Method and system for updating certification key

Abstract

The invention is to solve issues: not security of transferring authentication cipher key through network by using plaintext; and managing bother, and high cost by using cryptograph format to transfer authentication cipher (AC). The disclosed method for updating AC remotely includes steps: server end calculates random seed and random number to generate verification data; server end carries out encryption operation for original AC and verification data, and transfers random seed and result of encryption operation to client end; information security equipment validates correctness of random seed; carrying out same encryption operation for random seed and original AC inside the information security equipment, and at server end so as to generate new AC, which is in use for updating AC inside the information security equipment, and database in server. The invention also discloses system for updating AC.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and system for updating an authentication key. Background technique [0002] In recent years, with the rapid development of Internet technology and e-commerce, more and more business activities have been transferred to the Internet, such as online government office, online banking, online shopping, etc. At the same time, more and more business activities involving Personal privacy and business secret information need to be transmitted through the network. However, malicious threats such as viruses, hackers, and phishing scams have brought great challenges to the security of online transactions, making network security issues very important. [0003] With the continuous improvement of people's security awareness, various encryption algorithms have emerged as the times require. The commonly used encryption algorithms mainly include hash algorithm, symmetric encryption ...

AI Technical Summary

Problems solved by technology

[0012] The method and system for remotely updating the authentication key proposed by the present invention solve the insecurity of transmitting the authentication key in plain text through the network, as well as the problems of management trouble and high cost caused by transmitting the authentication key in cipher text

Images