Network work communication security and secrecy system on basis of PKI (public key infrastructure) technology and method for implementing network work communication security and secrecy system

Abstract

The invention relates to a network work communication security and secrecy system on the basis of a PKI (public key infrastructure) technology and a method for implementing the network work communication security and secrecy system. An encryption sharing technology with a combination of a PKI identity authentication mode, symmetric encryption and asymmetric encryption is adopted. An encryption sharing procedure includes generating a random symmetric key, encrypting data and generating an encryption file; encrypting the symmetric key by a public key of a user and storing an encryption result in the encryption file; enabling the user to decrypt the symmetric key by a private key of the user when files need to be shared, encrypting the symmetric key by a public key of a receiver, appending an encryption result into the encryption file, enabling the receiver to decrypt the symmetric key by a private key of the receiver after the receiver receives the encryption file, and decrypting the symmetrically encrypted data to acquire contents. The network work communication security and secrecy system and the method have the advantage that safety problems such as breach of confidence and illegal use of identities during work communication can be fundamentally completely eradicated.

Description

[0001] technical field [0002] The invention relates to a PKI technology-based network work exchange security and confidentiality system and its realization method. Applicable to e-government and e-commerce, etc. Background technique [0003] With the rapid popularization and in-depth application of Internet technology in various fields, more and more work is transferred to the Internet, and a large amount of work exchange information is transmitted online. Due to the openness of the network, the security of work communication cannot be effectively guaranteed, and the unfavorable factors mainly include the following aspects: [0004] 1. User identity security. First, the security of the user's own identity is not guaranteed, the user name and password are easily lost, and the identity is easily faked by others. Second, it is difficult to accurately judge the authenticity of the other party's identity on the Internet. [0005] 2. Data confidentiality. Unencrypted data is...

AI Technical Summary

Problems solved by technology

Unencrypted data is easily stolen by others during transmission and storage

[0006] 3. Low data non-repudiation and tamper-proof

In the information environment, especially in the network environment, users may deny their words and deeds for various reasons; electronic data is easily modified after it is generated, thus losing the original appearance or original meaning of the data

[0007] 4. Lack of legal protection

Ordinary electronic data cannot be used as a legal basis, and it is difficult to completely replace the work communication method based on paper documents, which is not conducive to the development of new technologies and the improvement of work efficiency

[0008] Some existing work communication systems mainly use the identity authentication mechanism of user name and password. The user's identity security cannot be guaranteed, and there is a lack of reliable data security protection mechanism, which cannot effectively guarantee the security of work communication data.

Images