Key management system

Abstract

The invention discloses a key management system. The system comprises a key management server, Linux embedded service processing equipment and an encryption card arranged in the Linux embedded serviceprocessing equipment, the secret key management server is used for generating a signature public and private key pair, an encryption public and private key pair and a storage secret key, storing, encrypting through a public key of the equipment public and private key pair and sending to the encryption card, and is used for re-sending according to an introduction application; the encryption card is used for storing the received signature public and private key pair, the encryption public and private key pair and the storage key, generating a file key, a storage key, a session key or a key encryption key respectively according to a service request of the service processing equipment, storing and sending the file key, the storage key, the session key or the key encryption key, updating, recovering and destroying a stored key, and generating equipment public and private key pairs when leaving the factory; the service processing equipment is used for receiving service requests of other terminals, sending a service key corresponding to the encryption card to the encryption card, sending the service key to the corresponding terminal, and self-checking of a cryptographic algorithm.

Description

technical field [0001] The invention relates to the field of data encryption, in particular to a key management system. Background technique [0002] When encrypting data in the prior art, the encryption algorithm used is usually a fixed key that cannot be easily modified, and this key is mixed with a software program and encrypted by software. An attacker can easily crack this fixed key by simulating data. When the key is mixed with the software program and stored together, the attacker can obtain the key by decompiling the software program. Once the key is obtained, the encrypted data can be decrypted, so that a large amount of originally encrypted sensitive data will be stolen, and even the entire system will be cracked. It can be seen that the software is used for encryption, and the key is immutable, which has the risk of being stolen by an attacker, resulting in the leakage of user privacy data. [0003] The reason for the above problems is mainly because the existi...

AI Technical Summary

Problems solved by technology

It can be seen that using software to encrypt, and the key is immutable, there is a risk that the key will be stolen by the attacker, resulting in the risk of user privacy data leakage

[0003] The reason for the above problems is mainly because the existing technology does not classify keys according to different purposes, and does not use a set of methods for generating, storing, updating, backing up, restoring and destroying keys, making it easier for attackers to crack keys access to sensitive information

Images