Online security key protection method and system

Abstract

The present invention proposes a method and system for online security key protection. The method includes: running the core security process when the terminal is started, initializing or binding the secure random storage area and the secure file storage area; starting and running the encryption and decryption algorithm module, according to The security policy configuration provides the encryption and decryption algorithm interface for the security agent process; maintains a key life cycle parameter in the security file storage area, and automatically interacts with the security server when the life cycle expires to update the key script file; references terminal feature parameter analysis Run the key script file to dynamically generate a protection key, use the protection key to encrypt the working key, and store the ciphertext of the working key in a secure file storage area. The invention realizes a low-cost, high-security security key protection scheme that fully utilizes software technology without modifying the hardware scheme, and is applicable to information security fields such as mobile payment and data security storage.

Description

technical field [0001] The invention relates to a key protection method in the field of information security, in particular to a method and system for realizing security key protection in an online manner. Background technique [0002] With the development of information technology, in order to protect sensitive data, more and more encryption technology is used, that is, a set of keys is used to perform an encryption operation on the data to be protected, and the obtained ciphertext is stored and transmitted. The original plaintext data, when the data needs to be used, use the corresponding key to perform an inverse operation of decryption to obtain the plaintext. If you don't know the key, you can't know the plaintext information of the ciphertext, which also serves the purpose of protecting data. In order to obtain a higher level of security protection, we need to keep the encryption key secret to prevent the key from being obtained illegally and revealing the data to be ...

AI Technical Summary

Problems solved by technology

[0005] 1) Since the key is stored in the receiver's database, it needs to be requested in advance when using the key. The process is too complicated, and the speed of encryption and decryption operations and network transmission speed will become performance bottlenecks;

[0006] 2) The sender's key is stored centrally in the receiver's database. Once the private key and key ciphertext in the receiver's database are leaked at the same time, the consequences will be disastrous;

[0007] 3) It only transfers the risk of the sender's key protection to the receiver, and still cannot completely solve the risk of key leakage;

[0008] 4) After the sender obtains the key plaintext, there is still a risk of leakage in the local cache and encryption and decryption operation process

[0011] 2) Using a simple XOR operation, although the plaintext of the private key can be recovered quickly, the algorithm is not strong enough, and it is easy to exhaustively mask the key through brute force cracking, and then crack the plaintext of the private key

Images