基于轻量级数字签名的银行卡身份认证系统

发布时间：2018-12-19 16:01

【摘要】：近年来,银行卡产业虽然得到了快速的发展,但是各类银行卡的风险也逐渐地凸显。其中侧录、克隆银行卡诈骗犯罪呈现高发趋势。这些不法之徒不但严重影响了持卡人以及金融机构的资产安全,还扰乱了正常的社会与经济秩序。因此解决银行卡的安全性问题迫在眉睫,直接关系到银行卡产业的发展以及金融行业的稳定。本文首先对现有磁性银行卡易被伪造以及IC银行卡推广的高成本等不足进行了分析,提出了将JUNA轻量级数字签名技术和居民身份证应用于银行卡防伪的优势。用私钥对客户信息(含身份证号)进行签名,用生成的JUNA数字身份替代CVV码存储在磁道中,以确保银行和银行卡之间是发行和被发行的关系,保证银行卡不是盗刷者伪造,并且以身份证作为安全可信根,在现有ATM机中加入居民身份证验证模块,确保客户和银行卡之间是持有和被持有的关系,保证即使盗刷者采用复制磁道所有内容的方式克隆卡,在没有卡片持有者身份证的情况也是无法得逞的。银行卡在ATM机交易时首先利用从身份证读卡器中提取的身份证号以及磁道内保存的客户信息进行重新组合,再用公钥对重新组合的信息进行JUNA数字身份验证。验证的结果同时保证了客户、银行卡和银行三者之间的对应的关系,可以真正防止银行卡的盗刷行为。然后从客户和银行的角度,提出了银行卡身份认证系统的功能需求,设计出本系统的总体框架,包括银行卡印制子系统、密钥生成子系统、数字身份编码子系统和验证报警子系统,其中验证报警子系统又可细分为身份验证子系统和伪卡报警子系统。并对各个子系统的具体功能和业务流程进行了设计,其中密钥生成子系统用来产生公钥和私钥：数字身份编码子系统用来生成数字身份：验证报警子系统用来验证银行卡是否为伪卡,如果验证是伪卡,记录相应的伪卡信息,为银行和警方追究盗刷行为的违法事件提供线索。最后给出本系统所用到数据储存方式,展示系统办卡系统的模拟实现和ATM机验证过程的仿真实现,分析基于JUNA数字签名的银行卡身份认证系统的安全性,并且通过与IC银行卡的成本对比,证明本文设计的系统具有易操作,低成本,高防伪的特性,推广性较强。
[Abstract]:In recent years, although the banking card industry has been rapid development, but the risks of various bank cards are also gradually highlighted. Among them, clone bank card fraud crime showed a high trend. These criminals not only seriously affect the security of cardholders and financial institutions, but also disrupt the normal social and economic order. Therefore, it is urgent to solve the security problem of bank card, which is directly related to the development of bank card industry and the stability of financial industry. This paper first analyzes the shortcomings of the existing magnetic bank cards which are easy to be forged and the high cost of the popularization of IC bank cards, and puts forward the advantages of applying the JUNA lightweight digital signature technology and resident ID card to the anti-counterfeiting of bank cards. The customer information (including the ID number) is signed with the private key, and the generated JUNA digital identity is replaced by the CVV code stored in the track to ensure that the bank and the bank card are issued and issued, and that the bank card is not forged by the thief. And take the ID card as the secure and credible root, add the resident ID card authentication module to the existing ATM machine, ensure that the relationship between the customer and the bank card is held and be held, and ensure that even if the swiper uses the way of copying all the contents of the track to clone the card, In the absence of a card holder ID card is also unable to succeed. In ATM transaction, the bank card uses the ID number extracted from the ID card reader and the customer information stored in the track to recombine, and then use the public key to perform JUNA digital authentication of the recombined information. The result of verification ensures the corresponding relationship among customer, bank card and bank, which can prevent the bank card from stealing. Then from the point of view of customers and banks, the functional requirements of the bank card identity authentication system are put forward, and the overall framework of the system is designed, including the bank card printing subsystem, the key generation subsystem, and the key generation subsystem. The digital identity coding subsystem and the authentication and alarm subsystem can be subdivided into the authentication subsystem and the pseudo-card alarm subsystem among which the authentication and alarm subsystem can be subdivided into the authentication subsystem and the pseudo-card alarm subsystem. And the specific functions and business processes of each subsystem are designed. The key generation subsystem is used to generate the public key and the private key; the digital identity coding subsystem is used to generate the digital identity; the authentication alarm subsystem is used to verify whether the bank card is a fake card; if the verification is a fake card, the information of the corresponding counterfeit card is recorded. To provide clues for banks and the police to investigate the theft of illegal activities. Finally, the data storage method used in the system is given, the simulation realization of the system card system and the simulation realization of the ATM verification process are presented, and the security of the bank card identity authentication system based on JUNA digital signature is analyzed. By comparing with the cost of IC bank card, it is proved that the system designed in this paper has the characteristics of easy operation, low cost, high anti-counterfeiting and strong generalization.
【学位授予单位】：扬州大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TN918.4

【相似文献】