Encryption and decryption method based on RSA algorithm

Abstract

The invention provides an encryption and decryption method based on an RSA algorithm, and the method comprises the steps: 1, enabling an authorization party to generate a public key and a private key, enabling the authorization party to store the private key, and enabling the public key to be placed in a business system; 2, the authorization party encrypts the authorization information through a private key; 3, generating an authorization file from the encrypted ciphertext; 4, uploading the authorization file to a service system; 5, verifying and decrypting the authorization file through a public key in the service system; step 6, obtaining authorization information in the authorization file; and step 7, performing service logic control according to the authorization information. According to the invention, an asymmetric encryption mode is adopted, the security and non-tampering property of the authorization file are improved, the risk of secret leakage is reduced through a public and private key mode, and the requirements of security and uniqueness of the authorization file are met.

Description

technical field [0001] The invention relates to an encryption and decryption method based on an RSA algorithm, belonging to the technical field of information security. Background technique [0002] At present, symmetric encryption algorithms such as DES and AES are used for encryption and decryption of authorized files. However, as the risk of information leakage gradually increases, the traditional symmetric encryption algorithm encrypts the authorization file. If the key is leaked at either end, the authorization file becomes no longer secure. The prior art implementation is as follows: [0003] Authorizer Encryption: Obtain a symmetric encryption key such as AES. Encrypt the authorization information to obtain the ciphertext, write the ciphertext to the authorization file, and generate the authorization file. [0004] Decryption on the business system side: The application system obtains the authorization file, decrypts the ciphertext through the key, obtains the decr...

AI Technical Summary

Problems solved by technology

[0005] No matter which party in the above method disperses or spreads the key, the authorization information will be leaked, or the authorization file will be copied, which cannot guarantee security

Images