A key management method and system supporting multiple key systems

Abstract

The present invention proposes a key management method and system supporting multiple key systems, wherein the method includes an initialization process: the root master key is randomly generated by a cryptographic device, and at the same time, the root master key threshold is backed up to all root master key mothers In the card; generate a first-level public and private key through a cryptographic device, and generate a first-level certificate through self-signature; generate a root identification key through a cryptographic device; symmetric key management includes: obtaining a first-level symmetric key after dispersing the root master key ; Obtain the second-level to N-level symmetric keys by dispersing the upper-level symmetric key in turn; obtain the user symmetric key by dispersing the N-level symmetric key; asymmetric key management includes: Generate secondary to N-level public and private keys and user public and private keys; generate secondary to N-level certificates and user certificates in turn through the issuance of the upper-level private key; identification key management includes: through the parameters including user identification and root identification key The information calculation generates the user key.

Description

technical field [0001] The invention relates to the technical field of key management, in particular to a key management method and system supporting multiple key systems. Background technique [0002] It is a basic principle of cryptography that all secrets reside in the key. The encryption algorithm can be made public and the cryptographic device can be lost, but the key cannot be leaked. Once the key is leaked, the encrypted information can be completely known, and there is no secrecy at all; in addition, the way to steal the key is less expensive than deciphering the cryptographic algorithm Many, in many network attack incidents, key security management is a main part of the attack. [0003] Common key management systems mainly include symmetric key management, asymmetric key management, and identification key management. Asymmetric key management usually includes public keys and private keys. Public keys are usually used to encrypt session keys, To verify digital sign...

AI Technical Summary

Problems solved by technology

The encryption algorithm can be made public and the cryptographic device can be lost, but the key cannot be leaked. Once the key is leaked, the encrypted information can be completely known, and there is no secrecy at all; in addition, the way to steal the key is less expensive than deciphering the cryptographic algorithm Many, in many network attack incidents, key security management is a main part of the attack

[0003] Common key management systems mainly include symmetric key management, asymmetric key management, and identification key management. Asymmetric key management usually includes public keys and private keys. Public keys are usually used to encrypt session keys, To verify digital signatures or encrypt data that can be decrypted with the corresponding private key, usually the key pair is unique; currently, different key management systems are managed separately, which will result in symmetric keys, asymmetric keys, identification Keys, etc. need to set up a key management system, and it is impossible to use different key management systems through one key management system; in addition, the security of keys at all levels in the key management system is also particularly important

Images