KEY MANAGEMENT METHOD AND SYSTEM

摘要

Disclosed are a key management method and system. A master key is remotely downloaded to avoid the problem that the master key is not issued to a merchant until the master key needs be downloaded on a POS terminal, so as to reduce logistics costs and maintenance costs. When a key is remotely downloaded, a KMS system uses a symmetric algorithm to encrypt the key to be transmitted to ensure that the encrypted key can only be decrypted by a corresponding POS terminal, thereby ensuring the security of data transmission. During bidirectional authentication, an application program of the POS terminal can only contact an encrypted text form of the key instead of a plain text key needing to be remotely downloaded to the POS terminal, thereby ensuring security in reproduction. A transmission encrypted key and an authentication key used in the process are generated by the POS terminal, and transmitted to the KMS system in the encrypted text by using an asymmetric algorithm and a symmetric algorithm; and the decryption processes are all carried out in hardware encrypting machine, thereby ensuring the security of the key.