master key leakage by the person in charge and the other person at the time of injection There was a problem that can not exclude the possibility of hacking.

The present invention is to solve the above problems, and provides a financial automation device capable of generating a master key to improve the security of the master key used in the financial device and a method for implementing the same.

One aspect of the present invention is a method for generating a master key through communication between a host, an IC card, or a SAM by an automated teller machine, the method comprising: performing authentication between the host and an IC card or a SAM; Requesting a first master key from the host when the authentication is completed, requesting a second master key from the IC card or SAM, and receiving the first master key and the second master key; Generating a third master key; Calculating a fourth master key by performing a predetermined operation on the first master key, the second master key, and the third master key; And synchronizing by transmitting the fourth master key to the host.

According to another aspect of the present invention, there is provided an automatic teller machine for generating a master key through communication between a host, an IC card, or a SAM. A communication unit for receiving a first master key and a second master key by requesting a first master key from the host and requesting a second master key from the IC card or SAM when the authentication is completed; And an operation unit configured to generate a third master key and perform a predetermined operation on the first master key, the second master key, and the third master key to calculate a fourth master key. It is characterized in that the transmission to the host to synchronize.

According to the present invention, security can be improved by generating a master key at the time of injecting a key into the automated teller machine according to the present invention.

Figure 1 (a) is a block diagram showing a financial automation device capable of generating a master key using an IC card according to an embodiment of the present invention.
Figure 1 (b) is a block diagram showing a financial automation device capable of generating a master key using a SAM according to another embodiment of the present invention.
2 is a flowchart illustrating a master key generation method according to an embodiment of the present invention.
3 is a swimlane diagram showing a master key generation method according to an embodiment of the present invention.

Hereinafter, some embodiments of the present invention will be described in detail with reference to exemplary drawings. In adding reference numerals to the components of each drawing, it should be noted that the same reference numerals are assigned to the same components as much as possible even though they are shown in different drawings. In the following description of the embodiments of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the difference that the embodiments of the present invention are not conclusive.

In describing the components of the embodiment of the present invention, terms such as first, second, A, B, (a), and (b) may be used. These terms are intended to distinguish the constituent elements from other constituent elements, and the terms do not limit the nature, order or order of the constituent elements. When a component is described as being "connected", "coupled", or "connected" to another component, the component may be directly connected or connected to the other component, Quot; may be "connected," "coupled," or "connected. &Quot;

The present invention relates to the generation of a master key for use in a financial device, wherein the financial device is obtained by receiving various media such as banknotes, securities, giro, coins, gift certificates, etc. And / or a device for performing financial operations such as withdrawal processing, release of giro, release of gift certificates, etc. Examples of such a financial device may be an ATM (Automatic Teller Machine) such as a cash dispenser (CD), a cash recycling device (Cash Recycling Device). However, the financial device is not limited to the above-described example, and may be a device for automating financial tasks such as a financial information system (FIS). Hereinafter, an embodiment of the present invention will be described on the assumption that the financial device is an ATM. However, this assumption is only for convenience of explanation, and the technical idea of the present invention is not limited to the financial automation equipment.

Figure 1 (a) is a block diagram showing a financial automation device capable of generating a master key using an IC card according to an embodiment of the present invention. The automated teller machine 300 can communicate with the host 100 and the IC card 500 via a network, and the automated teller machine 300 includes an authentication unit 320, an operation unit 330, a communication unit 340, and a KEY. Device (EPP) 350 and a control unit 310 for controlling them.

The host 100 performs a function of managing a master key and processing a transaction with the automated teller machine 300. The host 100 is a kind of management server, which enables two-way communication with other computing devices through a network. The host 100 according to an embodiment of the present invention refers to a host of a specific bank that provides the automated teller machine 300. In the present invention, the host 100 generates a public key and a secret key for an IC card that can be used as a master key, and encrypts a part of the master key with a host key (Host Key or Hkey) to inject the IC card 500 into a host key. Do this. As another example, this function may be implemented to be performed in an authentication center other than the host 100.

As described above, the financial automatic device 300 performs a cash withdrawal operation as a cash automated device, and is connected to the host 100 and the IC card 500 to allow two-way communication.

In one embodiment of the present invention, the authentication unit 320 transmits and receives data necessary for authentication so that the host 100 and the IC card 500 are authenticated to generate a master key, and the authentication is successful when the data matches. Receive the result. The communication unit 340 transmits and receives data from the host 100 and the IC card 500, requests data corresponding to a part of the master key from the host and the IC card having a part of the master key when the master key is generated, and requests the data. Receive The calculation unit 330 calculates a master key for the corresponding financial automation device by performing a predetermined operation on some data of the collected master key.

