System verification method based on two-card-three-code technology

Abstract

The invention discloses a system validation method based on the two-card three-password technique. The method includes: reading an original file from an original driver by the aid of an encryption system, selecting an encryption algorithm for file encryption, generating a ciphertext and a master secret key after encryption, storing the ciphertext and a signature file of the ciphertext to a target card, using the master secret key for RSA encryption to generate a working secret key, performing digital signing for the working secret key, encrypting a private key S0 of RSA, and storing the results to a unlocking card; decrypting a plaintext out by the aid of a decryption system, decrypting the private key S0 out according to a critical secret key and the secret key pair set serial number, decrypting the master secret key out according to the private key S0 and the working secret key, and decrypting the plaintext out according to the master secret key, the ciphertext and the encryption algorithm serial number; and performing password protection mechanism design and verification and validation. By combining the two-stage secret key management systems and multiple algorithms, the system validation method is extremely high in secrecy and security, and enciphered data files and secret key files are stored in different media and can be transmitted and stored separately, so that security of the enciphered files is guaranteed.

Description

technical field [0001] The invention relates to a system verification method, in particular to a system verification method based on two-card-three-code technology. Background technique [0002] In the field of important data security, many industries have taken certain protective measures. The current popular data encryption algorithms are divided into three categories: single hash algorithm, public key algorithm, and symmetric algorithm. The single-item hash algorithm is an irreversible function that compresses messages of any length to a fixed length, such as the Hash algorithm, which is mainly used for digital signatures and message integrity detection, but has less protection for ciphertext; public key algorithms Also known as an asymmetric algorithm, the key used for encryption is different from the key used for decryption, and the decryption key cannot be calculated based on the encryption key. For example, the RSA algorithm is limited in that the encryption form is s...

AI Technical Summary

Problems solved by technology

The single-item hash algorithm is an irreversible function that compresses messages of any length to a fixed length, such as the Hash algorithm, which is mainly used for digital signatures and message integrity detection, but has less protection for ciphertext; public key algorithms Also known as an asymmetric algorithm, the key used for encryption is different from the key used for decryption, and the decryption key cannot be calculated based on the encryption key. For example, the RSA algorithm is limited in that the encryption form is single and the speed is relatively low; symmetric The encryption key of the algorithm is the same as the decryption key, such as the DES algorithm, so the security of the encryption depends entirely on the security of the key, not the secrecy of the algorithm

Each algorithm has its own limitations, especially the encryption form is single and it is difficult to ensure the security of the key

Images