Encryption method and system based on white box

Abstract

The invention discloses an encryption method and system based on a white box. The method comprises the following steps: S100, an application terminal acquires characters input by a user, and implements encryption combination on the characters and white box seeds in accordance with a preset character encryption algorithm and a preset acquisition sequence to obtain a combined password; S200, the application terminal implements encryption operation on the combined password according to a preset password encryption algorithm to obtain an encrypted ciphertext; and S300, a server decrypts the encrypted ciphertext to obtain a user default password. According to the encryption method and system disclosed by the invention, the characters input by the user can be obtained by clicking or touching a software simulation keyboard through a mouse, a white box cryptography is applied to a password keyboard of the application terminal to enable that the characters input by the user are firstly separately encrypted and then integrally encrypted, so that the way of obtaining the password through brute force can be better prevented.

Description

technical field [0001] The invention relates to the field of information security, in particular to a white box-based encryption method and system. Background technique [0002] In recent years, with the development of mobile Internet, smart terminals, big data, cloud computing, etc., mobile Internet has evolved from a technology to an environment for people's lives. With the implementation of the free flow system of securities accounts, links such as securities account opening, trading, and services have been networked. The mobile trend of Internet finance is increasingly deepening in the securities industry, and more and more investors conduct transactions through mobile terminals such as mobile phones and tablet computers. According to data from the China Securities Association, the proportion of online business of securities firms continued to increase last year, and the proportion of online account opening increased from 50% in 2014 to 92% in 2015; the proportion of on...

AI Technical Summary

Problems solved by technology

However, the security of the existing software simulating the keyboard is not high enough, and there are still risks such as data monitoring and data interception. When trading, directly inputting the password for the transaction still has security risks, and it is extremely vulnerable to attacks such as credentialing and phishing. It is very easy to be stolen when entering the transaction password, which will bring great economic losses to the user. Therefore, there is an urgent need for a security solution based on the mobile terminal to ensure the security of the transaction password input.

Images