A secure communication method and system based on a software cryptographic module

Abstract

The present invention provides a method and system for secure communication based on a software cryptographic module. The method includes: entity authentication: collecting device information, personnel information and entity authentication information through an application client and sending it to an over-the-air certification server for entity authentication; The collaborative signature server enters equipment information and personnel information; certificate issuance: the application client generates the private key components through the software cryptographic module, and the collaborative signature server generates the private key components through the hardware cryptographic module, and cooperates with the operation to generate the public key of the application client, and the application client through the hardware encryption module. Information exchange between the software cryptographic module and the over-the-air certification server obtains the digital certificate of the application client; key negotiation: the application client performs collaborative signature and key request information interaction with the collaborative signature server and gateway through the software cryptographic module, respectively, and obtains a session Key; encrypted communication: The session key is used for secure transmission of communication information between the application client and the application server.

Description

technical field [0001] The invention relates to the technical field of encryption, in particular to a secure communication method and system based on a software encryption module. Background technique [0002] With the rapid development of wireless network technology and the popularization of smart terminals, domestic informatization construction is advancing rapidly. Smart terminals can realize services such as secure payment, mobile office, and mobile law enforcement. However, it also causes potential security risks for industry data and information, such as While enjoying the convenient and efficient work experience brought by mobile information services, enterprise users also need to bear the security risks brought about by security threats such as theft, tampering, denial, and impersonation of office information. [0003] At present, application scenarios with high security requirements usually use hardware encryption to ensure information security. For example, for gov...

AI Technical Summary

Problems solved by technology

[0002] With the rapid development of wireless network technology and the popularization of smart terminals, domestic informatization construction is advancing rapidly. Smart terminals can realize services such as secure payment, mobile office, and mobile law enforcement. However, it also causes potential security risks for industry data and information, such as While enjoying the convenient and efficient work experience brought by mobile information services, enterprise users also need to bear the security risks brought about by security threats such as theft, tampering, denial, and impersonation of office information.

[0003] At present, application scenarios with high security requirements usually use hardware encryption to ensure information security. For example, for government and enterprise industries with a high degree of information security, a hardware encryption module is usually integrated on the company's computer terminal during office hours. , to ensure the security and confidentiality of information transmission, etc.; however, there are a large number of application scenarios that are not suitable for using hardware cryptographic modules. For example, mobile terminals cannot deploy hardware cryptographic modules due to size limitations; Internet information centers cannot It is impossible to fully deploy hardware cryptographic modules; moreover, due to various types of mobile terminal devices and different types of physical interfaces, it is difficult to integrate physical hardware cryptographic modules

Images