A digital authorization method, device, terminal equipment and storage medium
The digital authorization method using a key pair generation system with secure private key storage and dual encryption algorithms addresses vulnerabilities in software-based encryption, enhancing data security and confidentiality.
Patent Information
- Application Number
- CN202111358191.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2021-11-16
- Publication Date
- 2025-01-03
- Estimated Expiration
- 2041-11-16
AI Technical Summary
Existing data encryption systems using software are vulnerable to network attacks, leading to data leakage and poor confidentiality.
A digital authorization method using a key pair generation system, where a public key is used for encryption and a private key for decryption, with the private key stored securely on a digital authorization device, and a second encryption algorithm used to protect the private key, ensuring only authorized devices can decrypt data.
Enhances data security and confidentiality by ensuring only authorized devices can decrypt data, preventing unauthorized access and data leakage.
Smart Images
Figure CN114329510B_ABST
Abstract
Description
Technical Field
[0001] The present application relates to the field of data processing technology, and in particular to a digital authorization method, apparatus, terminal equipment and storage medium. Background Art
[0002] With the rapid development of network technology, daily life and work are gradually becoming information-based. Informationization can make life more convenient, but it also has certain security risks. For example, once important information such as bank card passwords and business secrets are leaked, it will cause irreparable losses. Therefore, information security has gradually received attention from people.
[0003] Data encryption technology is the core technology of data security. Encryption is the process of converting "plaintext" data, i.e. readable data, into "ciphertext"; decryption is the process of restoring "ciphertext" to "plaintext". Both encryption and decryption need to be implemented through cryptographic algorithms. The more complex the algorithm, the more secure the ciphertext.
[0004] At present, scientists have proposed many data encryption algorithms and software to encrypt data. However, using software encryption systems to encrypt data is vulnerable to attacks by network hackers and decryption software, resulting in data leakage and poor confidentiality. Summary of the invention
[0005] The main technical problem solved by the present application is to provide a digital authorization method, which obtains a user name and a security code, and sends the user name and the security code to a connected first digital authorization device, so that the first digital authorization device generates a corresponding key pair according to the user name and the security code, and the key pair includes a public key and a private key. The public key can be parsed into plain text by the terminal device and used, and the private key plain text can only be parsed inside the device and is not disclosed to the outside. The public key is used to encrypt data, and the private key is used to decrypt encrypted data. The method can realize the authorization of the terminal device and the digital authorization device, and decrypt the data, while improving the security and confidentiality of the data sharing process.
[0006] In order to solve the above technical problems, a technical solution adopted in the present application is: a digital authorization method is provided, which is applied to a terminal device, specifically including obtaining a user name and a security code; sending the user name and the security code to a connected first digital authorization device, so that the first digital authorization device generates a corresponding key pair according to the user name and the security code, and the key pair includes a public key and a private key; obtaining the public key sent by the first digital authorization device; wherein the public key is used to encrypt data, and the private key is used to decrypt the encrypted data.
[0007] Furthermore, data to be encrypted is obtained; and the data to be encrypted is encrypted using a first encryption algorithm using a public key.
[0008] Furthermore, the above method also includes obtaining encrypted data; sending the encrypted data to the first digital authorization device so that the first digital authorization device decrypts the encrypted data using a private key; and obtaining the decrypted data sent by the first digital authorization device.
[0009] The method further includes obtaining an encrypted private key sent by the first digital authorization device, where the encrypted private key is obtained by encrypting the private key by the first digital authorization device using a second encryption algorithm; and storing the encrypted private key.
[0010] The method further includes sending the user name, security code and encrypted private key to a second digital authorization device, so that the second digital authorization device uses the security code to construct a decryption key corresponding to the encrypted private key, and uses the decryption key to decrypt the encrypted private key to obtain the private key plaintext, and save the private key plaintext; wherein the private key plaintext is used to decrypt the data encrypted by the public key.
[0011] The first encryption algorithm and the second encryption algorithm are different.
