向POS终端下载密钥的技术方案

A Solution to Inject Keys into POS Terminals

本文描述了一种向POS终端下载密钥的技术方案。通过该方案,可以为生产中的终端下载唯一的非对称密钥。出厂后的终端,可以通过该非对称密钥连接银行后台下载主密钥。该方案可以将非对称密钥通过自动化的方式注入POS终端。POS终端在生产后可以直接部署到商户,节省了运输到银行下载主密钥的工作。通过这个方案,减少了人工管理成本,提高了终端从生产环节到达部署环节的效率。

This paper describes a technical solution for injecting keys into POS terminals.The terminal in production connects to the server to download the unique asymmetric key pair based on PKI.After the terminal deploys on the field,it connects with the bank server to download the master key using the asymmetric key.The asymmetric key can be injected into the POS terminal automatically using the solution described in this paper,and the POS terminal can be deployed to the merchant after production.Hence,it is not necessary to transport the POS terminal to the bank to download the master key.The efficiency of deployment is increased while the labor involved is decreased by the proposed solution.