Patent ID: 8112627

Claim:
A system for self-service recharging, wherein the system comprises a client and a server; the client comprises a first authentication module, a key agreement module, and a secure transaction device with the function of an electronic wallet; and the server comprises a second storage module, a second authentication module, and a second service performance module; in which the first authentication module is adapted to verify whether the server is legitimate; the key agreement module is adapted to conduct, together with the secure transaction device, a key agreement process with the server to establish a data security channel according to a result of the key agreement process, if the server is legitimate after being verified by the first authentication module; the secure transaction device comprises a first storage module for storing data and a key agreement algorithm relating to the key agreement process with the server, as well as a certificate of the secure transaction device; a user authentication module for verifying whether an identifier of a user is legitimate after receiving the identifier from an input of the user; and a first service performance module for allowing the user, after being verified by the user authentication module, to input a recharging operation message, transmitting a recharging operation request packet to the server and receiving a recharging permission command packet returned from the server, conducting a recharging operation after verifying the recharging permission command packet returned from the server, and recording an operation log and a transaction process Implemented on the secure transaction device as a transaction terminal; the recharging operation request packet comprising a user account and a recharging amount; and the server comprises a second storage module for storing user account information, user identity information, data and a key agreement algorithm relating to the key agreement process with the secure transaction device, and a certificate of the server; a second authentication module for verifying whether the secure transaction device is legitimate, conducting the key agreement process with the secure transaction device using the data and algorithm stored in the second storage module to establish the data security channel if the secure transaction device is legitimate, and verifying whether the recharging operation request packet is legitimate according to the user account information and user identity information stored in the second storage module, after receiving the recharging operation request packet transmitted from the secure transaction device; and a second service performance module for deducting the recharging amount from the user account and returning the recharging permission command packet to the secure transaction device if the recharging operation request packet is legitimate after being verified by the second authentication module; and the recharging permission command packet comprising a transaction time and the recharging amount.