[0012] The method further includes sending the user name to the first digital authorization device so that the first digital authorization device compares the acquired user name with the pre-saved user name; receiving the comparison result sent by the first digital authorization device; and in response to the two user names being the same, sending a reset instruction to the first digital authorization device to reset the first digital authorization device.
[0013] Among them, the terminal device is connected to the first digital authorization device through a data interface, and the data interface includes any one of a USB interface, a Type-C interface, an SPI interface and a UART interface.
[0014] In order to solve the above problems, another technical solution adopted by the present application is: to provide a digital authorization method, which is applied to a first digital authorization device, including obtaining a user name and a security code sent by a connected terminal device; generating a corresponding key pair based on the user name and the security code, the key pair including a public key and a private key; saving the private key, and sending the public key to the terminal device; wherein the public key is used to encrypt data, and the private key is used to decrypt the encrypted data.
[0015] In order to solve the above problems, another technical solution adopted in the present application is: to provide a digital authorization method, which is applied to a second digital authorization device, including receiving a user name, a security code and an encrypted private key sent by a terminal device; using the security code to construct a decryption key corresponding to the encrypted private key; using the decryption key to decrypt the encrypted private key to obtain a private key plaintext; saving the private key plaintext; wherein the private key plaintext is used to decrypt data encrypted by a public key bound to the encrypted private key.
[0016] In order to solve the above problem, another technical solution adopted in the present application is: to provide a terminal device, including a processor and a memory coupled to the processor, the memory storing a computer program, and the processor being used to execute the computer program to implement the above method.
[0017] In order to solve the above problem, another technical solution adopted by the present application is: to provide a digital authorization device, including a processor and a memory coupled to the processor, the memory storing a computer program, and the processor is used to execute the computer program to implement the above method.
[0018] In order to solve the above problem, another technical solution adopted by the present application is: providing a computer-readable storage medium, wherein the computer-readable storage medium stores program data, and the program data is used to implement the above method when executed by a processor.
[0019] The beneficial effects of the present application are as follows: Different from the prior art, the present application provides a digital authorization method. The method obtains a user name and a security code; sends the user name and the security code to a connected first digital authorization device, so that the first digital authorization device generates a corresponding key pair according to the user name and the security code, and the key pair includes a public key and a private key; obtains the public key sent by the first digital authorization device; wherein the public key is used to encrypt data, and the private key is used to decrypt the encrypted data. In the above manner, the present application can realize the authorization, cloning and resetting of the digital authorization device and the confidentiality of the encrypted files, thereby improving the security and confidentiality of the data sharing process. BRIEF DESCRIPTION OF THE DRAWINGS
[0020] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:
[0021] Figure 1 This is a flowchart of a first embodiment of a digital authorization method provided by the present application;
[0022] Figure 2 It is a flowchart of an embodiment of a data encryption method provided by the present application;
[0023] Figure 3 It is a flowchart of an embodiment of a data decryption method provided by the present application;
[0024] Figure 4 This is a flowchart of an embodiment of a method for obtaining an encryption private key provided by the present application;
[0025] Figure 5 It is a flowchart of an embodiment of a method for resetting a digital authorization device provided by the present application;
[0026] Figure 6 This is a flow chart of a second embodiment of a digital authorization method provided by the present application;
[0027] Figure 7 This is a flowchart of a third embodiment of a digital authorization method provided by the present application;
[0028] Figure 8 It is a flowchart of another embodiment of a data decryption method provided by the present application;
[0029] Fig. 9 It is a flowchart of another embodiment of a method for resetting a digital authorization device provided by the present application;
[0030] Fig.10 It is a structural schematic diagram of an embodiment of a terminal device provided by the present application;
[0031] Fig.11 It is a structural diagram of an embodiment of a digital authorization device provided by the present application;
[0032] Fig.12 It is a structural schematic diagram of an embodiment of a computer-readable storage medium provided by the present application. DETAILED DESCRIPTION
[0033] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. It will be understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for ease of description, only some but not all methods and processes related to the present application are shown in the drawings. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application.
