Sensitive information transmission method and terminal

Abstract

The present invention discloses a sensitive information transmission method and terminal. According to an embodiment of the present invention, the sensitive information transmission method includes generating a first key pair set and a corresponding first key index; encrypting the sensitive information using a sensitive information encryption key to obtain a sensitive information encrypted ciphertext; encrypting the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encrypted key data; generating data to be signed, and signing the data to be signed using at least one first signature key in the first key pair set to obtain signature data; sending the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key. According to the sensitive information transmission method and terminal of the embodiment of the present invention, the security of information transmission is improved.

Description

Technical Field

[0001] The present invention relates to the field of encryption technology, and in particular to a sensitive information transmission method and terminal. Background Art

[0002] With the rapid development of computer technology, information networks have become an important guarantee for social development. A lot of information transmitted by information networks is sensitive information and is subject to various human attacks: such as information leakage, information theft, data tampering, data addition and reduction, etc. In order to protect sensitive information, encryption is a commonly used scientific method.

[0003] The encryption algorithm mathematically combines the input text data with an encryption key to produce encrypted data. With a good encryption algorithm, it is not so easy to restore the original text by using the ciphertext to reverse the encryption and decryption process. A decryption key is required to perform the corresponding conversion. According to whether the encryption and decryption keys are the same, encryption and decryption algorithms are divided into symmetric algorithms and asymmetric algorithms. The former uses the same key for encryption and decryption, while the latter uses different keys for encryption and decryption. Under this premise, using data encryption to communicate information can ensure the security of sensitive information to a certain extent.

[0004] The existing public key method can have a variety of certificate systems in different formats. In many systems, it is believed that a person has only one certificate. In fact, each person has multiple identities, and the certificates and keys used in different application scenarios may be different, so it is possible to have multiple certificates and multiple sets of key pairs that match them. In general, the keys / key pairs / certificates statically stored in the secure carrier are limited, and the single key / key pair / certificate system has the problem of being unusable after the certificate is lost, expired or destroyed. Static keys also have a higher risk of being cracked. When the only certificate is lost, expired, or destroyed, it will result in the inability to encrypt data through the public key in the certificate, and it will also be impossible to use the private key that matches the public key to verify the signature result of the data.

[0005] Therefore, it is hoped that there will be a new sensitive information transmission method and terminal. Summary of the invention

[0006] In view of the above problems, an object of the present invention is to provide a sensitive information transmission method and terminal, so as to improve the security of information transmission.

[0007] According to one aspect of the present invention, a sensitive information transmission method is provided, including generating a first key pair set and a corresponding first key index; encrypting the sensitive information using a sensitive information encryption key to obtain a sensitive information encrypted ciphertext; encrypting the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encrypted key data; generating data to be signed, and signing the data to be signed using at least one first signature key in the first key pair set to obtain signature data; and sending the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key.

[0008] Optionally, the sensitive information encryption key is a random symmetric key; the first encryption key is a public key, and the encryption key data is session key ciphertext data in a digital envelope format; and the first signature key is a private key.

[0009] According to one aspect of the present invention, a terminal is provided, comprising a first generating unit, configured to generate a first key pair set and a corresponding first key index; a data to be signed generating unit, configured to generate data to be signed; a first encryption unit, configured to encrypt sensitive information using a sensitive information encryption key to obtain a sensitive information encrypted ciphertext; to encrypt the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encrypted key data; to sign the data to be signed using at least one first signature key in the first key pair set to obtain signature data; and a first sending unit, configured to send the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key.

[0010] According to one aspect of the present invention, a sensitive information transmission method is provided, comprising receiving a first key pair set and a corresponding first key index, wherein the first key pair set comprises a first encryption key and a first signing key; receiving signature data signed by the first signing key and index information corresponding to the first signing key, encryption key data encrypted by the first encryption key and index information corresponding to the first encryption key, and sensitive information encrypted ciphertext; searching for a signature verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signing key and the first key index, and then verifying the signature data; searching for a decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypting the encryption key data to obtain a sensitive information encryption key; decrypting the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain sensitive information.

[0011] Optionally, the sensitive information encryption key is a random symmetric key; the first encryption key is a public key, and the encryption key data is session key ciphertext data in a digital envelope format; and the first signature key is a private key.

[0012] According to one aspect of the present invention, a terminal is provided, comprising a second receiving unit, configured to receive a first key pair set and a corresponding first key index, wherein the first key pair set comprises a first encryption key and a first signature key; receiving signature data signed by the first signature key and index information corresponding to the first signature key, encryption key data encrypted by the first encryption key and index information corresponding to the first encryption key, and sensitive information encrypted ciphertext; a second decryption unit, configured to search for a verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data; search for a decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypt the encryption key data to obtain a sensitive information encryption key; and decrypt the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain sensitive information.