The key storage device 350 may be of various types, but as an embodiment of the present invention, an encryption pin pad (EPP) will be described. EPP is a type of pinpad module that adopts DES (Data Encryption Standard) algorithm. It is integrated in the password input pinpad. EPP is installed in an automated device to process data such as user's password. In the present invention, the key storage device 350 stores and encrypts the master key and transmits the master key to the host 100 to synchronize the master key.

IC card 500 is an electronic credit card that can contain a large amount of information by mounting an integrated circuit memory element refers to any card that has at least one IC. In general, it is applied to electronic money and telephone cards, and can record data 100 times closer than magnetic cards, and also has the strength in terms of security since data can be encrypted. The IC card is divided into "contact" and "contactless" according to the difference in the way of reading and writing data.The contact card acquires data through the contact (terminal) installed on the card side, and the contactless card has a built-in antenna. It communicates with terminal by weak electric wave. Magnetic stripe can be inserted into the IC card, so it can also be used with a magnetic card. Therefore, an IC card having a function of a credit card that has been widely used is widely used. In the present invention, the IC card includes not only a plastic card but also a small chip of SIM type that can be mounted on a mobile communication terminal. The IC card 500 according to an embodiment of the present invention stores the IC public key, secret key, and master key related information issued to the host, and performs encryption and decryption functions.

In the master key generation system according to an embodiment of the present invention, in the case of using an IC card as shown in FIG. 1A, a public key and a secret key for the IC are first used in a host or authentication center in the IC card 500. Create and inject Subsequently, when the master key is inserted into the specific automatic teller machine 300, authentication is performed between the IC card 500 and the host 100, and if the authentication is successful, the host 500 having a part of the master key, respectively. And collecting respective master keys from the automated teller machine 300 and the IC card 500, and performing a predetermined operation on the keys collected by the automated teller machine 300 to calculate a master key for the corresponding automated teller machine. And save.

Figure 1 (b) is a block diagram showing a financial automated device 300 capable of generating a master key using the SAM 400 mounted on the automated teller machine 300 according to another embodiment of the present invention. The automated teller machine 300 can communicate with the host 100 and the IC card 500 via a network, and the automated teller machine 300 includes an authentication unit 320, an operation unit 330, a communication unit 340, and a KEY. Device (EPP) 350 and a control unit 310 for controlling them. The functions of the host 100, the automated teller machine 300, and the components 310, 320, 330, 340, and 350 included in the teller machine are the same as those described with reference to FIG. 1A. In this example, the SAM 400 performs a function performed by the IC card 500 of the above example.

The SAM 400 is called a secure application module or a secure access module, and is generally installed inside the IC card reader to authenticate the IC card and the corresponding terminal and encrypt communication data. Do this. Encryption also prevents information disclosure and authenticates and verifies communication messages. SAM exists mainly in the form of hardware, but may also exist in the form of software. In the present embodiment, the SAM 400 may perform the same operation as described in FIG. 1 without the IC card because the SAM chip is mounted in the SAM module when the ATM is initially installed. For example, when a key is injected (recognized) into the key storage device (EPP), the SAM chip operates to perform authentication between the host 100 and the SAM 400. If authentication is successful, the automated teller machine 300 collects each master key from the host 500, the automated teller machine 300, and the SAM 400, each having a part of the master key, and the automated teller machine 300 A predetermined operation is performed on the collected keys to generate a master key for the corresponding automated teller machine. As another embodiment, the master key-related data stored in the key (eg, data stored in the key in the form of an IC card) is transmitted to the SAM and stored, and then may be implemented to perform an authentication operation. At this time, the SAM 400 receives and stores the data of the key possessed by the person in charge, and then performs the same operation as the IC card 500 of FIG.

2 is a flowchart illustrating a master key generation method according to an embodiment of the present invention. Specifically, for the master key to be generated, the host 100, the automated teller machine 300 (shown as ATM in FIG. 2 as an embodiment), and the IC card 500 (or SAM 400) are master keys, respectively. You have a part of it. When the automated teller machine 300 requests, each key is collected to generate a master key.

2 illustrates a master key generation method using the IC card 500 described with reference to FIG. 1A, but the same master key generation method may be performed through the SAM 400 instead of the IC card 500. I will understand that.

The master key generation method according to the present embodiment starts from the authentication of the host 100 and the IC card 500 (S21). Although there are various authentication methods, the present invention adopts a public key algorithm. It uses two pairs of keys (public key and private key). A public key is a public key that is made known to others, and a private key is only The key that keeps you informed. The encryption key (public key) with encryption method and the decryption key (secret key) that decrypts the encryption are disclosed to the outside, and the other party sends the information using the public encryption key, and he / she has only his own decryption. The key can be used to decrypt the received information. The advantage of this public key cryptography method is that there is no need to pass the secret key and the information can be kept confidential. Authentication using the encryption method is performed between the host 100 and the IC card 500, which will be described in more detail with reference to FIG.