[0034] The terms "including" and "having" and any variations thereof in this application are intended to cover non-exclusive inclusions. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but may optionally include steps or units not listed, or may optionally include other steps or units inherent to these processes, methods, products or devices.
[0035] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.
[0036] In daily life, there are often some important data or files such as commercial secrets and military secrets that need to be saved and transmitted in a highly confidential manner. In many cases, the data only wants to be transmitted to a certain person for viewing, and other people are not allowed to view it. If the data is encrypted by software encryption and decryption, it is very easy to be attacked by a network, and the password is eventually cracked, resulting in data leakage. However, this situation can be avoided by encrypting and decrypting the data through a digital authorization device. When you want to view the encrypted data, you must have a device that can decrypt the encrypted data before you can view it. On this basis, the present application proposes a digital authorization method for authorizing a digital authorization device, which is applied to a terminal device.
[0037] See also Figure 1 , Figure 1 This is a flowchart of a first embodiment of a digital authorization method provided by the present application. The digital authorization method of this embodiment specifically includes steps 11 to 13:
[0038] Step 11: Get your username and security code.
[0039] The digital authorization method in this embodiment is applied to a terminal device, and the terminal device is connected to a digital authorization device to establish communication. When the digital authorization device is connected to the terminal device for the first time, the terminal device needs to authorize the digital authorization device. Therefore, the user name and security code of the terminal device are entered in the terminal device to register. The terminal device completes the process of obtaining the user name and security code. Among them, the security code is a string of digital characters, which is set and remembered by the user himself.
[0040] The terminal device involved in this application is a smart device with networking function that can upload data to a server, such as a mobile phone, a computer, etc.
[0041] Step 12: Send the user name and security code to the connected first digital authorization device, so that the digital authorization device generates a corresponding key pair according to the user name and security code, and the key pair includes a public key and a private key.
[0042] A communication connection is established between the terminal device and the digital authorization device, and the terminal device sends the user name and security code to the digital authorization device, which generates a public key and a private key based on the sent user name and security code.
[0043] The public key and private key are a key pair (i.e., a public key and a private key) obtained through an algorithm, in which the plain text content of the public key can be disclosed to the outside world; the plain text content of the private key can only be parsed and saved by the device itself. The key pair obtained through this algorithm can be guaranteed to be unique worldwide. When using this key pair, if one of the keys is used to encrypt a piece of data, the other key must be used to decrypt it. That is, if the public key is used for encryption, the private key corresponding to the public key must be used for decryption.
[0044] Step 13: Obtain the public key sent by the first digital authorization device; wherein the public key is used to encrypt data, and the private key is used to decrypt the encrypted data.
[0045] After the terminal device instructs the digital authorization device to generate a public key and a private key, it is necessary to obtain the public key generated in the digital authorization device in order to subsequently encrypt the data and store the public key in the terminal device.
[0046] Through the above embodiments, the present application obtains a user name and a security code; sends the user name and the security code to the connected first digital authorization device, so that the first digital authorization device generates a corresponding key pair according to the user name and the security code, and the key pair includes a public key and a private key; obtains the public key sent by the first digital authorization device; wherein the public key is used to encrypt data, and the private key is used to decrypt the encrypted data, thereby realizing the process of establishing a communication connection between the terminal device and the digital authorization device, and authorizing the digital authorization device through the terminal device. Based on this method, the present application proposes a data encryption method.
[0047] Specific reference Figure 2 , Figure 2 This is a flow chart of an embodiment of a data encryption method provided by the present application. This embodiment specifically includes steps 21 to 22:
[0048] Step 21: Get the data to be encrypted.
[0049] First, you can share files from other terminal devices, or download data from the cloud or use data saved in your terminal device to obtain data;
[0050] Step 22: Encrypt the data to be encrypted using the first encryption algorithm using the public key.
[0051] In the terminal device, the public key is used to encrypt the data using an asymmetric encryption algorithm, and when decrypting, the private key corresponding to the public key is required to decrypt the data.
