Method for automatically updating identification private key and password system

Abstract

The invention relates to a method for automatically updating an identification private key and a password system. The method comprises the following steps: when a password module or a background detection program detects that a new identification private key needs to be obtained for a user, using a security credential stored in a user computer locally to apply an identification key service system to obtain the new identification private key; after the identification key service system verifies the validity of the security credential, generating the new identification private key for the user, using an identification public key corresponding to a previous time period of the time period corresponding to the updated identification private key to encrypt the generated updated identification private key, and then returning the encrypted updated identification private key to the password module or the background detection program to be stored locally; and if the password module or the background detection program discovers that the encrypted updated identification private key is stored in the user computer locally and that a user identification private key for decrypting the encrypted updated identification private key is available, then performing decryption by sung the private key of the user to obtain the updated identification private key.

Description

technical field [0001] The invention belongs to the field of information security, in particular to a method for automatically updating an identification private key and a cryptographic system. Background technique [0002] Identity-Based Cryptography (IBC) is a public key cryptosystem. In an identity-based cryptographic system, an identity of a user, such as an email address or a mobile phone number, is a public key, called an identity public key (or IBC public key), which can be used for data encryption and / or signature verification (actually It is the user identity combined with a set of system public parameters to form the public key); the user identity corresponds to a private key, called the identity private key (or IBC private key), which can be used for data decryption and / or digital signature. The user's identity private key is calculated and generated by an identity key service system (private key generator, Private Key Generator, PKG) based on the user's identity...

AI Technical Summary

Problems solved by technology

However, the problem with the solution in 201410058689.3 is that when the cryptographic module obtains the private key from the identity key service system, the user's current valid private key must be in a state of being directly usable, so that the cryptographic module can use the currently valid private key to obtain An updated identification private key; however, in practical applications, this condition may not be well satisfied. For example, if the user's identification private key is stored in portable cryptographic hardware (such as a USB Key), the user may not use it for a long time Cryptographic hardware, so that the cryptographic module cannot use the user's current valid identification private key to obtain an updated identification private key; or, the user's identification private key is stored in the user's computer after being protected (encrypted) by a PIN code (Personal Identification Number) or a password In the local keystore, if the user does not use the keystore for a long time or does not enter the protection PIN code or password, the password module method obtains the user's currently valid private key to obtain the updated private key

Images