Key negotiation method and system

Abstract

The invention provides a key agreement method, which comprises the following steps that: terminal equipment acquires a first key agreement parameter, constructs key agreement request information and sends the key agreement request information to a service platform; the service platform constructs the first key negotiation parameter and the obtained second key negotiation parameter into data aData,performs abstract calculation on the data aData to obtain a session key sKey, signs and encrypts an abstract value aHash to generate encrypted data incData, constructs key negotiation reply information with information in the second key negotiation parameter, and returns the key negotiation reply information to the terminal device; and the terminal equipment decrypts the encrypted data encData toobtain parameter information including a signature value signMsg, constructs the first key negotiation parameter and the second key negotiation parameter into data bData, performs abstract calculation to generate an abstract value bHash, performs signature verification on the signature value signMsg, and finally obtains a session key uKey through the abstract value bHash.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a key agreement method and system. Background technique [0002] Key agreement is a key establishment technology in which two or more parties in the system jointly provide information, and each derives a shared key whose result cannot be predetermined by either party, especially with the increasingly complex communication environment, The continuous development of information technology and the continuous improvement of computing power, as well as the continuous development of attack methods in the communication environment, make many key agreement methods have different degrees of security risks; existing terminal equipment and service platforms generally use fixed keys Communication or the generation and transmission of session keys by simple encryption methods have low security. Once the session keys are leaked, the entire security system will face major security ...

AI Technical Summary

Problems solved by technology

[0002] Key agreement is a key establishment technology. Two or more participants in the system jointly provide information and each derive a shared key that cannot be predetermined by any party. Especially with the increasingly complex communication environment, The continuous development of information technology and the continuous improvement of computing power, as well as the continuous development of attack methods in the communication environment, make many key negotiation methods have different degrees of security risks; existing terminal equipment and service platforms generally use fixed key For communication or simple encryption to generate and transmit session keys, the security is low. Once the session key is leaked, the entire security system will face major security risks

Images