[0052] After the data is encrypted, if the terminal device wants to view the encrypted data, it needs to connect to the digital authorization device to decrypt the data. Among them, the private key in the digital authorization device matches the public key used to encrypt the data. Therefore, this application proposes a data decryption method.
[0053] Specific reference Figure 3 , Figure 3 This is a flow chart of an embodiment of a data decryption method provided by the present application. This embodiment specifically includes steps 23 to 25;
[0054] Step 23: Get the encrypted data.
[0055] Step 24: Send the encrypted data to the first digital authorization device, so that the first digital authorization device decrypts the encrypted data using the private key.
[0056] Step 25: Obtain the decrypted data sent by the first digital authorization device.
[0057] In this embodiment, the terminal device first obtains the encrypted data, which is encrypted by the public key. The terminal device itself cannot decrypt the encrypted data, so it needs to send the encrypted data to the first digital authorization device, which uses the private key corresponding to the encryption public key to decrypt the encrypted data and decrypt the encrypted data into data plaintext. The first digital authorization device sends the data plaintext to the terminal device, and the terminal device can view the data.
[0058] In many cases, after the original terminal device encrypts the data, it sends the encrypted data to other terminal devices. If other terminal devices want to view the encrypted data, they need to connect to a digital authorization device with a private key corresponding to the public key to successfully decrypt the encrypted data. In the first case, the first digital authorization device bound with the original user name and security code can be connected to other terminal devices to decrypt the encrypted data; in the second case, the user name and security code bound to the original first digital authorization device and the encrypted private key can be used to clone the second digital authorization device, and the second digital authorization device has the same key pair and the same function as the first digital authorization device. Therefore, before cloning, it is necessary to obtain the encrypted private key of the first digital authorization device.
[0059] Specific reference Figure 4 , Figure 4 This is a flowchart of an embodiment of a method for obtaining an encryption private key provided by the present application. This embodiment specifically includes steps 14 to 15:
[0060] Step 14: Obtain the encrypted private key sent by the first digital authorization device, where the encrypted private key is obtained by encrypting the private key by the first digital authorization device using a second encryption algorithm.
[0061] The private key is private, so only the first digital authorization device has a unique plaintext private key. When the terminal device communicates with the first digital authorization device, the terminal device obtains the encrypted private key obtained by encrypting the private key using a symmetric encryption algorithm by the first digital authorization device. The terminal device cannot crack the encrypted private key, which is used to clone the second digital authorization device.
[0062] Step 15: Save the encrypted private key.
[0063] Save the encrypted private key in the terminal device.
[0064] Next, the second digital authorization device can be cloned using the user name, security code and encryption private key corresponding to the first digital authorization device. For details, see step 81:
[0065] Step 81: Send the user name, security code and encrypted private key to the second digital authorization device, so that the second digital authorization device uses the security code to construct a decryption key corresponding to the encrypted private key, and uses the decryption key to decrypt the encrypted private key to obtain the private key plaintext, and save the private key plaintext; wherein, the private key plaintext is used to decrypt the data encrypted by the public key.
[0066] The above user name, security code and encrypted private key are the user name, security code and encrypted private key corresponding to the first digital authorization device. The encrypted private key can only be decrypted by the digital authorization device, so the second digital authorization device decrypts the encrypted private key, and the obtained private key plaintext is the same as the private key plaintext in the first digital authorization device, which completes the cloning process of the digital authorization device.
[0067] Normally, a user name can be bound to multiple digital authorization devices, and the security code corresponding to each digital authorization device may be different. The digital authorization device can only be started with the correct security code. If the security code is forgotten, the corresponding digital authorization device cannot be used. At this time, if the digital authorization device whose security code is forgotten needs to be used again, the digital authorization device needs to be reset, all the information stored inside it needs to be erased, and it needs to be restored to an unused state. Based on the above application, the present application proposes a method for resetting a digital authorization device.
[0068] Specific reference Figure 5 , Figure 5 This is a flowchart of an embodiment of a method for resetting a digital authorization device provided by the present application. This embodiment specifically includes steps 31 to 33:
[0069] Step 31: Send the user name to the first digital authorization device, so that the first digital authorization device compares the acquired user name with the pre-stored user name.
