Design And Implementation Of Data Security Subsystem For Financial IC Cards

With the development of electronic banking, financial system for the security of the increasingly high demand, the traditional magnetic stripe card security is low, easily replicated more significant defects such as prominent, especially the popularity of automated teller machines, a large number because videotaping password, card access control resulting from magnetic stripe cards to be copied funds stolen incident also caused strong concern in society, and therefore more secure, lower transaction costs and maintain financial IC card has also been an increasing number of banks to accept and promote the use of. Financial IC card security is one of the reasons it is valued and promoted, so security of financial IC card design has become a new research topic.In this paper, the actual work from commercial banks needs, the system carried out a feasibility study, requirements analysis, design and implementation, business function test, MLA saved from key generation, encryption card data, the preservation of key,key use the Get and other aspects, to ensure the establishment of efficient, safe, standard and practical financial IC card- Data security subsystem. Now a lot of the preparatory stage of literature, and the latest research results were carefully understanding. Needs analysis phase has been fully operational requirements gathering and analysis, operational staff and line side completed the feasibility study report and the software requirements specification and rigorous assessment by line in the business sector. Design and development stage company strictly follow the design guidelines and development standards. Beta test cases written over 2000, carried out three complete functional test.The biggest feature of the system is plug and standardized service, which is the focus of the work of the system design stage, but also our design principles. In the service plug and standardized design principles established financial IC card- Data security subsystem, based on unified planning and management to ensure the whole system a variety of software and hardware are in line with relevant international standards, national standards to ensure that business, harmonization and standardization functions, so as to achieve efficiency standardization and management services.Financial IC Card- Data Encryption Standard security subsystem uses PBOC3.0 latest standards, satisfy the financial needs of Xi'an Bank(financial applications). In terms of encryption interface package, the system has been fully reserved for the expansion of the late state secret algorithm provides a good extension support. Reference to the latest international research status, its own algorithms(for example: State secret algorithm) is a new trend of the future financial IC card industry application development, the latter can be further optimization and upgrading of data security subsystem. Science and technology departments of commercial banks in this direction will continue to research, expand encryption function, improve the security of card data, make their products more competitive.