USB (Universal Serial Bus) private key device with human body induction function and method thereof for realizing safety verification

Abstract

The invention relates to a USB (Universal Serial Bus) private key device with the human body induction function, which comprises an interface module, an access control management module, a central processing module and a storage module, wherein the access control management module comprises a private key state control unit, a PIN (Personal Identification Number) code inspection unit and a human body induction unit, wherein the interface module is connected with the central processing module and the storage module through the private key state control unit; both the PIN code inspection unit and the human body induction unit are connected with an access control unit; and the human body induction unit is arranged on the surface of a USB private key. The invention also relates to a method for realizing the safety verification of the USB private key based on the human body induction function by utilizing the device which has the beneficial effects that a double inspection mode is adopted, i.e. after carrying out PIN code inspection, the access control management module carries out human body induction inspection; and a user is required to touch the human body induction unit to finish the inspection, so that the potential safety hazard that a Hacker invades a computer to utilize a USB private key device that is forgotten to be pulled out is eliminated, the safety performance of the USB private key device is effectively improved, and the overall security of PKI (Public Key Infrastructure) application is further promoted.

Description

technical field [0001] The present invention relates to the field of network application technology, in particular to the field of public key infrastructure (PKI, Public Key Infrastructure) application technology, in particular to a USB private key device with a human body sensing function and a method for realizing security verification thereof. Background technique [0002] USB keys are generally used in PKI applications. The information signed with the private key can only be verified with the corresponding public key. The public key can generally be published, so the security of PKI applications depends on the private key, and the private key must be guaranteed The security of the PKI application can be fully guaranteed. In the original PKI application, the private key is directly stored on the computer. Since the computer is vulnerable to attacks by Trojan horses and hackers, the private key may be stolen. Later, the emergence of the USB key solved the problem of the p...

AI Technical Summary

Problems solved by technology

If the hacker has already controlled the computer, when the user enters the PIN code, the Trojan horse program in the background may have recorded the PIN code information entered by the user. If the user forgets to unplug the USB key from the computer, although the hacker cannot Obtain the private key of the USB key, but because hackers have the PIN code of the USB key, they can use the private key in the USB key to do calculations remotely, so there will be certain security risks when the user forgets to unplug the USB key from the computer

Due to the large number of USB key users and the uneven security risk awareness, this problem will exist for a considerable number of users, which leads to serious security risks in the traditional USB key private key access control method

Images