A key management method and system

Abstract

The present invention proposes a key management method, including: during initial initialization, encrypting the master key with a white-box protection key to obtain the first ciphertext; encrypting the white-box protection key with a password-derived key to obtain the second Cipher text; use the master key to encrypt and save the user's private key component; when the secure channel is established, the client and the server obtain the communication key through negotiation to establish a secure channel; when the key is updated, the password of the current password is derived The key decrypts the second ciphertext to obtain the white-box protection key, and after encrypting the white-box protection key with the password-derived key of the new password, the ciphertext of the white-box protection key obtained by encryption is used to update the second ciphertext Ciphertext; when decrypting the local key, use the password-derived key of the new password to decrypt the second ciphertext to obtain the white-box protection key; decrypt the first ciphertext with the white-box protection key to obtain the master key; pass the master key Decrypt the ciphertext of the user key component to obtain the user key component.

Description

technical field [0001] The invention relates to the technical field of secure communication, in particular to a key management method and system. Background technique [0002] Cryptography technology is the basic technology of information security, and the key is the basis of secure application of cryptography technology and the core element of information security. With the rapid and comprehensive development of my country's information industry, the key management system based on the asymmetric key system and the symmetric key system has also entered the comprehensive construction stage. The security of the key management system depends on the security of the key. If the key is leaked, it no longer has the function of keeping secrets. In addition, the key is a variable part of the cryptosystem. When considering the design of the cryptosystem, the core problem that needs to be solved is the key management problem. [0003] At present, the key management scheme in the prior...

AI Technical Summary

Problems solved by technology

[0003] At present, the key management scheme in the prior art is as follows: on the one hand, various keys are stored on the basis of an encryption card or an encryption chip hard disk, and when used, directly call the encryption card or encryption chip through the relevant interface; on the other hand, in order to ensure The security of the user's private key, the user's private key is usually stored in special cryptographic hardware, such as USB Key, SmartCard, and the private key cannot be derived from the cryptographic hardware

Images