2results about How to "Short validity period" patented technology

The invention relates to a method for the encrypted transmission (10) of data between terminals (14, 16), in which, prior to the transmission of the data, a verification certificate (Z *) is created and transmitted to a rear end (12) and is signed in the rear end (12) by a root certificate (Z), the signed verification certificate (Z * *) is sent back to the second terminal (16), and the signed verification certificate (Z * *) is transmitted to the rear end (12). A public second digital key of the signed verification certificate (Z * *) is transmitted to the first terminal (14) and verification is carried out using the public second digital key (S2), during the verification, an encrypted unique symmetric session key (S *) is generated, which is transmitted to the second terminal (16) and is decrypted by means of the private key of the signed verification certificate (Z * *), and in the event of a verification failure, an encrypted unique symmetric session key (S *) is generated, which is transmitted to the second terminal (16) and is decrypted by means of the private key of the signed verification certificate (Z * *). The first terminal (14) is notified, or the data is decrypted using the session key (S *) if the verification is successful.

The application belongs to the technical field of quantum secure communication, and discloses a key rotation method and system for a quantum secure network, which executes a key rotation process in a state machine driven manner on the premise of maintaining uninterrupted business services; specifically, while a current key is kept effective to process existing business, a next key is generated; a distributed lock mechanism is used to exclusively execute a key switching operation in a multi-node environment; the next key is atomically switched to a new current key, and the original current key state is updated to an old key, so as to realize seamless transition of business data encryption and decryption keys. Compared with the prior art, the application realizes uninterrupted business during the key rotation process, establishes an effective multi-node cooperation mechanism, introduces a transaction management mechanism, designs a perfect fault detection and automatic recovery mechanism, and builds a full life cycle security management system of codebooks and random number books to realize controllable full process from creation to archiving.