Combined secret key dynamic security management system

Abstract

The invention discloses a combined secret key dynamic security management system, which consists of a client device unique identification number SN, a synchronous factor (SF) which is managed by a background main service system, a personal identification number (PIN) which is managed by users themselves, and an additional code (AC) which is managed by a service system. A dynamic protection secretkey KP which is generated by computing the SN, the SF, the PIN and the AC is used for protecting a business private key SK, and by an unique identification number SN of an other person involved, a public key of the other person involved is calculated, a message is safely sent to the other person involved and a signature of the other person involved is verified; and by the private key of the user,encrypted data sent is decrypted and data which is ensured by the user is signed. The user identity and the safety of business application are verified hierarchically by adopting a system of a dynamic factor and the combined secret key system.

Description

technical field [0001] The invention relates to a safety authentication and management system which can realize the safety authentication and management system independent of the safety storage hardware through the combination of the dynamic factor and the combination key system. Background technique [0002] Dedicated secure storage hardware has always been the model that the security industry relies on for end-to-end encryption. If the advantages of networked devices can be combined with dynamic factors and combined key systems to solve the problems of massive users and hierarchical security management, this will make the mobile communication industry The business has greater development, and it is convenient for users to use. Contents of the invention [0003] The invention solves the shortcomings of the traditional security management system being inflexible and the combination key system completely dependent on hardware, and provides a combination key dynamic security...

AI Technical Summary

Problems solved by technology

[0003] The invention solves the shortcomings of the traditional security management system being inflexible and the combination key system completely dependent on hardware, and provides a combination key dynamic security management system, which is characterized by the unique identification number SN of the client device managed by the manufacturer, and the background main service The synchronization factor SF managed by the system, the personal password PIN managed by the user and the additional code AC managed by the service system are based on the combined key structure, and the business private key is protected by the dynamic protection key KP generated by SN, SF, PIN and AC operations SK, the combined key architecture refers to the use of ECC elliptic curve encryption algorithm to operate on multiple random numbers or specific data to generate several pairs of different private keys and public keys under the same operation model, which are placed in the private key matrix and the public key respectively. In the public key matrix, the unique identification number SN of the user is used for abstract mapping, that is, the abstract value is converted into several position coordinates, and the new private key and the corresponding The new public key composed of multiple public key points taken from the same position in the same position in the public key matrix is ​​still a pair of public key pairs. The public key matrix and public key calculation algorithm are public, and the private key matrix is ​​kept secret by the issuer. The private key is stored by secure hardware or kept secretly by the user. The user calculates the public key of the other party through the unique identification number SN of the other party, sends information to the other party safely, and verifies the signature of the other party. The user uses his private key to Decipher the encrypted data and sign the data guaranteed by yourself