A Key Dispersion Method for Enhancing the Security of Symmetric Key System

Abstract

The invention discloses a key dispersion method for enhancing the security of a symmetric key system, and relates to the technical field of information security encryption, comprising the following steps: step (1), respectively injecting a secondary dispersion factor into a primary key management system; In step (2), the first-level key management system uses the national standard algorithm to perform distributed operations on the second-level dispersion factor with the designated key, and obtains the key data of the second-level key management system. The beneficial effect of the present invention is that: adopting the present invention, different dispersive factors can be distributed and calculated by specifying a key to obtain several pieces of different key data. This method avoids the single derivation and transformation method in which the random number is directly used as a key, provides multiple key derivation transformation methods, and enhances the security of the key derivation transformation process.

Description

technical field

[0001] The invention relates to the technical field of information security encryption, in particular to a key distribution method for enhancing the security of a symmetric key system. Background technique

[0002] Cryptography technology is the basic technology of information security, and the key is the basis of secure application of cryptography technology and the core element of information security. With the rapid and comprehensive development of my country's information industry, the key management system based on the symmetric key system has also entered a comprehensive construction stage, and the key derivation process in the symmetric key system is facing more and more stringent technical requirements.

[0003] The keys used in the current traditional symmetric key system mainly use cryptographic equipment to generate several pieces of key data, and use the several pieces of key data as the key data used in the system. In the above process, the key ...

Examples

Embodiment Construction

[0026] All features disclosed in this specification, or steps in all methods or processes disclosed, may be combined in any manner, except for mutually exclusive features and / or steps.

[0027] Any feature disclosed in this specification (including any appended claims, abstract and drawings), unless expressly stated otherwise, may be replaced by alternative features which are equivalent or serve a similar purpose. That is, unless expressly stated otherwise, each feature is one example only of a series of equivalent or similar features.

[0028] Step (1), in the distribution factor management of the first-level key management system, the user injects multiple different second-level distribution factors respectively by means of a code sheet or an IC card;

[0029] Step (2), directly input the secondary dispersion factor in the form of code sheet, and input the PIN code of the IC card and read the secondary dispersion factor in the IC card mode, and complete the injection of the ...

technical field

[0001] The invention relates to the technical field of information security encryption, in particular to a key distribution method for enhancing the security of a symmetric key system. Background technique

[0002] Cryptography technology is the basic technology of information security, and the key is the basis of secure application of cryptography technology and the core element of information security. With the rapid and comprehensive development of my country's information industry, the key management system based on the symmetric key system has also entered a comprehensive construction stage, and the key derivation process in the symmetric key system is facing more and more stringent technical requirements.

[0003] The keys used in the current traditional symmetric key system mainly use cryptographic equipment to generate several pieces of key data, and use the several pieces of key data as the key data used in the system. In the above process, the key ...

Examples

Embodiment Construction

[0026] All features disclosed in this specification, or steps in all methods or processes disclosed, may be combined in any manner, except for mutually exclusive features and / or steps.

[0027] Any feature disclosed in this specification (including any appended claims, abstract and drawings), unless expressly stated otherwise, may be replaced by alternative features which are equivalent or serve a similar purpose. That is, unless expressly stated otherwise, each feature is one example only of a series of equivalent or similar features.

[0028] Step (1), in the distribution factor management of the first-level key management system, the user injects multiple different second-level distribution factors respectively by means of a code sheet or an IC card;

[0029] Step (2), directly input the secondary dispersion factor in the form of code sheet, and input the PIN code of the IC card and read the secondary dispersion factor in the IC card mode, and complete the injection of the ...

Images