[0013] According to one aspect of the present invention, a sensitive information transmission method is provided, including a first communication device generating a first key pair set and a corresponding first key index; the first communication device sending the first key pair set and the corresponding first key index to a second communication device; the first communication device encrypts sensitive information using a sensitive information encryption key to obtain a sensitive information encrypted ciphertext; encrypts the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encrypted key data; the first communication device generates data to be signed, and signs the data to be signed using at least one first signature key in the first key pair set to obtain signature data; the first communication device sends the sensitive information encrypted ciphertext to a second communication device. , the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key are sent to the second communication device; the second communication device searches for the signature verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verifies the signature data; searches for the decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encryption key data to obtain the sensitive information encryption key; decrypts the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain the sensitive information.

[0014] Optionally, the sensitive information transmission method also includes the second communication device using the reply information encryption key to encrypt the reply information to obtain the reply information encrypted ciphertext; the second communication device uses at least one first encryption key in the first key pair set to encrypt the reply information encryption key to obtain encrypted reply key data, and sends the index information corresponding to the first encryption key to the first communication device; the second communication device generates a second key pair set and a corresponding second key index, and sends the second key pair set and the corresponding second key index to the first communication device; the second communication device uses at least one second signature key in the second key pair set to sign the data to be signed to obtain second signature data; the second communication device The communication device sends the reply information encrypted ciphertext, the encrypted reply key data, the second signature data and the index information corresponding to the second signature key to the first communication device; the first communication device searches for the signature verification key corresponding to the second signature key in the second key pair set according to the index information corresponding to the second signature key and the second key index, and then verifies the second signature data; searches for the decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encrypted reply key data to obtain the reply information encryption key; decrypts the reply information encrypted ciphertext according to the reply information encryption key to obtain the reply information.

[0015] Optionally, the sensitive information transmission method also includes the first communication device inquiring whether it has received the communication security key of the second communication device, wherein the first communication device requests the second communication device to synchronize the communication security key if the communication security key has not been received; the first communication device uses the communication security key to encrypt the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key and the index information corresponding to the first signature key, and uses the communication security key to calculate a message verification code to obtain a message, and sends the message to the second communication device; the second communication device uses the communication security key to verify the message verification code of the message, and uses the communication security key to decrypt to obtain the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key and the index information corresponding to the first signature key.

[0016] According to one aspect of the present invention, a terminal is provided, comprising a first communication device; a second communication device, which is communicatively connected to the first communication device, wherein the first communication device comprises: a first generating unit, which is used to generate a first key pair set and a corresponding first key index; a data to be signed generating unit, which is used to generate data to be signed; a first encryption unit, which uses a sensitive information encryption key to encrypt sensitive information to obtain a sensitive information encrypted ciphertext; uses at least one first encryption key in the first key pair set to encrypt the sensitive information encryption key to obtain encrypted key data; uses at least one first signature key in the first key pair set to sign the data to obtain signature data; a first sending unit, which is used to send the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key; the second communication device comprises a second receiving unit, which is used to receive A first key pair set and a corresponding first key index, wherein the first key pair set includes a first encryption key and a first signature key; receiving signature data signed by the first signature key and index information corresponding to the first signature key, encryption key data encrypted by the first encryption key and index information corresponding to the first encryption key, and sensitive information encrypted ciphertext; a second decryption unit, configured to search for a verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data; search for a decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypt the encryption key data to obtain a sensitive information encryption key; decrypt the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain sensitive information.

[0017] According to the sensitive information transmission method and terminal of the embodiment of the present invention, the key for encryption is generated in real time through a key pair set and a corresponding key index, which reduces the risk of the key being cracked and greatly improves the security of information transmission.

[0018] Furthermore, the present invention verifies the real identity of the user based on the non-repudiation property of the digital signature, and verifies the data integrity (i.e., the data has not been tampered with) by calculating the input message data of any length through the message verification code; through the digital signature, the hash function can be combined to ensure the authenticity of the message data; the confidentiality is ensured by encrypting the message data; the security of the message is ensured by combining the multi-key mechanism, and the security of important sensitive information is ensured by randomly protecting the key.

[0019] Furthermore, the communicating parties each generate and agree on the correspondence between the index and the key pair in advance. During the communication process, the corresponding public and private keys are first searched according to the index in the communication message, and the encryption and decryption and signature verification mechanism is used to complete the transmission of the communication protection key. The communication protection key is then used to protect the communication content, and the corresponding public and private keys are searched according to the index in the communication message, and the encryption and decryption and signature verification mechanism is used for communication; the multiple secret keys and algorithm types involved in the communication can be configured; the technical solution of the present application uses the transmission of sensitive information encrypted by the encrypted random key, and the security will be greatly improved. The solution does not rely on the certificate system, has stronger flexibility, is more convenient to use, and uses a multi-key management system to more securely protect the secure transmission of sensitive information. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] The above and other objects, features and advantages of the present invention will become more apparent through the following description of the embodiments of the present invention with reference to the accompanying drawings, in which:

[0021] Figure 1 A method flow chart of a sensitive information transmission method according to an embodiment of the present invention is shown;

