Service key creation and service data encryption method, device and system

Abstract

The invention discloses a service key creation and service data encryption method, device and system. The invention discloses a service key creating method. The method comprises: a service end obtaining an XA from a first password end; wherein the XA is a first secret key ciphertext of the service secret key obtained after the service secret key plaintext X is encrypted by using A; wherein the service key is generated by a first password end; the service end sending a first encryption conversion request carrying XA and C to the first password end; the first password end obtaining a first encryption conversion result XC according to the first encryption conversion request, and returning the XC to the service end; wherein the XC is obtained by encrypting X by using C; the service end sendinga second encryption conversion request carrying the XC to the second password end; the second password end obtaining a second encryption conversion result XB according to the second encryption conversion request, and returning the XB to the service end; wherein the XB is a second root key ciphertext of the service key obtained by encrypting X by using B; and the service end correspondingly storing the XA and the XB.

Description

technical field [0001] The embodiments of this specification relate to the field of Internet application technology, and in particular to a method, device, and system for creating a service key and encrypting service data. Background technique [0002] When processing sensitive data such as user passwords and bank information, it is usually necessary to encrypt the data before transmission and storage. [0003] In the prior art, a commonly used encryption method with a higher security level is to use a cryptographic device for encryption. For example, the business end first applies for a service key from the cryptographic device, and the business key is sent to the business end in ciphertext by the cryptographic device. If the business end sends the data to be encrypted together with the key ciphertext to the cryptographic device, it can obtain The data ciphertext returned by the cryptographic device. [0004] However, if the data on the business side is always only encryp...

AI Technical Summary

Problems solved by technology

[0004] However, if the data on the business side is always only encrypted with a set of cryptographic devices, if the cryptographic device fails, a large amount of business data cannot be encrypted and decrypted normally; or, a large amount of data migration work is required when upgrading hardware devices, which cannot smooth switching

Images