Card key management method and system

Abstract

The present invention provides a card key management method and system, which relates to the application field of blockchain, and can be applied to the financial field and other fields. The method comprises: obtaining a corresponding card-making file key generated for a card manufacturer; signing the card-making file key through a preset encryption algorithm to obtain a public key, a private key and a card-making signature string; uplinking the card-making signature string to the blockchain, and generating key acquisition notification information, providing the key acquisition notification information and the public key to a predetermined card manufacturing node; the card manufacturing node obtains the card-making file key from the blockchain according to the notification information and the public key to perform a card-making process.

Description

Technical Field

[0001] The present invention relates to the application field of blockchain, and can be applied to the financial field and other fields, and in particular to a card key management method and system. Background Art

[0002] The existing card management method mainly uses databases or files to store and record the process behavior of key management for card production keys and key management behavior. It can be stored in operation logs or related data to standardize key management behavior. For the correctness verification of card production data keys, it is mainly to compare the keys stored in the card management system with the keys in the hands of the card dealer. If they are inconsistent, it means that the key is incorrect. After discovering that the key is incorrect, it is necessary to further manually confirm whether it is the key in the card management system or the key in the hands of the card dealer that is incorrect.

[0003] Using databases or files as storage media cannot fundamentally protect data from being tampered with. Therefore, the key operation records stored in databases or files cannot be guaranteed to be completely authentic and cannot be used as effective evidence in the event of a dispute. When comparing the keys stored in two systems, it is impossible to determine which party's key is incorrect when inconsistencies are found. Usually, the weaker party obeys the stronger party, and finally the key stored by the stronger party is considered the correct key. This method cannot fundamentally determine which party's key is incorrect, and the verification process is also time-consuming. Summary of the invention

[0004] The purpose of the present invention is to provide a card key management method and system to overcome the problems of the current card management system, such as irregular card data key management, lack of effective operation trace mechanism, and malicious tampering of card manufacturer keys.

[0005] To achieve the above-mentioned purpose, the card key management method provided by the present invention specifically includes: obtaining a corresponding card-making file key generated for a card manufacturer; signing the card-making file key through a preset encryption algorithm to obtain a public key, a private key and a card-making signature string; uplinking the card-making signature string to a blockchain, and generating a key acquisition notification message, providing the key acquisition notification message and the public key to a predetermined card manufacturing node; the card manufacturing node obtains the card-making file key from the blockchain according to the notification message and the public key to perform a card-making process.

[0006] In the above-mentioned card key management method, preferably, the method further includes: generating first behavior data by signing the process log of the card making file key and the notification information according to a preset encryption algorithm; and uploading the first behavior data to the blockchain.

[0007] In the above-mentioned card key management method, preferably, the card manufacturing node obtains the card-making file key from the blockchain according to the notification information and the public key to perform a card-making process, which includes: the card manufacturing node applies for the key and the card-making signature string on the blockchain according to the notification information; verifies the card-making signature string according to the public key and the key; and when the verification is passed, performs a card-making process according to the card-making file key.

[0008] In the above-mentioned card key management method, preferably, the card manufacturing node obtains the card-making file key from the blockchain according to the notification information and the public key to perform a card-making process, which also includes: generating second behavior data according to a process log of obtaining the card-making file key and a process log of verifying the card-making signature string by the card manufacturing node; and uploading the second behavior data to the blockchain.

[0009] In the above-mentioned card key management method, preferably, obtaining the corresponding card-making file key generated for the card manufacturer also includes: obtaining a key change request, and obtaining the corresponding card-making file key according to the key change request; and replacing the current card-making file key with the card-making file key corresponding to the key change request.

[0010] In the above-mentioned card key management method, preferably, obtaining the corresponding card-making file key generated for the card manufacturer also includes: generating third behavior data according to the process log of the card-making file key change process; and uploading the third behavior data to the blockchain.

[0011] The present invention also provides a card key management system, the system comprising a card management device and a card manufacturing device; the card management device is used to obtain a corresponding card-making file key generated for a card manufacturer; the card-making file key is signed by a preset encryption algorithm to obtain a public key, a private key and a card-making signature string; the card-making signature string is linked to a blockchain, and a key acquisition notification message is generated, and the key acquisition notification message and the public key are provided to a predetermined card manufacturing device; the card manufacturing device is used to obtain the card-making file key from the blockchain according to the notification message and the public key to perform a card-making process.