[0070] First, the user name is compared with the user name stored in the first digital authorization device to determine whether the terminal device has the right to operate the first digital authorization device.
[0071] Step 32: Accept the comparison result sent by the first digital authorization device.
[0072] The comparison result is that the two user names are the same or the two user names are different. If they are the same, an instruction to continue the operation is received; if they are different, an instruction to stop the operation is received.
[0073] Step 33: In response to the two user names being the same, sending a reset instruction to the first digital authorization device to reset the first digital authorization device.
[0074] When the two user names are the same, the terminal device receives an instruction to continue the operation and sends a reset instruction to the first digital authorization device to restore the first digital authorization device to an unused state.
[0075] On this basis, this application proposes a digital authorization method, which is applied to a first digital authorization device. Figure 6 , Figure 6 This is a flow chart of a second embodiment of a digital authorization method provided by the present application. This embodiment specifically includes steps 41 to 43:
[0076] Step 41: Obtain the user name and security code sent by the connected terminal device.
[0077] Step 42: Generate a corresponding key pair according to the user name and security code, the key pair includes a public key and a private key.
[0078] Step 43: Save the private key, and send the public key and the encrypted private key to the terminal device; wherein the public key is used to encrypt the data, and the private key is used to decrypt the data.
[0079] First, the terminal device is connected to the first digital authorization device through an interface, wherein the type of the data interface can be any one of a USB interface, a Type-C interface, an SPI interface, and a UART interface. When the interface type is a USB interface, the digital authorization device can be designed as a HID or CCID type device.
[0080] When the first digital authorization device is connected to the terminal device through the data interface, a communication connection can be established with the terminal device. First, the user name and security code sent by the terminal device are obtained, and then the user name and security code are used to generate a key pair that is exclusive to the first digital authorization device. The public key and the private key are both stored in the first digital authorization device. The public key and the encrypted private key are sent to the terminal device so that the terminal device can encrypt the data using the public key. The terminal device cannot decrypt the encrypted private key and can only be stored in the terminal device for use when cloning other digital authorization devices.
[0081] At the same time, a digital authorization method is proposed for the second digital authorization device. Figure 7 , Figure 7 This is a flowchart of a third embodiment of a digital authorization method provided by the present application. This embodiment specifically includes steps 51 to 54:
[0082] Step 51: Receive the user name, security code and encrypted private key sent by the terminal device.
[0083] The user name, security code and encryption private key are the user name, security code and encryption private key bound to the first digital authorization device.
[0084] Step 52: Use the security code to construct a decryption key corresponding to the encrypted private key.
[0085] The first digital authorization device uses a security code to use a symmetric algorithm to encrypt the private key, and the second digital authorization device uses the security code to decrypt the private key using the same symmetric algorithm to obtain the private key plaintext.
[0086] Step 53: Use the decryption key to decrypt the encrypted private key to obtain the private key plaintext.
[0087] Step 54: Save the private key plaintext; wherein the private key plaintext is used to decrypt the data encrypted by the public key bound to the encryption private key.
[0088] The private key plaintext in the second digital authorization device is generated by the same security code as the private key in the first digital authorization device, so the functions and effects are the same. The above process completes the cloning process of the second digital authorization device, and the second digital authorization device can be used to decrypt the data encrypted by the public key generated by the first digital authorization device.
[0089] According to the above method, the decryption operation of the data can also be completed in the first digital authorization device and the second digital authorization device. Figure 8 , Figure 8 This is a flow chart of another embodiment of a data decryption method provided by the present application. This embodiment specifically includes steps 61 to 63:
[0090] Step 61: Obtain the encrypted data sent by the terminal device; wherein the encrypted data is encrypted by the terminal device using a public key and a first encryption algorithm.
[0091] Step 62: Decrypt the encrypted data into plain text using the private key.
[0092] Step 63: Send the data in plain text to the terminal device.