If the authentication is successful (S22), the process of generating a master key between the three characters of the automated teller machine 300, the host 100 and the IC card 500 is performed. In the following description, the encryption and decryption processes have been omitted and described in detail. First, the automated teller machine 300 requests the first master key from the host 100 (S23). Then, the automated teller machine 300 requests the second master key from the IC card 500, where the second master key refers to a key previously injected into the IC card by the host 100 (S24). If the automated teller machine 300 receives the first master key and the second master key, it proceeds to the step of generating the third master key (S26). If the first master key and the second master key are not received, request again. Here, the first master key, the second master key and the third master key are random values generated by an application for driving the automated teller machine. Since the three values must be non-inferred, they are assigned random values.

The automated teller machine 300 collects all of the first master key received from the host 100, the second master key received from the IC card 500, and the third master key generated by the automated teller machine 300, An XOR operation is performed (S27). The result value generated through the XOR operation is stored as a fourth master key, which is a master key for the corresponding ATM. The reason for this process is to generate a master key at the time of key injection. That is, a part of the key is distributed and stored, and the operation is performed at the time of injecting the key (in this example, the IC card 500) into the ATM. A master key (fourth master key in this example) is generated. Through this process, the master key can be prevented from being leaked by the person in charge, and the possibility of hacking by other people can be reduced.

3 is a swimlane diagram showing a master key generation method according to an embodiment of the present invention. 3 illustrates an authentication process and a master key generation method between the host 100, the automated teller machine 300, and the IC card 500 (or SAM 400). Here, the functions performed by the host 100 may be performed by other servers such as an authentication center or a key issuing center, but in this embodiment, the host 100 will be described as being performed by the host 100. Denotes ATM in this example. In addition, the master key 1, the master key 2, the master key 3, and the master key in FIG. 3 correspond to the first master key, the third master key, the second master key, and the fourth master key, respectively, in the embodiment described with reference to FIG. . It will also be appreciated that the SAM 400 may be implemented to perform the functions performed by the IC card 500 as in FIG. 2.

Before performing the master key generation method of FIG. 3, the host 100 may inject the IC key 500 into the IC card 500 by encrypting and injecting Master key 3 with a host key (Hkey), thereby generating a public key and a secret key for the IC card. Can be injected.

The steps that take place at the time the person in charge then injects the IC card 500 key are shown in FIG. 3. First, when the IC card 500 is inserted into the reader mounted in the ATM, the ATM requests the IC card ID and receives it from the IC card 500. ATM receives the IC card ID and sends it to the host, requesting authentication. The host encrypts a random number using the public key of the corresponding ID (in this example, C = E (random, IC public key)) and passes it to the ATM, and the ATM sends it to the IC card 500. To pass. The IC card 500 may receive the random number by decoding the received data with the IC card's secret key. The IC card 500 transmits the random number again as a host random value, and the host that receives the verification verifies whether the received random number matches the random number generated by the host at first.

Then repeat the above steps in reverse. First, the IC card 500 generates a random number (IC random), generates and transmits it to an encrypted (C = E (IC random, host's public key) ATM) ATM with a host public key, and the ATM forwards it to the host. The received data can be decrypted with a host secret key to obtain an IC's random number generated by the IC The IC random number is then transmitted to the IC card 500 via ATM and the received IC card 500 is received. ) Performs verification by determining whether the IC card matches the random number generated, and when the verification is completed, it is determined that the authentication is successful, and proceeds to the master key generation step.

When the ATM requests the Host Key (Hkey) and the Master key1, the host 100 encrypts the Host key and the Master key1 with the public key of the ATM and transmits them. The ATM decrypts and stores the host key and master key 1 received with its private key. In addition, the ATM transmits the host key encrypted with the IC public key to the IC card and requests the master key3. Upon receiving the request, the IC card decrypts and obtains the master key 3 with the received host key, and encrypts the master key 3 with the ATM public key and sends it to the ATM.

ATM receives and stores Masterkey1 and Masterkey3 and generates Masterkey2. The ATM performs a predetermined operation on the collected master key 1, master key 2 and master key 3. In an embodiment of the present invention, an exclusive OR operation is performed. The ATM stores the result obtained by performing the operation (Master key1) XOR (Master key2) XOR (Master key3) as a master key (fourth master key of FIG. 2). The master key generated as described above is stored in the key storage device 350, and the master key is encrypted with the host public key and transmitted to the host. The host decrypts the received master key with its own private key and stores the master key as a master key for the corresponding ATM to perform synchronization between the ATM's key storage device (EPP) and the host. As described above, by distributing and storing the key and performing the process of generating the key at the time of injecting the key, security can be improved.

