银行卡系统中的安全模块的设计与实现

发布时间：2018-09-19 09:14

【摘要】：当今，银行卡已经成为大众生活中不可缺少的非现金支付工具，因此，银行卡使用中的安全问题也越来越受到大众关注。原有银行卡采用磁条卡技术，磁条卡信息容易被复制，用以伪造银行卡和盗取持卡人账户资金的案件时有发生。新闻事件不断被传媒曝光，，亦越来越成为当下普通老百姓议论和关注焦点。因此银行卡的安全性引起了国家的高度重视，2011年3月人民银行颁发《推进金融IC卡应用工作的意见》，决定在全国范围内开启银行卡芯片迁移工作，要求2015年开始商业银行发行的银行卡必须都是金融IC卡，目前银行推出的金融IC卡大多为磁条卡和IC卡合一卡。另据了解，到2015年，原有的磁条卡不会退市，储户仍可使用，银行将不会强制更换。推广金融IC卡是国家金融战略，是中国梦的一部分，标志着全国范围内的推广应用全面启动。本文主要对某银行卡系统中的以下安全模块的研究： 1、ECMS-银行信用卡系统中的核心处理系统。本论文研究主要从模块的主要功能是入账处理，管理操作所在的交易账户数据，模块的特点，模块架构，模块账户组织和标识分配，信贷计划等进行综合论述。 2、EAS-IC卡的在线授权系统模块。本论文研究通过EAS在线系统实现真正的即时消费和即时扣款功能（根据来自ECMS模块的信息批准或拒绝账户交易，发送批准或拒绝交易信息返回给ECMS模块），利用Embossing（制卡系统）通过把客户的相关信息，卡号，密码，信用额度都写入芯片植入硬卡，当消费者在使用芯片卡进行交易的同时，POS机和银行终端产生信息交互，通过EAS传递数据经芯片卡的组织并对账户信息进行核对，校验，并授权进行综合论述。 3、ADS-争议管理系统模块。本论文研究主要从模块的主要功能是建立并处理客户卡交易纠纷,检索客户账单数据的交易技术功能，授权功能进行研究和综合论述，并对ADS系统在争议处理方面的主要特点：包括争议启动，争议跟踪，系统管理，查询，管理信息系统等进行研究和综合论述。我们通过对三大模块的研究，梳理三大模块之间的关系和特点，针对银行IC卡的安全性、争议解决、在线授权相关知识的认知，及对银行卡安全管理模块的架构和设计进行实现，解决时下新闻热点例如新闻中的两次消费金额和地点一模一样，银行卡是否被盗刷还是银行卡被重复扣款，境外游客或留学生银行卡被重复划款计费，均可利用ADS争议解决系统，记录和跟踪消费者的银行卡情况，可以解决和避免银行卡重复扣款，可以及时发现和解决在线争议问题，降低重复计费的概率，保障了银行卡使用中的争议的及时解决和避免银行和金融系统声誉受损和解决人们对银行卡安全性的不必要的担心。
[Abstract]:Nowadays, the bank card has become an indispensable non-cash payment tool in the life of the public. Therefore, the security problem in the use of the bank card has been paid more and more attention by the public. The original bank card adopts the magnetic stripe card technology, the magnetic stripe card information is easy to be duplicated, which is used to forge the bank card and steal the funds of the cardholder account. News events continue to be exposed by the media, but also increasingly become the focus of discussion and attention of ordinary people. Therefore, the security of bank cards has attracted great attention from the state. In March 2011, the people's Bank of China issued "opinions on promoting the Application of Financial IC Card" and decided to start the migration of bank card chips throughout the country. The bank cards issued by commercial banks in 2015 must be financial IC cards, most of which are magnetic stripe cards and IC cards. It is also understood that by 2015, the original magnetic stripe card will not be delisted, savers can still use, banks will not be forced to replace. Promotion of financial IC card is a national financial strategy, is a part of Chinese Dream, marking the nationwide promotion and application of a comprehensive start. This paper mainly studies the following security modules in a bank card system: 1 the core processing system of ECMS-bank credit card system. In this paper, the main functions of the module are accounting processing, the management of the transaction account data, the characteristics of the module, the module structure, the organization of the module account and the allocation of the identity. Credit planning and other comprehensive exposition. 2 EAS- IC card online authorization system module. This paper studies the real real-time consumption and instant withholding function through the EAS online system (according to the information from the ECMS module to approve or reject account transactions, Send or reject the transaction information back to the ECMS module), using Embossing (business card printing system) by the customer's related information, card number, password, credit line are written into the chip embedded in the hard card, When the consumer uses the chip card to trade, at the same time, the POS machine and the bank terminal produce information interaction, pass the data through the organization of the chip card through the EAS, and check the account information, check, check and check the account information. And authorized to conduct a comprehensive discussion. 3 / ADS- dispute management system module. In this paper, the main function of the module is to establish and deal with the customer card transaction disputes, to retrieve customer billing data transaction technology function, authorization function for research and comprehensive discussion. The main characteristics of the ADS system in dispute resolution include dispute initiation, dispute tracking, system management, query, management information system and so on. Through the study of the three modules, we comb the relationship and characteristics between the three modules, aiming at the security of IC card, dispute resolution, online authorization related knowledge cognition, And to implement the structure and design of the security management module of bank cards, to solve the current news hotspots such as the same amount and location of the two consumption items in the news, whether the bank card is stolen or whether the bank card has been repeatedly withheld. If a foreign tourist or a foreign student's bank card is charged with repeated transfers, he can use the ADS dispute resolution system to record and track the consumer's bank card situation, to solve and avoid repeated bank card withholding, and to find and resolve online disputes in a timely manner. Reducing the probability of repeated charging ensures the timely resolution of the disputes in the use of bank cards and avoids the damage to the reputation of banks and financial systems and solves the unnecessary worries about the security of bank cards.
【学位授予单位】：上海交通大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP309;TP393.07

【共引文献】