[0012] In the above-mentioned card key management system, preferably, the card manufacturing device includes a signature verification module and a card making module, the signature verification module is used to apply for the key and the card making signature string on the blockchain according to the notification information; the card making signature string is verified according to the public key and the key; the card making module is used to perform the card making process according to the card making file key after the signature verification is passed.

[0013] In the above-mentioned card key management system, preferably, the card management device also includes a change module, which is used to obtain a key change request, obtain the corresponding card-making file key according to the key change request; and replace the current card-making file key with the card-making file key corresponding to the key change request.

[0014] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above method when executing the computer program.

[0015] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the above method.

[0016] The beneficial technical effect of the present invention is that: the card key management process based on blockchain fundamentally eliminates the possibility of key tampering. Whether the card management system key is tampered with or the local key of the card manufacturer is tampered with, it will be checked, thereby ensuring the security of the key; the key operation behavior is sent to the blockchain to form a permanent traceable operation record; compared with the existing management model, it is more binding in the standardization of operation behavior and has more legal benefits in resolving disputes. When the key changes, it can take effect quickly. Once the key changes, the key signature string in the blockchain will be updated. The card manufacturer can only verify it after obtaining the latest key, thereby ensuring the real-time nature of the key change, and effectively avoiding the economic losses caused by the wrong production of cards due to the failure to synchronize the key in time. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] The drawings described herein are used to provide a further understanding of the present invention, constitute a part of the present application, and do not constitute a limitation of the present invention. In the drawings:

[0018] Figure 1 A schematic diagram of a process flow of a card key management method provided by an embodiment of the present invention;

[0019] Figure 2 A schematic diagram of a process for generating a card-making file key according to an embodiment of the present invention;

[0020] Figure 3 A schematic diagram of the use process of the card making file key provided by an embodiment of the present invention;

[0021] Figure 4 A schematic diagram of a card making process provided by a card merchant according to an embodiment of the present invention;

[0022] Figure 5 A schematic diagram of a process for changing a card-making file key provided by an embodiment of the present invention;

[0023] Figure 6 A schematic diagram of the overall process of changing the key of a card-making file provided by an embodiment of the present invention;

[0024] Figure 7 A schematic diagram of the process of issuing a card-making file key according to an embodiment of the present invention;

[0025] Figure 8 A schematic diagram of the structure of a card key management system provided by an embodiment of the present invention;

[0026] Fig. 9 A schematic diagram of the structure of an electronic device provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0027] The following will describe the implementation methods of the present invention in detail with reference to the accompanying drawings and embodiments, so that the implementation process of how the present invention applies technical means to solve technical problems and achieve technical effects can be fully understood and implemented accordingly. It should be noted that as long as there is no conflict, the various embodiments of the present invention and the various features in the embodiments can be combined with each other, and the technical solutions formed are all within the protection scope of the present invention.

[0028] In addition, the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer-executable instructions, and although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be performed in an order different from that shown here.

[0029] Please refer to Figure 1 As shown, the card key management method provided by the present invention specifically includes:

[0030] S101 obtains the corresponding card making file key generated for the card manufacturer;

[0031] S102 signs the card-making file key by a preset encryption algorithm to obtain a public key, a private key and a card-making signature string;

[0032] S103: uplinking the card-making signature string to the blockchain, generating key acquisition notification information, and providing the key acquisition notification information and the public key to a predetermined card manufacturing node;

[0033] S104: The card manufacturing node obtains the card manufacturing file key from the blockchain according to the notification information and the public key to perform the card manufacturing process.

[0034] Therefore, the key generation, issuance, change, and use processes are combined with the blockchain to achieve the chain of operation behavior information, traceability of the operation process, and prevent denial, which fundamentally eliminates the possibility of key tampering. Whether the card management system key is tampered with or the local key of the card manufacturer is tampered with, it will be detected, thereby ensuring the security of the key.

