The Design And Implementation Of The PBOC Internet Payment Authentication Gateway System

PBOC Internet payment authentication gateway is located in the Internet and the traditional financial institution system, the authentication of the user identity authentication, the transaction data transmission process to protect, the application layer data information security, and play the role of isolation and protection of financial network.PBOC Internet payment authentication gateway through the PKI security authentication system to verify the user identity, and to establish a secure channel for the legal status of users, to create a safe and reliable payment card operating environment and online payment application environment, to ensure the security of transactions.Customers in the online payment, through the consultation session key composition of the security channel, all the data are encrypted before the verification in the online transmission.PBOC Internet payment authentication gateway to follow the "China financial integrated circuit (IC) card specification sixteenth part: IC card Internet terminal specification" (referred to as PBOC3.0 specification),In the algorithm and the certificate is used to follow the "SM2 code" and the "digital certificate format specification based on SM2",The SM2 password algorithm, SM3 algorithm and SM4 algorithm, which use the State Password Administration Bureau for examination and approval.In this paper, we study the theory, development status and technology of PBOC gateway in the PBOC Internet payment authentication gateway system. The design and implementation of a PBOC Internet payment authentication gateway system is designed and implemented.The system relies on the standard PBOC protocol for the special type of gateway system, strictly follow the relevant national security requirements.First, according to the PBOC3.0 specification, the relevant documents and market needs of the relevant documents and the design objectives and principles.Secondly, the technical architecture design is designed according to the physical structure and logical structure of the initialization module, monitoring module, message processing module (handshake module, session module), the device management module and so on.Finally, according to the gateway system in multi thread concurrent use API ACE_Acceptor, socket, ACE_epoll, load test results and the final selection scheme of the password device call module, initialization module, monitoring module, handshake module, session module, device management module, and other modules.In this paper, we study the high availability and high concurrency of PBOC payment authentication gateway, and carry out the implementation of PBOC Internet payment authentication system, and make the performance test and optimization of PBOC Internet payment authentication system.