[0022] Figure 2 It shows a schematic structural diagram of a first communication device according to an embodiment of the present invention;

[0023] Figure 3 A method flow chart of a sensitive information transmission method according to an embodiment of the present invention is shown;

[0024] Figure 4 A schematic diagram showing the structure of a second communication device according to an embodiment of the present invention is shown;

[0025] Figure 5 A method flow chart of a sensitive information transmission method according to an embodiment of the present invention is shown;

[0026] Figure 6 A schematic diagram of the structure of a terminal according to an embodiment of the present invention is shown;

[0027] Figure 7 An interactive schematic diagram of a sensitive information transmission method according to an embodiment of the present invention is shown;

[0028] Figure 8 and Fig. 9 A schematic diagram of an interaction message according to an embodiment of the present invention is shown. DETAILED DESCRIPTION

[0029] Various embodiments of the present invention will be described in more detail below with reference to the accompanying drawings. In each of the accompanying drawings, identical elements are represented by identical or similar reference numerals. For the sake of clarity, the various parts in the accompanying drawings are not drawn to scale. In addition, some well-known parts may not be shown in the drawings.

[0030] The specific implementation of the present invention is further described in detail below in conjunction with the accompanying drawings and examples. Many specific details of the present invention are described below, such as the structure, materials, dimensions, processing technology and techniques of the components, so that the present invention can be more clearly understood. However, as those skilled in the art can understand, the present invention can be implemented without following these specific details.

[0031] It should be understood that when describing the structure of a component, when a layer or a region is referred to as being "on" or "over" another layer or another region, it may mean that it is directly on the other layer or another region, or that other layers or regions are included between it and the other layer or another region. Moreover, if the component is turned over, the layer or a region will be "below" or "beneath" another layer or another region.

[0032] Figure 1 The method flow chart of the sensitive information transmission method according to an embodiment of the present invention is shown. In the sensitive information transmission, a sending end and a receiving end are involved. Figure 1 As shown, for the sender, the sensitive information transmission method includes the following steps:

[0033] In step S101, a first key pair set and a corresponding first key index are generated;

[0034] The first communication device (transmitter) generates a first key pair set and a corresponding first key index. The first key pair set includes, for example, a plurality of asymmetric key pairs, each asymmetric key pair corresponds to an index information (identifier), and different index information constitutes the first key index. Optionally, the algorithms in the communication process described in the present invention may all use symmetric key algorithms, or all use asymmetric key algorithms, or a combination of symmetric key algorithms and asymmetric key algorithms. Optionally, both communicating parties may use multi-key management, or one of the communicating parties may use single key management and the other party may use multi-key management.

[0035] In step S102, the sensitive information is encrypted using the sensitive information encryption key to obtain a sensitive information encrypted ciphertext;

[0036] The first communication device encrypts the sensitive information using the sensitive information encryption key to obtain the sensitive information encrypted ciphertext. The sensitive information encryption key is, for example, a 16-byte random symmetric key. The sensitive information is, for example, the name, bank card number, purpose, transaction voucher, and other data that needs to be kept confidential in the case of a transfer.

[0037] In step S103, the sensitive information encryption key is encrypted using at least one first encryption key in the first key pair set to obtain encryption key data;

[0038] The first communication device encrypts the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encryption key data.

[0039] In step S104, data to be signed is generated, and the data to be signed is signed using at least one first signature key in the first key pair set to obtain signature data;

[0040] The first communication device randomly generates data to be signed, and uses at least one first signature key in the first key pair set to sign the data to be signed, to obtain signature data.

[0041] In step S105, the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key are sent.

[0042] The first communication device sends the sensitive information encrypted ciphertext, encryption key data, signature data, index information corresponding to the first encryption key, and index information corresponding to the first signature key to the second communication device.

[0043] Optionally, the first encryption key is a public key, and the encryption key data is digital envelope format session ciphertext data. The first signature key is a secret key.

[0044] In the above-mentioned embodiments of the present invention, the design of real-time generation of keys / key pairs / certificates has effectively solved the problem of difficulty in using multiple keys to effectively protect transmitted information; the use of a dynamic key / certificate system has greatly reduced the risk of static keys / certificates being cracked.

[0045] Figure 2 FIG. 1 is a schematic diagram showing the structure of a first communication device according to an embodiment of the present invention. In the transmission of sensitive information, a sending end and a receiving end are involved. Figure 2 As shown, the first communication device 100 is, for example, a transmitting end, and includes a first generating unit 110 , a to-be-signed data generating unit 120 , a first encryption unit 130 and a first sending unit 140 .

[0046] Specifically, the first generating unit 110 is used to generate a first key pair set and a corresponding first key index.

[0047] The data to be signed generating unit 120 is used to generate data to be signed.

[0048] The first encryption unit 130 uses the sensitive information encryption key to encrypt the sensitive information to obtain the sensitive information encrypted ciphertext. The first encryption unit 130 uses at least one first encryption key in the first key pair set to encrypt the sensitive information encryption key to obtain the encrypted key data. The first encryption unit 130 uses at least one first signature key in the first key pair set to sign the data to be signed to obtain the signature data.