[0035] In the above embodiment, the method further comprises: generating first behavior data by signing the process log of the card making file key and the notification information according to the preset encryption algorithm; uploading the first behavior data to the blockchain. Thus, any operation behavior on the card management system side is uploaded to the blockchain, and the evidence is stored to reduce the time and manpower waste of subsequent inspection. For details, please refer to Figure 2 As shown, in actual work, the card-making demand department generates a card-making file key Key for each card dealer in the card management system. After the key is generated, it is signed using the RSA encryption algorithm, and the generated signature string RsaSignKey is stored in the blockchain. The encrypted signature string cannot be illegally tampered with in the blockchain; at the same time, the card dealer is notified to obtain the latest card-making file key; the process of generating the key and the behavior of notifying the card dealer to obtain the key are both linked to the blockchain to form a traceable behavior record. Among them, the card management system generates a set of RSA keys by default, which are used to sign the card-making file key. The private key is stored in the card product management system, and the public key is provided to each card manufacturer. Of course, the key generation method and algorithm in actual work can be adjusted according to actual needs, and the present invention is not further limited here.

[0036] Please refer to Figure 3 As shown, in one embodiment of the present invention, the card manufacturing node obtains the card manufacturing file key from the blockchain according to the notification information and the public key to perform a card manufacturing process, which includes:

[0037] S301: the card manufacturing node applies for obtaining the key and the card manufacturing signature string on the blockchain according to the notification information;

[0038] S302 performs signature verification processing on the card making signature string according to the public key and the secret key;

[0039] S303: After the signature verification is passed, the card making process is performed according to the card making file key.

[0040] The card manufacturing node obtains the card making file key from the blockchain according to the notification information and the public key to perform the card making process, which further includes: generating second behavior data according to the process log of the card manufacturing node obtaining the card making file key and the process log of verifying the card making signature string; and uploading the second behavior data to the blockchain. For details, please refer to Figure 4As shown in the figure, in actual work, when card manufacturers produce cards, they first obtain the key signature string in the blockchain, and then use the local card data key and RSA public key to verify the signature. If the verification is consistent, it means that there is no problem with the key. Otherwise, if the verification is inconsistent, it means that the local key of the card manufacturer is not the latest, or the local key has been maliciously tampered with, and the correct key needs to be obtained before the card production work; the card manufacturer's key verification process based on the blockchain can effectively avoid the problem of card production errors caused by key anomalies, and can effectively stop losses.

[0041] Please refer to Figure 5 As shown, in one embodiment of the present invention, obtaining the corresponding card making file key generated for the card manufacturer further includes:

[0042] S501 obtains a key change request, and obtains a corresponding card making file key according to the key change request;

[0043] S502: Replace the current card making file key with the card making file key corresponding to the key change request.

[0044] Furthermore, obtaining the corresponding card-making file key generated for the card manufacturer further includes: generating third-behavior data according to the process log of the change process of the card-making file key; and uploading the third-behavior data to the blockchain. For details, please refer to Figure 6 As shown in the figure, in actual work, the maintenance personnel of the card management department change the data key of a card manufacturer. Similar to the key generation process mentioned above, the changed key is RSA signed and stored in the blockchain, the latest verification key signature string is generated in the blockchain, and the card manufacturer is notified. In addition, the maintenance personnel's key change operation behavior will be stored in the blockchain.

[0045] Please refer to Figure 7 As shown, in one embodiment of the present invention, the process of the card-making file key being sent from the card management system to the card manufacturer is as follows: the demand department notifies the card manufacturer to obtain the card-making data key, the card manufacturer calls the card management system to obtain the latest key Key, and at the same time calls the blockchain to obtain the key signature string RsaSignKey. The card manufacturer verifies the signature string based on the public key and key Key in hand. If the signature verification passes, it means that there is no problem with the key. Otherwise, if the signature verification fails, it means that the obtained key is incorrect. At this time, there are the following possibilities: the card management system did not notify the card manufacturer in time after the key change, or the key of the card management system was illegally tampered with, so the card-making demand department needs to confirm it. The operation information of each link of the card data delivery is chained to the blockchain, which effectively stores the interactive behavior between the card-making demand department and the card manufacturer to avoid unilateral denial of both parties.

