Draft:USBKey

The USBKey, or U Shield, is a digital certificate introduced by the Industrial and Commercial Bank of China (ICBC) for client identity verification in online environments. It integrates technologies such as IC cards, digital certificates, and digital signatures.

The U Shield utilizes asymmetric encryption algorithms. The private key (unique serial number) is generated directly within the IC card, and the secure digital certificate issued by the Certificate Authority (CA) is downloaded onto the card to correspond with the private key.

When users access the online banking system, the U Shield establishes an encrypted channel to confirm client identity. During online transactions, data is first sent to the U Shield inserted into the computer's USB port, where it is digitally signed using the private key, and then transmitted to the online banking system for verification.