Method and device for protecting secret key authorized data, and TPM (trusted platform module) secrete key management center

Abstract

The invention discloses a method and a device for protecting secret key authorized data, and a TPM (trusted platform module) secrete key management center. Authorization data is temporarily applied from the TPM secrete key management center when a secrete key is required to visit; after visiting the secrete key, the applied authorization data is deleted, and thus safety of the authorization data of the secrete key is improved, and possibility of leaking, falsifying and damaging the authorization data is reduced. The method comprises the following steps: a first device sends a dispatching application for authorization data to the TPM secrete key management center; the first device is a physical server, a virtual machine or a terminal integrated with the TPM functions; the first device receives the authorization data encrypted by a TPM public key of the first device and returned by the TPM secrete key management center; the first device decrypts the authorization data by a TPM private key of the first device, and visits the secrete key by the decrypted authorization data; after visiting the secrete key, the first device deletes the received authorization data.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method, device and TPM key management center for protecting key authorization data. Background technique [0002] Symmetric keys, private keys, and shared secrets, which are widely used in computer systems to provide information security protection mechanisms, are all sensitive data. Once these sensitive data are leaked, the confidentiality of the encrypted data related to them will be seriously affected. Therefore, a security protection mechanism must be provided to prevent it from being stored in the system or code in plain text. To protect the confidentiality of this sensitive data, consider deploying one or more of the following safeguards: [0003] The first type: key encryption storage, in order to protect the confidentiality of symmetric keys, private keys, shared secrets, etc., these information need to be encrypted again. For example, use the key to encrypt the ke...

AI Technical Summary

Problems solved by technology

[0014] The present invention provides a method, device and TPM key management center for protecting key authorization data, which are used to solve the problem that in the prior art, in an automated operation system, the key authorization data can only be stored unsafely together with the key On the static storage device of the computer, the problem of low security performance

Images