Secure communication method and system based on software password module

Abstract

The invention provides a secure communication method and system based on a software password module. The method comprises the following steps: entity authentication: collecting equipment information,personnel information and entity authentication information through an application client, sending the equipment information, the personnel information and the entity authentication information to anair certificate issuing server for entity authentication, and inputting the equipment information and the personnel information through a collaborative signature server; certificate issuing: the application client generates private key components through the software password module, the collaborative signature server generates a public key of the application client through collaborative operationby means of the hardware password module, and the application client performs information interaction with the air certificate issuing server through the software password module to obtain a digitalcertificate of the application client; key negotiation: the application client performs cooperative signature and key request information interaction with a cooperative signature server and a gatewaythrough a software password module to obtain a session key; encryption communication: the application client and the application server perform secure transmission of communication information therebetween by using the session key.

Description

technical field [0001] The invention relates to the technical field of encryption, in particular to a secure communication method and system based on a software encryption module. Background technique [0002] With the rapid development of wireless network technology and the popularization of smart terminals, domestic informatization construction is advancing rapidly. Smart terminals can realize services such as secure payment, mobile office, and mobile law enforcement. However, it also causes potential security risks for industry data and information, such as While enjoying the convenient and efficient work experience brought by mobile information services, enterprise users also need to bear the security risks brought about by security threats such as theft, tampering, denial, and impersonation of office information. [0003] At present, application scenarios with high security requirements usually use hardware encryption to ensure information security. For example, for gov...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of wireless network technology and the popularization of smart terminals, domestic informatization construction is advancing rapidly. Smart terminals can realize services such as secure payment, mobile office, and mobile law enforcement. However, it also causes potential security risks for industry data and information, such as While enjoying the convenient and efficient work experience brought by mobile information services, enterprise users also need to bear the security risks brought about by security threats such as theft, tampering, denial, and impersonation of office information.

[0003] At present, application scenarios with high security requirements usually use hardware encryption to ensure information security. For example, for government and enterprise industries with a high degree of information security, a hardware encryption module is usually integrated on the company's computer terminal during office hours. , to ensure the security and confidentiality of information transmission, etc.; however, there are a large number of application scenarios that are not suitable for using hardware cryptographic modules. For example, mobile terminals cannot deploy hardware cryptographic modules due to size limitations; Internet information centers cannot It is impossible to fully deploy hardware cryptographic modules; moreover, due to various types of mobile terminal devices and different types of physical interfaces, it is difficult to integrate physical hardware cryptographic modules

Images