Security policy version generation method

Abstract

The invention provides a security policy version generation method, which belongs to the field of computer technology and information security, and comprises the following steps that: a security policy version consists of a plurality of security policy rules, and each security policy rule consists of an algorithm, a secret key and a policy identifier; wherein the security policy version is dividedinto a security policy initial version and a security policy use version; wherein the security policy use version is generated through a security policy initial version, an increment factor and a PCode operation; wherein the PCode comprises a PCode algorithm function and a PCode operating environment, so that the security policy using version is generated by operation of the security policy initial version, the increment factor and the PCode algorithm function in the PCode operating environment. The security policy version provided by the invention can be dynamically changed and updated, is high in security, is difficult to crack even if the key is intercepted, can be widely applied to subway ticket checking terminals, POS terminals and the like, is also suitable for other automatic terminals with similar key systems, has good commercial value, and is worth popularizing.

Description

technical field [0001] The invention belongs to the fields of computer technology and information security, and in particular relates to a method for generating a security policy version. Background technique [0002] A security policy is a set of rules for all security-related activities within a security zone (a security zone, usually, refers to a set of processing and communication resources belonging to an organization). As computer systems and mobile Internet applications become more and more widely used, a large amount of key data and key businesses are managed and supported by computer systems, and computer system security issues are becoming increasingly serious and complex. Traditional computer security system protection mechanisms generally rely on manual judgment methods to establish security policies. In the patent published in China, a security policy generation method and equipment are proposed. This method is to capture data in the business system to form orig...

AI Technical Summary

Problems solved by technology

[0003] The invention provides a method for generating a security policy version to solve the problems of poor security and low level of anti-cracking difficulty in the security policy in the prior art

Images