Certificate-based end-to-end key exchange method

Abstract

The invention discloses a certificate-based end-to-end key exchange method. The method comprises the following steps: first step, a terminal I obtains a public key of a terminal II, wherein the specific process is as follows: A1, the terminal I encrypts the public key and submits the same to a server; A2, the server decrypts the public key encrypted by the terminal I, a digital certificate authentication center creates a user certificate of the terminal I, and the server stores the user certificate of the terminal I; A3, the terminal I generates a request message for key exchange with the terminal II; A4, the server sends the user certificate of the terminal I to the terminal II, and after the terminal II agrees to the key exchange request, the server sends the user certificate of the terminal II to the terminal I; A5, the terminal I parses the public key of the terminal II from the user certificate of the terminal I and stores and the same. Similarly, the terminal II acquires the public key of terminal 1. By adoption of the certificate-based end-to-end key exchange method, the key exchange process is simplified, the man-in-the-middle attacks and replay attacks in the registrationprocess are prevented, and the security of the public key is improved.

Description

technical field [0001] The invention relates to the field of information technology, in particular to a certificate-based end-to-end key exchange method. Background technique [0002] To achieve encrypted communication between end-to-end devices, encryption keys need to be exchanged in advance. At present, most solutions use specific encryption devices to import keys for devices on site. This solution is costly and inconvenient to use. A small number of end-to-end device keys are exchanged through the network, but lack of security protection means, and are extremely vulnerable to man-in-the-middle attacks and replay attacks. Contents of the invention [0003] It is an object of the present invention to solve at least the above-mentioned problems and to provide at least the advantages which will be described later. [0004] Another object of the present invention is to provide a certificate-based end-to-end key exchange method, which simplifies the key exchange process, im...

AI Technical Summary

Problems solved by technology

[0002] To achieve encrypted communication between end-to-end devices, encryption keys need to be exchanged in advance. At present, most solutions use specific encryption devices to import keys for devices on site. This solution is costly and inconvenient to use

A small number of end-to-end device keys are exchanged over the network, but lack of security protection measures, making them vulnerable to man-in-the-middle attacks and replay attacks