A dynamic encryption method, terminal and server

Abstract

The invention discloses a dynamic encryption signature method, a terminal, and a server, including: generating more than one key and more than one signature through original data; when performing a session connection, selecting a predetermined first key index and a random first signature index; according to the first key index and the first signature index, index the first key and the first signature from the more than one key and the more than one signature; use the first signature to request the session Sign the data, and use the first key to encrypt the session request data and send it to the server; when the server decrypts the session request data and passes the signature verification, receive the utilization message sent by the server The random second signature is used to sign and the random second key is used to encrypt the session response data.

Description

technical field [0001] The invention relates to encryption technology, in particular to a dynamic encryption method, a terminal and a server. Background technique [0002] The communication between the terminal and the server generally uses a security-oriented Hypertext Transfer Protocol channel (HTTPS, Hyper Text Transfer Protocol over Secure Socket Layer) to authenticate the server's identity and establish a trusted channel, specifically through the browser's CA certificate Authenticate the server certificate to obtain the server's public key, and use the server's public key and the private key stored in the server to negotiate an asymmetric key. Once negotiated, it will be kept in the session object. Both the terminal and the server use asymmetric key encryption in subsequent sessions. [0003] The communication between the terminal and the server can also develop a symmetric encryption system through the business itself, and hard-code the symmetric key to the terminal. ...

AI Technical Summary

Problems solved by technology

[0004] The existing HTTPS technology requires high computing resources due to the use of asymmetric encryption algorithms, and requires a secure socket layer / transport layer (SSL / TLS, Secure Socket Layer / Transport Layer Security) session handshake mechanism, wasting network resources ; In terms of configuration, it is necessary to prepare authentication certificates, and subsequent maintenance is required, and the operation is cumbersome

[0005] Simple symmetric encryption systems such as Advanced Encryption Standard (AES, Advanced Encryption Standard) cannot meet the requirements of dynamic keys and tamper-proof

Images