Security certification method and device

Abstract

The invention discloses a security certification method and a device. The method comprises: receiving an operating instruction, and obtaining security conditions needed by the operation; analyzing the security conditions and obtaining a key set to be certificated by the security conditions; and querying a certification record list, when the to-be-certificated key set has been certificated successfully, allowing the operation. In the invention, the certification record list is preset in a security device, and one key only corresponds to one key certification record; one security condition consists of one or more key certification records; after receiving the operating instruction, the method judges whether the key set corresponding to the security condition is certificated successfully or not according to the security condition corresponding to the operating instruction, if so, allowing the operation, or else, refusing the operation. Therefore, the attackers cannot damage the security of the existing application files, keys and algorithms by modifying application parameters (for example, adding new key), so the rate of secret leakage is further reduced, and the security performance of the system is improved.

Description

technical field [0001] The present invention relates to the technical field of encryption, in particular to a security authentication method and device. Background technique [0002] In existing smart security devices, the security authentication mechanism adopts a state machine, and there is only one security state in the security device, and the operations on files, keys or algorithms in the smart security device are all related to the security state. The security authentication method is: after receiving the security authentication request, updating the security state according to the authentication result. In this security authentication method, multiple keys can correspond to the same security state. In this way, by adding a new key, after the key authentication is successful, the security state can be modified, so as to achieve the security of files, keys or algorithms. operating authority. In addition, the security state generally has only sixteen states, and multip...

AI Technical Summary

Problems solved by technology

In addition, the security state generally only has sixteen states, and multiple keys correspond to one security state. The flexibility of the design and application security processing mechanism is also greatly limited.

Images