[0049] The first sending unit 140 is used to send the sensitive information encrypted ciphertext, encryption key data, signature data, index information corresponding to the first encryption key and index information corresponding to the first signature key to the outside world (second communication device).

[0050] Figure 3 The method flow chart of the sensitive information transmission method according to an embodiment of the present invention is shown. In the sensitive information transmission, a sending end and a receiving end are involved. Figure 3 As shown, for the receiving end, the sensitive information transmission method includes the following steps:

[0051] In step S201, a first key pair set and a corresponding first key index are received, wherein the first key pair set includes a first encryption key and a first signature key;

[0052] The second communication device (receiving end) receives the first key pair set and the corresponding first key index, wherein the first key pair set includes a first encryption key and a first signature key.

[0053] In step S202, signature data signed by the first signature key and index information corresponding to the first signature key, encryption key data encrypted by the first encryption key and index information corresponding to the first encryption key, and encrypted ciphertext of sensitive information are received;

[0054] The second communication device receives signature data signed by the first signature key and index information corresponding to the first signature key, encryption key data encrypted by the first encryption key and index information corresponding to the first encryption key, and encrypted ciphertext of sensitive information.

[0055] In step S203, according to the index information corresponding to the first signing key and the first key index, the signature verification key (the signature verification key is, for example, a public key) corresponding to the first signing key (the first signing key is, for example, a private key) is searched in the first key pair set, and then the signature data is verified;

[0056] The second communication device searches the first key pair set for the verification key (public key) corresponding to the first signature key (private key) according to the index information corresponding to the first signature key and the first key index, and then verifies the signature data.

[0057] In step S204, according to the index information corresponding to the first encryption key and the first key index, the decryption key (the decryption key is, for example, a private key) corresponding to the first encryption key (the first encryption key is, for example, a public key) is searched in the first key pair set, and then the encryption key data is decrypted to obtain the sensitive information encryption key;

[0058] The second communication device searches for the decryption key (private key) corresponding to the first encryption key (public key) in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encryption key data to obtain the sensitive information encryption key.

[0059] In step S205, the encrypted ciphertext of the sensitive information is decrypted according to the sensitive information encryption key to obtain the sensitive information.

[0060] The second communication device decrypts the encrypted ciphertext of the sensitive information according to the sensitive information encryption key to obtain the sensitive information.

[0061] Optionally, the sensitive information encryption key is a random symmetric key. The first encryption key is a public key, and the encryption key data is a digital envelope format session key ciphertext data. The first signature key is a private key.

[0062] Figure 4 FIG. 2 shows a schematic diagram of the structure of a second communication device according to an embodiment of the present invention. In the transmission of sensitive information, a sending end and a receiving end are involved. Figure 4 As shown, the second communication device 200 is, for example, a receiving end, and includes a second receiving unit 210 and a second decryption unit 220 .

[0063] Specifically, the second receiving unit 210 is used to receive a first key pair set and a corresponding first key index, wherein the first key pair set includes a first encryption key and a first signature key. The second receiving unit 210 receives signature data signed using the first signature key and index information corresponding to the first signature key, encryption key data encrypted using the first encryption key and index information corresponding to the first encryption key, and encrypted ciphertext of sensitive information.

[0064] The second decryption unit 220 is used to search for the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data. The second decryption unit 220 searches for the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encrypted key data to obtain the sensitive information encryption key. The second decryption unit 220 decrypts the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain the sensitive information. Optionally, the second decryption unit 220 includes a second signature verification subunit, which is used to search for the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data.

[0065] Figure 5 A method flow chart of a sensitive information transmission method according to an embodiment of the present invention is shown.

[0066] like Figure 5 As shown, the sensitive information transmission method according to an embodiment of the present invention includes the following steps:

[0067] In step S301, the first communication device generates a first key pair set and a corresponding first key index;

[0068] The first communication device (first security device) generates a first key pair set and a corresponding first key index. The first key pair set is, for example, a plurality of asymmetric key pairs, and the first key pair set is managed by the first key index.

[0069] In step S302, the first communication device sends the first key pair set and the corresponding first key index to the second communication device;

[0070] The first communication device sends the first key pair set and the corresponding first key index to the second communication device (second security device). The first communication device, for example, sends the public key in the asymmetric key pair and the index information in the first key index as a set to the second communication device in a one-to-one correspondence. The first key pair set received by the second communication device manages the public key through the first key index.

[0071] In step S303, the first communication device encrypts the sensitive information using the sensitive information encryption key to obtain a sensitive information encrypted ciphertext; and encrypts the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encryption key data;

[0072] The first communication device obtains a random symmetric key (sensitive information encryption key), uses the random symmetric key to encrypt the sensitive information to obtain the sensitive information encrypted ciphertext; uses the public key corresponding to a certain index information to encrypt the random symmetric key to obtain the digital envelope format session key ciphertext data (encryption key data).