[0093] Similarly, the reset operation of the digital authorization device can also be implemented for the first digital authorization device and the second digital authorization device. Fig. 9 , Fig. 9 It is a flowchart of another embodiment of a digital authorization device reset method provided by the present application.
[0094] This embodiment specifically includes steps 71 to 74:
[0095] Step 71: Obtain the user name sent by the terminal device.
[0096] Step 72: Compare the acquired user name with the pre-stored user name.
[0097] Step 73: In response to the two user names being the same, sending a comparison result to the terminal device.
[0098] Step 74: Responding to the reset instruction sent by the terminal device, the first digital authorization device is reset.
[0099] First, the first digital authorization device obtains the user name sent by the terminal device, and compares the user name with the user name bound to the first digital authorization device. If the two user names are the same, an instruction to continue the operation is sent to the terminal device; if they are different, an instruction to stop the operation is sent to the terminal device. When the two user names are the same and a reset instruction sent by the terminal device is received, the first digital authorization device is reset to restore it to an unused state.
[0100] According to the above embodiments, the present application provides a terminal device. Fig.10 , Fig.10 It is a structural diagram of an embodiment of a terminal device provided by the present application.
[0101] The terminal device 100 includes a processor 110 and a memory 120. The processor 110 and the memory 120 are coupled. The memory 120 stores a computer program, which is used to execute the above digital authorization method.
[0102] Specific reference Fig.11 , Fig.11It is a structural diagram of an embodiment of a digital authorization device provided by the present application.
[0103] The digital authorization device 200 includes a processor 210 and a memory 220. The processor 210 and the memory 220 are coupled. The memory 220 stores a computer program, which is used to execute the above digital authorization method.
[0104] Specific reference Fig.12 , Fig.12 It is a structural schematic diagram of an embodiment of a computer-readable storage medium provided by the present application.
[0105] The computer-readable storage medium 300 includes program data 310. When the program data 310 is executed by a processor, the above-mentioned digital authorization method can be implemented.
[0106] Different from the prior art, the present application proposes a digital authorization method, which obtains a user name and a security code, and sends the user name and the security code to a connected first digital authorization device, so that the digital authorization device generates a corresponding key pair according to the user name and the security code, and the key pair includes a public key and a private key. In this way, the present application can achieve that only the private key that matches the public key can be used to successfully decrypt the data. At the same time, because the private key is in the digital authorization device, and the digital authorization device is unique and irreplaceable, although the device can be cloned, the number is limited, which greatly improves the security and confidentiality of the data sharing process. In summary, the present application has the advantage of improving the security and confidentiality of the data sharing process.
[0107] The above descriptions are merely embodiments of the present application and are not intended to limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present application.
Claims
1. A digital authorization method, characterized in that: The method is applied to a terminal device, and the method comprises: Get the user name and security code; Sending the user name and the security code to a first digital authorization device connected via a data interface, so that the first digital authorization device generates a corresponding key pair according to the user name and the security code, the key pair including a public key and a private key; wherein the data interface includes any one of a USB interface, a Type-C interface, an SPI interface, and a UART interface; Obtaining the public key and encrypted private key sent by the first digital authorization device; wherein the public key is used to encrypt the data to be encrypted using a first encryption algorithm at the terminal device, and the private key is used by the first digital authorization device to decrypt the encrypted data; wherein the encrypted private key is obtained by encrypting the private key using a second encryption algorithm by the first digital authorization device, and is stored in the terminal device; And the cloning process of cloning the second digital authorization device using the user name, security code and encrypted private key bound to the first digital authorization device includes: sending the user name, the security code and the encrypted private key to the second digital authorization device, so that the second digital authorization device uses the security code to construct a decryption key corresponding to the encrypted private key, and uses the decryption key to decrypt the encrypted private key to obtain a private key plaintext, and saves the private key plaintext, wherein the private key plaintext is the same as the private key plaintext in the first digital authorization device; The private key plaintext is used to decrypt the data encrypted by the public key.
