An authorization method for offline power trading information system based on rsa public key cryptography

Abstract

The invention belongs to the field of electric power information security, and relates to an RSA public key cryptography based off-line electric power transaction information system authorization method which is applied to remote off-line authorization. According to the method, a client applies for a remote authorization code from a server firstly, the server automatically generates authorization codes with high complexity and provides the authorization code for the client, the client selects one of the authorization codes and stores the authorization code, the authorization code is encrypted by using a private key of the client, all of the authorization codes are encrypted by using a public key of the server and provided for the server; and the server verifies authorization codes submitted by the client, stores all of the authorization codes after the verification is successful, and prompts that the application for the authorization code of the client is successful. The client can carry out remote authorization after receiving the authorization code, and the process of authorization is very simple. According to the method provided by the invention, encrypted transmission for the authorization codes is carried out by adopting an RSA public key method, so that the security of the method is based on an RSA public key system, and security requirements of an electric power information system can be achieved.

Description

technical field [0001] The invention belongs to the field of electric power information security, and relates to an off-line power information system authorization method based on RSA public key cryptography for remote off-line authorization. Background technique [0002] At present, the power trading organization has established its own data information management system, which involves some sensitive data and data, or the authorization of certain orders, which requires the authorization of the supervisor to continue. These authorizations are based on computer software systems. Some systems are more flexible in design and can be authorized at any terminal, while others are more strict and must be authorized at a designated terminal. [0003] If the supervisor is out of office and cannot be authorized at the terminal, then in an emergency, it will be delayed and cause unnecessary losses. Thus, a solution is needed to solve remote offline authorization. [0004] Most termin...

AI Technical Summary

Problems solved by technology

[0007] Traditional authorization methods such as password authorization, hardware authorization, and biometric (fingerprint) authorization cannot solve the problem of remote authorization.

For example, password authorization, although remote authorization can be performed, passwords often have low password complexity and are vulnerable to attacks, so the security risks are relatively large, and core decision-making is not authorized; hardware authorization and biometric collection are not limited due to their own limitations. Ability to provision and authorize remotely

Images