Method and device for initial key distribution of terminal equipment with minimum key management cost

Abstract

The present invention provides a terminal equipment initial key distribution method and device that minimizes the key management cost, wherein the terminal equipment initial key distribution method includes the following steps: in the offline environment, respectively write non- Confidential data; perform an online interaction process to achieve terminal device identity authentication; and perform an online interaction process to achieve management node identity authentication and initial key distribution. The terminal equipment initial key distribution method of the present invention can realize the distribution of terminal equipment initial key without PKI system or symmetric key management system and key issuing equipment. The characteristics of the DH key agreement protocol are used to realize the initial key distribution without any pre-set keys, and a two-way identity authentication mechanism is designed to make up for the problems that the DH protocol does not have identity authentication features and there is a risk of man-in-the-middle attacks.

Description

technical field [0001] The invention relates to the field of information security, in particular to a method and device for distributing an initial key of a terminal device that minimizes key management costs. Background technique [0002] Modern cryptography technology provides an efficient and reliable solution to the problem of information security protection in application systems. Considering multiple factors such as security and cost, designers of application system security solutions usually choose standardized cryptographic algorithms whose security has been fully demonstrated. In the case that the cryptographic algorithm itself does not have confidentiality characteristics, the security of the entire system depends entirely on the security of the key data. Therefore, the design of the key management scheme has become the focus of the system security scheme design. [0003] How to securely distribute the initial key is one of the most critical issues in key managem...

AI Technical Summary

Problems solved by technology

In this way, the key data will not enter the production environment and will not be known by the manufacturer of the terminal device. Its security is easy to guarantee, but it requires the administrator to build an additional pipeline dedicated to writing the initial key (sometimes known as a "Key Issuing Device")

Due to the various types and large quantities of terminal devices, the cost of such pipeline devices for writing initial keys and the labor costs required for operation and maintenance are relatively high, which will bring a huge burden to the administrators of the application system

Images