Key storage method, device and server

Abstract

The embodiment of the invention discloses a secret key storage method, a secret key storage device and a server. The method comprises the following steps: receiving a to-be-stored key sent by a key server; in the trusted execution environment, creating a secure storage key according to module recognition information of a trusted execution module configured by the trusted execution module and trusted computing base parameter information for bearing the trusted execution module; and in the trusted execution environment, encrypting the to-be-stored key through the secure storage key, and storingthe encrypted to-be-stored key. According to the technical scheme provided by the embodiment of the invention, in a trusted execution environment; based on the module recognition information and the trusted computing base parameter information, a secure storage key which is only visible to the system during trusted operation is generated. The security of the security storage secret key is enhanced. The security storage secret key is adopted to store the secret key to be stored in the trusted execution environment. The isolation of codes and data is achieved. The security of secret key storageis enhanced, and then the security of the stored secret key to be stored is improved.

Description

technical field [0001] The embodiments of the present invention relate to the field of computer technology, and in particular, to a key storage method, device and server. Background technique [0002] With the advent of the digital age, data security is even more important. In order to take into account the security and sharing of data, a key is usually used to perform encryption and decryption operations or security verification on data. Since the key (especially the seed that generates other keys - the root key) is fixed within a certain period of time or its life cycle, the security of the key is particularly important [0003] In order to prevent the root key from various malicious attacks and effectively ensure the security of the root key, the prior art usually stores the root key on an independent dedicated hardware device (such as an encryption machine). Due to the shortcomings of these hardware devices such as poor scalability, inability to dynamically adjust, ina...

AI Technical Summary

Problems solved by technology

Due to the shortcomings of these hardware devices such as poor scalability, inability to dynamically adjust, inability to realize data sharing, and low computing performance, flexible deployment of general-purpose devices (such as cloud service hosts) has become a good choice

[0004] However, the use of flexible deployment of general-purpose equipment makes the root key have the problem of malicious impersonation, forgery, tampering and other illegal attacks during the storage process, which again reduces the security of the root key

Images