Method for realizing security electronic mail based on digital envelope

Abstract

The invention relates to the technical field of information security, and in particular relates to a method for realizing a security electronic mail based on a digital envelope. According to the invention, on the basis of the digital envelope technology based on PKI symmetric and asymmetric key algorithms, mail encryption and decryption information, user key information, data recovery information, mail ciphertext and other information are assembled into the digital envelope; and thus, encryption, decryption and data recovery of the electronic mail are realized. According to the invention, a session key is encrypted by obtaining all public key certificates of each receiver from a LDAP, such that interconnection and intercommunication of multiple certificates of one person are realized; when a mail blind copying function is started, mail information can be decrypted only by the private key of a blind copying user; therefore, the identity confidentiality of the blind copying user is ensured; in an emergency case that the private key of the user is lost or damaged, mail information can be decrypted without recovering the private key of the user through a KMC; and, by means of a high-grade security protection mechanism that the encrypted private key cannot be derived and a strict service approval signature mechanism, the security of recovered information is ensured from the perspectives of technologies and management.

Description

technical field [0001] The invention relates to the technical field of information security, and in particular relates to a digital envelope-based method for realizing secure electronic mail. Background technique [0002] E-mail is one of the most widely used means of communication at present. Its convenient, efficient and inexpensive communication method provides convenient conditions for the majority of Internet users to communicate and exchange information. However, ordinary e-mail is transmitted in an open network environment in plain text. There are potential security risks. In order to ensure that email information is not stolen, encryption technology is usually used to encrypt email information to ensure the confidentiality of email. [0003] At present, the technology of email encryption is very mature, mainly based on symmetric key and asymmetric key encryption system, based on PKI (Public Key Infrastructure, public key infrastructure) authentication encryption tech...

AI Technical Summary

Problems solved by technology

[0012] The purpose of the present invention is to provide a method for implementing secure email based on digital envelopes, to solve the problems of interconnection and intercommunication of multiple certificates for one person, support for secret copying of emails, and meet the data recovery requirements in emergency situations such as loss of private keys, etc.