[0073] In step S304, the first communication device generates data to be signed, and signs the data to be signed using at least one first signature key in the first key pair set to obtain signature data;

[0074] The first communication device randomly generates data to be signed, and signs the data to be signed using a private key in an asymmetric key pair to obtain signed data.

[0075] In step S305, the first communication device sends the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key to the second communication device;

[0076] The index information corresponding to the private key used for signing and the index information corresponding to the public key used for encrypting the random symmetric key are specified in the message header, together with the sensitive information encrypted ciphertext, encryption key data, signature data, encrypted using a communication security key, and encrypted using a communication security key. The complete message obtained by calculating MAC (Message Authentication Code) using a communication security key is sent to the second communication device.

[0077] In step S306, the second communication device searches for the verification key (public key) corresponding to the first signature key (private key) in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verifies the signature data; searches for the decryption key (private key) corresponding to the first encryption key (public key) in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encryption key data to obtain the sensitive information encryption key; decrypts the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain the sensitive information.

[0078] The second communication device receives information sent by the first communication device. The second communication device first uses the specified communication security key to verify the message authentication code of the message, and then uses a certain communication security key to decrypt to obtain the sensitive information encrypted ciphertext, encryption key data, and signature data. The second communication device uses the public key corresponding to the index information corresponding to the private key used when signing to verify the signature to ensure that the received information has not been tampered with. The second communication device uses the private key corresponding to the index information corresponding to the public key used when encrypting the random symmetric key to decrypt the encryption key data to obtain a random symmetric key. The second communication device uses the random symmetric key to decrypt the sensitive information ciphertext to obtain the sensitive information sent by the first communication device.

[0079] In an optional embodiment of the present invention, after executing steps S301 to S306, the sensitive information transmission method further includes the following steps:

[0080] Step 1: The second communication device uses the reply information encryption key to encrypt the reply information to obtain the reply information encrypted ciphertext. The second communication device obtains a random symmetric key (reply information encryption key), and uses the random symmetric key to encrypt the reply information (sensitive data / information, etc.) to obtain the reply information encrypted ciphertext.

[0081] Step 2: The second communication device encrypts the reply information encryption key using at least one first encryption key in the first key pair set to obtain encrypted reply key data, and sends the index information corresponding to the first encryption key to the first communication device. The second communication device, for example, encrypts the reply information encryption key using a public key in the first key pair set corresponding to a certain index information to obtain encrypted reply key data (for example, digital envelope format session key ciphertext data).

[0082] Step 3: The second communication device generates a second key pair set and a corresponding second key index, and sends the second key pair set and the corresponding second key index to the first communication device. The second key pair set includes, for example, multiple asymmetric key pairs, each asymmetric key pair corresponds to an index information (identifier), and different index information constitutes the second key index. The second communication device manages the second key pair set through the second key index, and sends the second key pair set to the first communication device as a set of one-to-one correspondence through the second key index and the public key. The second key pair set received by the first communication device manages the public key through the second key index.

[0083] Step 4: The second communication device signs the data to be signed using at least one second signature key in the second key pair set to obtain second signature data. The second communication device signs the data to be signed using, for example, a private key (eg, generated in step S304).

[0084] Step 5: The second communication device sends the reply message encrypted ciphertext, the encrypted reply key data, the second signature data, and the index information corresponding to the second signature key to the first communication device. For example, the index information corresponding to the private key used for signing and the index information corresponding to the public key used for encryption are specified in the message header, together with the reply message encrypted ciphertext, the encrypted reply key data, and the second signature data, encrypted using a certain communication security key, and the message verification code is calculated using a certain communication security key to obtain a complete message and sent to the first communication device.

[0085] Step 6: The first communication device searches for the verification key (public key) corresponding to the second signature key (private key) in the second key pair set according to the index information corresponding to the second signature key and the second key index, and then verifies the second signature data; searches for the decryption key (private key) corresponding to the first encryption key (public key) in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encrypted reply key data to obtain the reply information encryption key; decrypts the reply information encrypted ciphertext according to the reply information encryption key to obtain the reply information. Specifically, the first communication device receives the information sent by the second communication device. The first communication device first uses the specified communication security key to verify the integrity of the message, and then uses a certain communication security key to decrypt and obtain the information sent by the second communication device (reply information encrypted ciphertext, encrypted reply key data and second signature data, etc.). The first communication device verifies the second signature data according to the public key corresponding to the index information corresponding to the second signature key to ensure that the information sent by the second communication device has not been tampered with. The first communication device uses the private key corresponding to the index information corresponding to the first encryption key to decrypt the encrypted reply key data in the digital envelope format to obtain the reply information encryption key (random symmetric key). The first communication device uses the random symmetric key to decrypt the encrypted ciphertext of the reply information to obtain the reply information.

[0086] Steps S301 to S306 complete the first communication device sending a message to the second communication device. Steps 1 to 6 complete the second communication device sending a message to the first communication device. So far, one (sensitive) information interaction is completed. If there are multiple sensitive information transmissions, the communication process can be repeated.