This process allows the master key to remain unchanged unless the security module is changed (eg, a failure of the EPP or a new model, etc.) after the master key has been stored. If the master key is re-injected, the master key 1 of the host and the master key 2 of the ATM are changed at each re-injection, so it is not necessary to renew the master key 3 of the host IC card.

While the present invention has been described in connection with what is presently considered to be the most practical and preferred embodiment, it is to be understood that the invention is not limited to the disclosed embodiments. In other words, within the scope of the present invention, all of the components may be selectively operated in combination with one or more. In addition, although all of the components may be implemented as one independent hardware, some or all of the components may be selectively combined to perform a part or all of the functions in one or a plurality of hardware. As shown in FIG. Codes and code segments constituting the computer program may be easily inferred by those skilled in the art. Such a computer program may be stored in a computer readable storage medium and read and executed by a computer, thereby implementing embodiments of the present invention. As the storage medium of the computer program, a magnetic recording medium, an optical recording medium, a carrier wave medium, or the like may be included.

Furthermore, the terms "comprises", "comprising", or "having" described above mean that a component can be implanted unless otherwise specifically stated, But should be construed as including other elements. All terms, including technical and scientific terms, have the same meaning as commonly understood by one of ordinary skill in the art to which this invention belongs, unless otherwise defined. Terms used generally, such as terms defined in a dictionary, should be interpreted to coincide with the contextual meaning of the related art, and shall not be interpreted in an ideal or excessively formal sense unless explicitly defined in the present invention.

The foregoing description is merely illustrative of the technical idea of the present invention, and various changes and modifications may be made by those skilled in the art without departing from the essential characteristics of the present invention. Therefore, the embodiments disclosed in the present invention are intended to illustrate rather than limit the scope of the present invention, and the scope of the technical idea of the present invention is not limited by these embodiments. The protection scope of the present invention should be interpreted by the following claims, and all technical ideas within the equivalent scope should be interpreted as being included in the scope of the present invention.

100: host 300: automated teller machine
350: key storage device (EPP) 400: SAM
500: IC card

Claims (8)

A method for generating a master key through communication between a host, an IC card, or a SAM, wherein the method
Performing authentication between the host and an IC card or SAM;
Requesting a first master key from the host when the authentication is completed, requesting a second master key from the IC card or SAM, and receiving the first master key and the second master key;
Generating a third master key; And
Calculating a fourth master key by performing a predetermined operation on the first master key, the second master key, and the third master key; And
And transmitting the fourth master key to the host to synchronize. The method according to claim 1,
Synchronizing the fourth master key,
After generating the fourth master key and injecting it into the key storage device (EPP), and transmits the fourth master key to the host,
And the host stores the received fourth master key as a master key of a corresponding automated teller machine. The method according to claim 1,
Wherein said predetermined operation performs an exclusive OR operation on a first master key, a second master key, and a third master key. The method of claim 1, wherein performing the authentication
Send the ID (ID) of the IC card or SAM to the host,
Receiving encrypted data of a first random number from the host, and transmitting the encrypted data to the IC card or SAM;
Receiving a second random number obtained by decrypting the encrypted data from the IC card or the SAM, and transmitting it to the host,
Performing a process of receiving, from the host, a result of determining that a first random number and a second random number match to be successful, and
And repeating the process once again in reverse between the host and the IC card or SAM. A financial automated device that generates a master key through communication between a host, an IC card, or a SAM.
An authentication unit for performing authentication between the host and an IC card or a SAM;
A communication unit for receiving a first master key and a second master key by requesting a first master key from the host and requesting a second master key from the IC card or SAM when the authentication is completed;
Generating a third master key and performing a predetermined operation on the first master key, the second master key, and the third master key to calculate a fourth master key;
And transmit the fourth master key to the host to synchronize the fourth master key. The method according to claim 5,
Synchronizing the fourth master key,
After generating the fourth master key and injecting it into the key storage device (EPP), and transmits the fourth master key to the host,
And the fourth master key is stored in the host as a master key of a corresponding automated teller machine. The method according to claim 5,
Wherein said predetermined operation performs an exclusive OR operation on the first master key, the second master key, and the third master key. The method according to claim 5, wherein the authentication unit
Send the IC card or SAM ID to the host;
Receiving encrypted data of a first random number from the host and transmitting the encrypted data to the IC card;
Receiving a second random number obtained by decrypting the encrypted data from the IC card or the SAM, and transmitting it to the host,
Performing a process of receiving, from the host, a result of determining that a first random number and a second random number match to be successful, and
Repeating the process in reverse between the host and the IC card or SAM once again.

Images