[0046] Please refer to Figure 8As shown, the present invention also provides a card key management system, the system includes a card management device and a card manufacturing device; the card management device is used to obtain the corresponding card-making file key generated for the card manufacturer; the public key, private key and card-making signature string are obtained by signing the card-making file key through a preset encryption algorithm; the card-making signature string is linked to the blockchain, and a key acquisition notification message is generated, and the key acquisition notification message and the public key are provided to a predetermined card manufacturing device; the card manufacturing device is used to obtain the card-making file key from the blockchain according to the notification message and the public key to perform a card-making process.

[0047] In the above embodiment, the card manufacturing device includes a signature verification module and a card making module, the signature verification module is used to apply for the key and the card making signature string on the blockchain according to the notification information; the card making signature string is verified according to the public key and the key; the card making module is used to perform the card making process according to the card making file key after the signature verification is passed. In another embodiment, the card management device further includes a change module, the change module is used to obtain a key change request, obtain the corresponding card making file key according to the key change request; replace the current card making file key with the card making file key corresponding to the key change request. Specifically, the implementation method of each module component in the card management device and the card manufacturing device can refer to the aforementioned embodiment, and the present invention will not be listed in detail one by one here.

[0048] The beneficial technical effect of the present invention is that the card key management process based on blockchain fundamentally eliminates the possibility of key tampering. Whether the card management system key is tampered with or the local key of the card manufacturer is tampered with, it will be checked, thereby ensuring the security of the key. All key operation behaviors are sent to the blockchain to form a permanent and traceable operation record. Compared with the existing management model, it is more binding in the standardization of operation behavior and has more legal benefits in resolving disputes. When the key changes, it can take effect quickly. Once the key changes, the key signature string in the blockchain will be updated. The card manufacturer can only verify it after obtaining the latest key, thereby ensuring the real-time performance after the key change, and effectively avoiding the economic losses caused by the wrong production of cards due to the failure to synchronize the key in time.

[0049] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the above method when executing the computer program.

[0050] The present invention also provides a computer-readable storage medium, wherein the computer-readable storage medium stores a computer program for executing the above method.

[0051] like Fig. 9As shown, the electronic device 600 may further include: a communication module 110, an input unit 120, an audio processing unit 130, a display 160, and a power supply 170. It is worth noting that the electronic device 600 does not necessarily have to include Fig. 9 In addition, the electronic device 600 may also include Fig. 9 For components not shown, reference may be made to the prior art.

[0052] like Fig. 9 As shown, the central processor 100 is sometimes also referred to as a controller or an operation control, and may include a microprocessor or other processor devices and / or logic devices. The central processor 100 receives inputs and controls the operations of various components of the electronic device 600.

[0053] The memory 140 may be, for example, one or more of a cache, a flash memory, a hard drive, a removable medium, a volatile memory, a non-volatile memory or other suitable devices. The above-mentioned information related to the failure may be stored, and a program for executing the relevant information may also be stored. The CPU 100 may execute the program stored in the memory 140 to implement information storage or processing.

[0054] The input unit 120 provides input to the CPU 100. The input unit 120 is, for example, a key or a touch input device. The power supply 170 is used to provide power to the electronic device 600. The display 160 is used to display display objects such as images and text. The display may be, for example, an LCD display, but is not limited thereto.

[0055] The memory 140 may be a solid-state memory, such as a read-only memory (ROM), a random access memory (RAM), a SIM card, etc. It may also be a memory that saves information even when the power is off, can be selectively erased, and is provided with more data, examples of which are sometimes referred to as EPROMs, etc. The memory 140 may also be some other type of device. The memory 140 includes a buffer memory 141 (sometimes referred to as a buffer). The memory 140 may include an application / function storage unit 142, which is used to store application programs and function programs or processes for executing the operation of the electronic device 600 through the central processor 100.

[0056] The memory 140 may also include a data storage unit 143 for storing data, such as contacts, digital data, pictures, sounds, and / or any other data used by the electronic device. The driver storage unit 144 of the memory 140 may include various drivers for communication functions of the electronic device and / or for executing other functions of the electronic device (such as messaging applications, address book applications, etc.).