[0087] In an optional embodiment of the present invention, the sensitive information transmission method further includes communication initialization.

[0088] The first communication device inquires whether it has received the communication security key of the second communication device. Among them, when the first communication device has not received the communication security key, it requests the second communication device to synchronize the communication security key. Specifically, in the process of synchronizing the communication security key, the second communication device specifies the index information of the private key signed by the second communication device and the index information of the public key encrypted by the first communication device in the message header, uses a private key of the second communication device to sign, and the public key of the first communication device to encrypt the communication security key, and then sends it to the first communication device. In the case of a communication security key, the communication security key can be updated, or the communication phase can be directly entered using the received communication security key.

[0089] The second communication device receives the communication initialization request sent by the first communication device. The second communication device determines whether to synchronize the communication security key according to whether the first communication device needs to download / update the communication security key. If key update is required, the above steps can be performed to prevent key leakage.

[0090] In an optional embodiment of the present invention, the first communication device uses the communication security key to encrypt the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key, and uses the communication security key to calculate the message verification code to obtain the message, and sends the message to the second communication device. The second communication device uses the communication security key to verify the message verification code of the message, and uses the communication security key to decrypt to obtain the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key.

[0091] Figure 6 FIG. 2 shows a schematic diagram of the structure of a terminal according to an embodiment of the present invention. Figure 6 As shown, the terminal according to the embodiment of the present invention includes a first communication device 100 and a second communication device 200 communicatively connected to the first communication device 100. The first communication device 100 may be a client, and the second communication device 200 may be a server.

[0092] Specifically, the first communication device 100 includes:

[0093] The first generating unit 110 is configured to generate a first key pair set and a corresponding first key index.

[0094] The data to be signed generating unit 120 is used to generate the data to be signed.

[0095] The first encryption unit 130 uses the sensitive information encryption key to encrypt the sensitive information to obtain the sensitive information encrypted ciphertext. The first encryption unit 130 uses at least one first encryption key in the first key pair set to encrypt the sensitive information encryption key to obtain the encrypted key data. The first encryption unit 130 uses at least one first signature key in the first key pair set to sign the data to be signed to obtain the signature data.

[0096] The first sending unit 140 is used to send the encrypted ciphertext of sensitive information, encryption key data, signature data, index information corresponding to the first encryption key, and index information corresponding to the first signature key.

[0097] The second communication device 200 comprises:

[0098] The second receiving unit 210 is used to receive a first key pair set and a corresponding first key index. The first key pair set includes a first encryption key and a first signature key. The second receiving unit 210 receives signature data signed by the first signature key and index information corresponding to the first signature key, encryption key data encrypted by the first encryption key and index information corresponding to the first encryption key, and sensitive information encrypted ciphertext.

[0099] The second decryption unit 220 is used to search for the verification key (public key) corresponding to the first signature key (private key) in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data. The second decryption unit 220 searches for the decryption key corresponding to the first encryption key (public key) in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encrypted key data to obtain the sensitive information encryption key. The second decryption unit 220 decrypts the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain the sensitive information. Optionally, the second decryption unit 220 includes a second verification subunit, which is used to search for the verification key (public key) corresponding to the first signature key (private key) in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data.

[0100] Figure 7 FIG. 2 shows an interactive schematic diagram of a sensitive information transmission method according to an embodiment of the present invention. Figure 7 As shown in the figure, the process of sensitive information transmission is as follows:

[0101] In step S401 , the first communication device 100 generates an asymmetric key pair set.

[0102] In step S402 , the second communication device 200 generates an asymmetric key pair set.

[0103] In step S403 , the first communication device 100 sends the public key of the asymmetric key pair set generated by it to the second communication device 200 ; the second communication device 200 stores and manages the received public key of the asymmetric key pair set.

[0104] In step S404 , the second communication device 200 sends the public key of the asymmetric key pair set generated by it to the first communication device 100 ; the first communication device 100 stores and manages the received public key of the asymmetric key pair set.

[0105] In step S405, the first communication device 100 searches whether the communication security key of the second communication device 200 currently exists. If not, it needs to request the communication security key; if it exists, it determines whether it needs to be updated.

[0106] In step S406 , the first communication device 100 requests the second communication device 200 to initialize communication.

[0107] In step S407 , the second communication device 200 determines whether a communication security key needs to be issued according to the request of the first communication device 100 .

[0108] In step S408 , the second communication device 200 returns a corresponding request for communication initialization to the first communication device 100 .

[0109] In step S409, the first communication device 100 transmits information: the first communication device 100 first obtains a 16-byte random symmetric key, uses the random symmetric key to encrypt sensitive data to obtain sensitive information ciphertext, uses the public key corresponding to a certain index of the second communication device 200 to encrypt the random symmetric key to obtain digital envelope format session key ciphertext data, randomly generates data to be signed, and signs it with a certain private key of the first communication device 100. In the message header, specify the private key index signed by the first communication device 100 and the index of the public key encrypted by the second communication device 200, together with the sensitive information ciphertext, digital envelope format session key ciphertext data, and the data to be signed, encrypt it using a certain communication security key, and use a certain communication security key to calculate MAC to obtain a complete message and send it to the second communication device 200.