2. The method according to claim 1, characterized in that: The method further comprises: Get encrypted data; sending the encrypted data to the first digital authorization device so that the first digital authorization device decrypts the encrypted data using the private key; The decrypted data sent by the first digital authorization device is obtained.
3. The method according to claim 1 or 2, characterized in that: The method further comprises: The first encryption algorithm and the second encryption algorithm are different.
4. The method according to claim 1, characterized in that: The method further comprises: Sending the user name to the first digital authorization device, so that the first digital authorization device compares the acquired user name with the pre-stored user name; receiving a comparison result sent by the first digital authorization device; In response to the two user names being the same, sending a reset instruction to the first digital authorization device to reset the first digital authorization device.
5. A digital authorization method, characterized in that: The method is applied to a first digital authorization device, and the method comprises: Obtaining a user name and a security code sent by a terminal device connected via a data interface; wherein the data interface includes any one of a USB interface, a Type-C interface, an SPI interface, and a UART interface; Generate a corresponding key pair according to the user name and the security code, the key pair including a public key and a private key; The private key is saved, and the public key and the encrypted private key are sent to the terminal device; wherein the public key is used to encrypt the data to be encrypted by using a first encryption algorithm at the terminal device, the private key is used by the first digital authorization device to decrypt the encrypted data, and the encrypted private key is obtained by encrypting the private key by using a second encryption algorithm by the first digital authorization device and saved in the terminal device; Among them, the cloning process of cloning the second digital authorization device using the user name, security code and encrypted private key bound to the first digital authorization device includes: the terminal device sends the user name, the security code and the encrypted private key to the second digital authorization device, so that the second digital authorization device uses the security code to construct a decryption key corresponding to the encrypted private key, and the second digital authorization device uses the decryption key to decrypt the encrypted private key to obtain the private key plaintext, and saves the private key plaintext; the private key plaintext is used to decrypt the data encrypted by the public key, and the private key plaintext is the same as the private key plaintext in the first digital authorization device.
6. A digital authorization method, characterized in that: The method is applied to a second digital authorization device, and the method comprises: The original terminal device obtains a user name and a security code; sends the user name and the security code to a first digital authorization device connected via a data interface, so that the first digital authorization device generates a corresponding key pair according to the user name and the security code, and the key pair includes a public key and a private key; wherein the data interface includes any one of a USB interface, a Type-C interface, an SPI interface, and a UART interface; the original terminal device obtains the public key and the encrypted private key sent by the first digital authorization device; wherein the public key is used to encrypt the encrypted data using a first encryption algorithm in the original terminal device, and the private key is used by the first digital authorization device to decrypt the encrypted data; wherein the encrypted private key is obtained by encrypting the private key by the first digital authorization device using a second encryption algorithm, and is stored in the original terminal device; And when the original terminal device encrypts the data, it sends the encrypted data to other terminal devices. If the other terminal devices want to view the encrypted data, the user name, security code and encryption private key bound to the first digital authorization device are used to clone the second digital authorization device, including: the second digital authorization device receives the user name, security code and encryption private key sent by the original terminal device connected through a data interface; wherein the data interface includes any one of a USB interface, a Type-C interface, an SPI interface and a UART interface; Constructing a decryption key corresponding to the encrypted private key using the security code; Decrypting the encrypted private key using the decryption key to obtain a private key plaintext, wherein the private key plaintext is the same as the private key plaintext in the first digital authorization device; The private key plaintext is saved; wherein the private key plaintext is used to decrypt data encrypted by the public key bound to the encrypted private key.
7. A terminal device, characterized in that: The terminal device includes a processor and a memory coupled to the processor, wherein the memory stores a computer program, and the processor is configured to execute the computer program to implement the method according to any one of claims 1 to 6.
8. A digital authorization device, characterized in that: The digital authorization device comprises a processor and a memory coupled to the processor, wherein a computer program is stored in the memory, and the processor is configured to execute the computer program to implement the method according to any one of claims 1 to 6.
9. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores program data, and when the program data is executed by a processor, it is used to implement the method according to any one of claims 1 to 6.