[0057] The communication module 110 is a transmitter / receiver 110 that transmits and receives signals via an antenna 111. The communication module (transmitter / receiver) 110 is coupled to the central processor 100 to provide input signals and receive output signals, which may be the same as the case of a conventional mobile communication terminal.

[0058] Based on different communication technologies, multiple communication modules 110 may be provided in the same electronic device, such as a cellular network module, a Bluetooth module and / or a wireless LAN module. The communication module (transmitter / receiver) 110 is also coupled to a speaker 131 and a microphone 132 via an audio processor 130 to provide an audio output via the speaker 131 and receive an audio input from the microphone 132, thereby realizing a common telecommunication function. The audio processor 130 may include any suitable buffer, decoder, amplifier, etc. In addition, the audio processor 130 is also coupled to the central processor 100, so that the sound can be recorded on the local machine through the microphone 132, and the sound stored on the local machine can be played through the speaker 131.

[0059] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.

[0060] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0061] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0062] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0063] The specific embodiments described above further illustrate the objectives, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above description is only a specific embodiment of the present invention and is not intended to limit the scope of protection of the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present invention should be included in the scope of protection of the present invention.

Claims

1. A card key management method, characterized in that: The method comprises: Obtain the corresponding card making file key generated for the card manufacturer; Sign the card-making file key by a preset encryption algorithm to obtain a public key, a private key and a card-making signature string; The card-making signature string is chained to the blockchain, and key acquisition notification information is generated, and the key acquisition notification information and the public key are provided to a predetermined card manufacturing node; The card manufacturing node obtains the card manufacturing file key from the blockchain according to the notification information and the public key to perform the card manufacturing process; Generate first behavior data according to the process log of signing the card-making file key according to the preset encryption algorithm and the notification information; The first behavior data is uploaded to the blockchain.

2. The card key management method according to claim 1, characterized in that: The card manufacturing node obtains the card manufacturing file key from the blockchain according to the notification information and the public key to perform a card manufacturing process, which includes: The card manufacturing node applies for obtaining the key and the card manufacturing signature string on the blockchain according to the notification information; Performing signature verification processing on the card making signature string according to the public key and the secret key; When the signature verification is passed, the card making process is carried out according to the card making file key.

3. The card key management method according to claim 2, characterized in that: The card manufacturing node obtains the card manufacturing file key from the blockchain according to the notification information and the public key to perform the card manufacturing process, which further includes: Generate second behavior data according to the process log of obtaining the card-making file key and the process log of verifying the card-making signature string by the card-making node; The second behavior data is uploaded to the blockchain.

4. The card key management method according to claim 1, characterized in that: Obtaining the corresponding card-making file key generated for the card manufacturer also includes: Obtain a key change request, and obtain a corresponding card making file key according to the key change request; The current card making file key is replaced by the card making file key corresponding to the key change request.

5. The card key management method according to claim 4, characterized in that: Obtaining the corresponding card-making file key generated for the card manufacturer also includes: Generate third-behavior data according to the process log of the change process of the card-making file key; The third behavior data is uploaded to the blockchain.

6. A card key management system, characterized in that: The system comprises a card management device and a card manufacturing device; The card management device is used to obtain the corresponding card-making file key generated for the card manufacturer; the card-making file key is signed by a preset encryption algorithm to obtain a public key, a private key and a card-making signature string; The card making signature string is chained to the blockchain, and key acquisition notification information is generated, and the key acquisition notification information and the public key are provided to a predetermined card making device; The card manufacturing device is used to obtain the card manufacturing file key from the blockchain according to the notification information and the public key to perform a card manufacturing process; The card manufacturing device includes a signature verification module and a card making module. The signature verification module is used to apply for the key and the card making signature string on the blockchain according to the notification information; the card making signature string is verified according to the public key and the key; the card making module is used to perform a card making process according to the card making file key after the signature verification is passed.

7. The card key management system according to claim 6, characterized in that: The card management device further includes a change module, which is used to obtain a key change request, obtain a corresponding card-making file key according to the key change request, and replace the current card-making file key with the card-making file key corresponding to the key change request.

8. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the method according to any one of claims 1 to 5 is implemented.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program for causing a computer to execute the method according to any one of claims 1 to 5.

Images