[0110] In step S410 , the first communication device 100 transmits information to the second communication device 200 .

[0111] In step S411, after the second communication device 200 receives the information transmitted by the first communication device 100, the second communication device 200 first uses the specified communication security key to verify the integrity of the message, and then uses a certain communication security key to decrypt to obtain the sensitive information ciphertext, the digital envelope format session key ciphertext data, and the message of the data to be signed, and uses the public key corresponding to the private key index of the signature to verify the signature to ensure the authenticity of the first communication device 100, and uses the private key corresponding to the index of the public key encrypted by the second communication device 200 to decrypt the digital envelope format session key ciphertext data to obtain a random symmetric key, and uses the random symmetric key to decrypt the sensitive information to obtain the sensitive information of the first communication device 100.

[0112] In step S412, the second communication device 200 first obtains a 16-byte random symmetric key, uses the random symmetric key to encrypt sensitive data to obtain sensitive information ciphertext, uses the public key corresponding to a certain index of the first communication device 100 to encrypt the random symmetric key to obtain digital envelope format session key ciphertext data, randomly generates data to be signed, and signs it with a certain private key of the second communication device 200. In the message header, the private key index signed by the second communication device 200 and the index of the public key encrypted by the first communication device 100 are specified, together with the sensitive information ciphertext, the digital envelope format session key ciphertext data, and the data to be signed, encrypted using a certain communication security key, and the complete message obtained by calculating MAC using a certain communication security key is sent to the first communication device 100.

[0113] In step S413 , the second communication device 200 transmits a reply message to the first communication device 100 .

[0114] In step S414, after the first communication device 100 receives the reply information from the second communication device 200, it first uses the designated communication security key to verify the integrity of the message, and then uses a certain communication security key to decrypt to obtain the sensitive information ciphertext, the digital envelope format session key ciphertext data, and the message of the data to be signed. The public key corresponding to the private key index of the signature is used to verify the authenticity of the second communication device 200, and the private key corresponding to the index of the public key encrypted by the first communication device 100 is used to decrypt the digital envelope format session key ciphertext data to obtain a random symmetric key, and the random symmetric key is used to decrypt the reply information to obtain the reply information of the second communication device 200.

[0115] The above process demonstrates the two-way interactive transmission process of information, but this solution is not limited to such two-way information interaction. If only one-way transmission of sensitive information is required, the recipient of the sensitive information only needs to verify the authenticity of the sender of the sensitive information, and there is no need to reply to the sender.

[0116] Figure 8 and Fig. 9FIG. 1 is a schematic diagram of an interactive message according to an embodiment of the present invention. Taking the communication requesting party as an example, Figure 8 and Fig. 9 A sensitive information interaction message is shown.

[0117] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0118] According to the embodiments of the present invention as described above, these embodiments do not describe all the details in detail, nor do they limit the invention to the specific embodiments described. Obviously, many modifications and changes can be made based on the above description. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can make good use of the present invention and the modified use based on the present invention. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. A sensitive information transmission method, characterized in that: include: Generate a first key pair set and a corresponding first key index; Sending the first key pair set; Encrypt the sensitive information using the sensitive information encryption key to obtain the sensitive information encrypted ciphertext; Encrypt the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encryption key data; Generate data to be signed, and use at least one first signing key in the first key pair set to sign the data to obtain signed data; Send the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key.

2. The sensitive information transmission method according to claim 1, characterized in that: The sensitive information encryption key is a random symmetric key; The first encryption key is a public key, and the encryption key data is a digital envelope format session key ciphertext data; The first signing key is a private key.

3. A sensitive information terminal, characterized in that: include: A first generating unit, configured to generate a first key pair set and a corresponding first key index; A data generation unit to be signed, used to generate data to be signed; A first encryption unit encrypts the sensitive information using a sensitive information encryption key to obtain an encrypted ciphertext of the sensitive information; Encrypt the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encryption key data; Sign the data to be signed using at least one first signature key in the first key pair set to obtain signature data; A first sending unit is configured to send the encrypted ciphertext of the sensitive information, the encryption key data, the signature data, index information corresponding to the first encryption key, and index information corresponding to the first signature key. The terminal sends the first key pair set.

4. A sensitive information transmission method, characterized in that: include: Receiving a first key pair set and a corresponding first key index, wherein the first key pair set includes a first encryption key and a first signing key; Receiving signature data signed by using the first signature key and index information corresponding to the first signature key, encryption key data encrypted by using the first encryption key and index information corresponding to the first encryption key, and encrypted ciphertext of sensitive information; According to the index information corresponding to the first signing key and the first key index, searching for the signature verification key corresponding to the first signing key in the first key pair set, and then verifying the signature data; According to the index information corresponding to the first encryption key and the first key index, searching the first key pair set for a decryption key corresponding to the first encryption key, and then decrypting the encryption key data to obtain a sensitive information encryption key; The sensitive information encrypted ciphertext is decrypted according to the sensitive information encryption key to obtain the sensitive information.

