Root key derivation method and device, electronic equipment and storage medium

A root key and key technology, applied in the field of encryption, decryption and key management, to achieve the effect of improving security and reliability

CN114745112APending Publication Date: 2022-07-12北京凝思软件股份有限公司
0 Cites 0 Cited by

Patent Information

Authority / Receiving Office
CN · China
Patent Type
Applications(China)
Current Assignee / Owner
Publication Date
2022-07-12

Smart Images

  • Figure 1
    Figure 1
  • Figure 2
    Figure 2
  • Figure 3
    Figure 3
Patent Text Reader

Abstract

The invention provides a root key derivation method and device, electronic equipment and a storage medium. The derivation method comprises the following steps: firstly, splicing a preset feature code of a software password module with a hardware fingerprint to obtain a first bit string; performing hash operation on the first bit string to obtain a first digest value; obtaining a second bit string through a first method, and performing key dispersion operation on the first digest value by using the second bit string to obtain a third bit string; then selecting a first target field of the third bit string as a root key of the software cipher module; performing key verification operation on the root key to obtain a fourth bit string as a root key verification value; and finally, storing the second bit string and the fourth bit string into a kernel key ring of the software password module. According to the method, the problem of accessing key security parameters in the software password module by crossing a security boundary and a security operation environment can be avoided, and the security and reliability of the software password module are improved.
Need to check novelty before this filing date? Find Prior Art

Description

technical field

[0001] The present invention relates to the fields of encryption and decryption and key management, in particular to a root key derivation method, device, electronic device and storage medium. Background technique

[0002] With the increasingly severe information security situation, the domestic competent authorities have also strengthened the management and control requirements for information system security assessment, and successively issued a series of standards and policies related to security assessment, which put forward higher standards for the application of cryptography as the cornerstone of information security. The requirements for the product application of the cryptographic module are increasing day by day.

[0003] At present, most of the cryptographic modules that meet the requirements of the national cryptographic authority are mainly in the form of hardware. , mostly based on software cryptographic modules. Because the top-level root key ...

Examples

Embodiment Construction

[0055]In order to make those skilled in the art better understand the technical solutions in one or more embodiments of this specification, the following will describe the technical solutions in one or more embodiments of this specification with reference to the accompanying drawings in one or more embodiments of this specification. The technical solution is clearly and completely described, and obviously, the described embodiments are only a part of the embodiments of the present specification, rather than all the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the protection scope of this document.

[0056] It should be noted that, the descriptions in the embodiments of the present invention are only to illustrate the technical solutions of the embodiments of the present invention more clearly, and do not constitute a limitation on the technic...