Dynamic encryption method, terminal and server

Abstract

The present invention discloses a dynamic encryption method, a terminal and a server. The method comprises: generating more than one secret keys and more than one signatures through native data; when the session connection is performed, selecting a predetermined first secret key index and random first signature index; according to the first secret key index and random first signature index, indexing a first secret key and a first signature from the more than one secret keys and the more than one signatures; employing the first signature to perform signature of the session request data, and employing the first secret key to perform encryption of the session request data and then send the encrypted session request data to a server; and after the server performs decryption of the session request data and the signature checking passes, receiving the session response data which employs random second signature to perform signature and employs random second secret key to perform encryption.

Description

technical field [0001] The invention relates to encryption technology, in particular to a dynamic encryption method, a terminal and a server. Background technique [0002] The communication between the terminal and the server generally uses a security-oriented Hypertext Transfer Protocol channel (HTTPS, Hyper Text Transfer Protocol over Secure Socket Layer) to authenticate the server's identity and establish a trusted channel, specifically through the browser's CA certificate Authenticate the server certificate to obtain the server's public key, and use the server's public key and the private key stored in the server to negotiate an asymmetric key. Once negotiated, it will be kept in the session object. Both the terminal and the server use asymmetric key encryption in subsequent sessions. [0003] The communication between the terminal and the server can also develop a symmetric encryption system through the business itself, and hard-code the symmetric key to the terminal. ...

AI Technical Summary

Problems solved by technology

[0004] The existing HTTPS technology requires high computing resources due to the use of asymmetric encryption algorithms, and requires a session handshake mechanism of Secure Socket Layer / Transport Layer Security (SSL / TLS, Secure Socket Layer / Transport Layer Security), which wastes network resources; In terms of configuration, authentication certificates need to be prepared, and follow-up maintenance is required, and the operation is cumbersome

[0005] Simple symmetric encryption systems such as Advanced Encryption Standard (AES, Advanced Encryption Standard) cannot meet the requirements of dynamic keys and tamper-proof

Images