5. The sensitive information transmission method according to claim 4, characterized in that: The sensitive information encryption key is a random symmetric key; The first encryption key is a public key, and the encryption key data is a digital envelope format session key ciphertext data; The first signing key is a private key.

6. A sensitive information terminal, characterized in that: include: A second receiving unit is configured to receive a first key pair set and a corresponding first key index, wherein the first key pair set includes a first encryption key and a first signature key; receive signature data signed by using the first signature key and index information corresponding to the first signature key, encryption key data encrypted by using the first encryption key and index information corresponding to the first encryption key, and encrypted ciphertext of sensitive information; A second decryption unit is configured to search for a verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data; search for a decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypt the encryption key data to obtain a sensitive information encryption key; and decrypt the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain sensitive information.

7. A sensitive information transmission method, characterized in that: include: The first communication device generates a first key pair set and a corresponding first key index; The first communication device sends the first key pair set and the corresponding first key index to the second communication device; The first communication device encrypts the sensitive information using the sensitive information encryption key to obtain an encrypted ciphertext of the sensitive information; Encrypt the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encryption key data; The first communication device generates data to be signed, and signs the data to be signed using at least one first signature key in the first key pair set to obtain signed data; The first communication device sends the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key to the second communication device; The second communication device searches for the signature verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verifies the signature data; searches for the decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encryption key data to obtain the sensitive information encryption key; decrypts the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain the sensitive information.

8. The sensitive information transmission method according to claim 7, characterized in that: The sensitive information transmission method further comprises: The second communication device encrypts the reply information using the reply information encryption key to obtain a reply information encrypted ciphertext; The second communication device encrypts the reply information encryption key using at least one first encryption key in the first key pair set to obtain encrypted reply key data, and sends index information corresponding to the first encryption key to the first communication device; The second communication device generates a second key pair set and a corresponding second key index, and sends the second key pair set and the corresponding second key index to the first communication device; The second communication device signs the data to be signed using at least one second signature key in the second key pair set to obtain second signature data; The second communication device sends the reply information encrypted ciphertext, the encrypted reply key data, the second signature data, and the index information corresponding to the second signature key to the first communication device; The first communication device searches for the signature verification key corresponding to the second signature key in the second key pair set according to the index information corresponding to the second signature key and the second key index, and then verifies the second signature data; searches for the decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypts the encrypted reply key data to obtain the reply information encryption key; decrypts the reply information encrypted ciphertext according to the reply information encryption key to obtain the reply information.

9. The sensitive information transmission method according to claim 7, characterized in that: The sensitive information transmission method further comprises: The first communication device queries whether it has received the communication security key of the second communication device, wherein the first communication device requests synchronization of the communication security key from the second communication device if the first communication device has not received the communication security key; The first communication device uses the communication security key to encrypt the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key and the index information corresponding to the first signature key, and uses the communication security key to calculate a message authentication code to obtain a message, and sends the message to the second communication device; The second communication device uses the communication security key to verify the message authentication code of the message, and uses the communication security key to decrypt to obtain the sensitive information encrypted ciphertext, the encryption key data, the signature data, the index information corresponding to the first encryption key, and the index information corresponding to the first signature key.

10. A sensitive information terminal, characterized in that: include: a first communication device; a second communication device, connected to the first communication device for communication, Wherein, the first communication device comprises: A first generating unit, configured to generate a first key pair set and a corresponding first key index; A data generation unit to be signed, used to generate data to be signed; a first encryption unit, encrypting the sensitive information using the sensitive information encryption key to obtain a sensitive information encrypted ciphertext; encrypting the sensitive information encryption key using at least one first encryption key in the first key pair set to obtain encryption key data; and signing the data to be signed using at least one first signature key in the first key pair set to obtain signature data; A first sending unit, configured to send the encrypted ciphertext of the sensitive information, the encryption key data, the signature data, index information corresponding to the first encryption key, and index information corresponding to the first signature key; The second communication device comprises: A second receiving unit is configured to receive a first key pair set and a corresponding first key index, wherein the first key pair set includes a first encryption key and a first signature key; receive signature data signed by using the first signature key and index information corresponding to the first signature key, encryption key data encrypted by using the first encryption key and index information corresponding to the first encryption key, and encrypted ciphertext of sensitive information; A second decryption unit is configured to search for a verification key corresponding to the first signature key in the first key pair set according to the index information corresponding to the first signature key and the first key index, and then verify the signature data; search for a decryption key corresponding to the first encryption key in the first key pair set according to the index information corresponding to the first encryption key and the first key index, and then decrypt the encryption key data to obtain a sensitive information encryption key; and decrypt the sensitive information encrypted ciphertext according to the sensitive information encryption key to obtain sensitive information.

Images