A kind of key protection management method based on android system

Abstract

A key protection management method based on the Android system, encrypts the private data in the Android system with the AES algorithm, obtains the AES key, sets a password, and uses a random number generator to generate a salt 1 (salt), and combines the password and the salt 1. (salt) is combined into SM4 key 1 and used to encrypt the AES key, the password is the hash value obtained by MD5 hash operation, and the AES key ciphertext, password MD5 hash value and salt 1 (salt) are stored in the database, At the same time, the password can be encrypted by SM4 using the answer to the security question and the randomly generated salt 2 (salt), so that the password can be reset after the password is lost. The key decryption process is the opposite of the encryption process. The invention utilizes multiple encryption strategies to effectively protect the security of the encryption key, prevents attackers from obtaining the key through the database, and protects the data security of the Android system.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a key protection management method based on an Android system. Background technique [0002] Android system is today's mainstream mobile operating system and occupies most of the market share of smartphone operating systems. Open source is an important feature of the Android system, which not only promotes the development of the Android system, but also may lead to the leakage of mobile phone privacy data. The data in the Android system is stored on the disk in plaintext. Once stolen, the attacker can know all the stored data. The encryption of private data can well avoid the risk of private data plaintext being stolen. [0003] At present, the mainstream encryption algorithm is the AES algorithm. The AES algorithm has high security, consumes less resources, and supports the key length of variable block length. The key can be generated through the AES algorithm. T...

AI Technical Summary

Problems solved by technology

[0004] In order to improve the deficiency of key management and protection in the encryption system of the existing Android system, the present invention proposes a key management and protection method based on the Android system, which can effectively guarantee the security of the key, and from the Management started to solve the cumbersome encryption process and better adapt to the encryption requirements of the Android system

Images