A symmetric key distribution visual dynamic design method

Abstract

This invention discloses a visual dynamic design method for symmetric key distribution, implemented based on a database storing key component information and a drag-and-drop interface. The visual dynamic design method specifically includes the following steps: S1. Establishing a database storing key component information, including encryption keys and business keys; S2. Creating a visual symmetric key distribution operation interface on the operation interface; S3. Performing drag-and-drop operations on the symmetric key distribution operation interface generated in step S2 according to the business scenario to establish a node architecture and assign protection encryption keys; S4. Generating and displaying a key relationship topology structure specific to the business scenario. This invention adopts a modular and visual design, enabling dynamic generation of key protection strategies for different businesses, achieving the goal of one-time development and applicability across multiple business scenarios, further reducing the workload of developers and improving the efficiency of key protection distribution.

Description

Technical Field

[0001] This invention relates to the field of information security technology, and in particular to a dynamic design method for symmetric key distribution. Background Technology

[0002] In communication, to achieve specific cryptographic functions, the sender typically uses an encryption key to encrypt the data, and the receiver uses a decryption key to decrypt the data. Keys can be divided into two main categories: symmetric keys and asymmetric keys.

[0003] Currently, in the distribution of symmetric keys, the distribution process typically involves using either a fixed key for encryption or a business key for protection, based on business requirements. A corresponding distribution program is then written, usually requiring the design of a development process followed by programming. However, different business systems have different requirements, making a universal key protection and distribution process impossible, resulting in a large development workload. Furthermore, if adjustments to the key protection and distribution scheme are needed during development, a complete redesign is required, wasting initial development work and leading to inefficiency. Summary of the Invention

[0004] The technical problem to be solved by the present invention is to provide a visual dynamic design method for symmetric key distribution. It adopts modular and visual design, which can dynamically generate key protection strategies for different business, so as to achieve the purpose of one-time development and universal applicability to multiple business scenarios, further reducing the workload of developers and improving the efficiency of key protection distribution.

[0005] To solve the above-mentioned technical problems, the technical solution adopted by the present invention is as follows.

[0006] A visual dynamic design method for symmetric key distribution is implemented based on a database storing key component information and a drag-and-drop interface. The visual dynamic design method specifically includes the following steps:

[0007] S1. Establish a database for storing key component information; the key component information includes key encryption keys and business keys;

[0008] S2. Create a visual symmetric key distribution operation interface on the operating terminal;

[0009] S3. Based on the business scenario, drag and drop operations on the symmetric key distribution operation interface generated in step S2 to establish a node structure and assign a protection encryption key;

[0010] S4. Generate and display the key relationship topology structure for the business scenario.

[0011] The aforementioned visual dynamic design method for symmetric key distribution includes a symmetric key distribution operation interface in step S2, comprising an operation module and a form module arranged side-by-side. The operation module is divided into an option area and a display area. The option area has three options: node component, key component, and connection line. The key component is associated with the database described in step S1. The display area is used to display the key distribution establishment process and topology. The form module displays node component information or key component information during the operation process.

[0012] The aforementioned visual dynamic design method for symmetric key distribution includes key component information such as the node to which it belongs, receiving node, key number, key name, key status, effective time, expiration time, and distribution strategy information; node component information includes node ID, node name, and node type information; and the connecting lines represent offline key distribution relationships between nodes.

[0013] The above-mentioned visual dynamic design method for symmetric key distribution includes the following specific steps in step S3:

[0014] S31. Create a node structure: Based on the business scenario, click on the node component in the option area and drag it to the display area to establish a node structure. The first node is the root node, and the remaining nodes form several layers of nodes.

[0015] S32. Create a connection line: Click the connection line in the options area and drag it to the display area to connect two nodes with business relationships according to the business scenario;

[0016] S33. Create inter-node keys with business relationships: Click the key component in the options area and drag it to the display area. Add the key component to the parent node that issued the key and display it on the parent node.

[0017] S34. After adding the key component to the parent node, add a distribution strategy to the key component;

[0018] S35. On the key component with the distribution strategy added, select the target node to receive the key and export it directly.

[0019] In the above-mentioned visual dynamic design method for symmetric key distribution, when a new node is created in step S31, the ID, name, and type of the newly created node are entered in the form module, and the creation is completed after saving.

[0020] In the above-mentioned visual dynamic design method for symmetric key distribution, in step S33, when creating a key component at the root node, a key encryption key is first created, and then a business key is added; when each key is created, the node to which the key belongs and the receiving node information are entered in the form module, and the key addition is completed after saving.

[0021] The aforementioned visual dynamic design method for symmetric key distribution involves distributing encryption keys in the form of key components or agreed-upon key formats, and dynamically selecting and distributing protection encryption keys for business keys based on requirements.

[0022] The aforementioned visual dynamic design method for symmetric key distribution sets a batch export option for the target node receiving the key under the root node.

[0023] Due to the adoption of the above technical solutions, the technical progress achieved by this invention is as follows.

[0024] This invention adopts a modular design and realizes symmetric key generation and distribution based on visual dynamic drag and drop. Key attributes can be dynamically added according to business scenarios, and multi-node symmetric keys can be uniformly managed. Different nodes are distinguished by assigning ID attributes to nodes using symmetric keys, and nodes can be easily categorized by assigning node type attributes. The same key can be distributed to the same type of nodes using the same distribution strategy. This achieves the goal of quickly and dynamically generating protection strategies for different business keys and achieving the goal of one-time development for multiple business scenarios. It further reduces the workload of developers and improves the efficiency of key protection distribution.

[0025] This invention also employs a visual and graphical design, which can intuitively show developers the key protection and distribution process, improving work efficiency. This invention can also display the key relationship topology after all keys are created, which not only vividly illustrates the key distribution and protection relationship, but also facilitates future review and improvement. Attached Figure Description

[0026] Figure 1 This is a flowchart of the present invention;

[0027] Figure 2 The operation interface diagram for creating node components in this invention;

[0028] Figure 3 An operation interface diagram for creating the key component of this invention;

[0029] Figure 4 This is a schematic diagram of the distribution results in Embodiment 1 of the present invention. Detailed Implementation

[0030] The present invention will now be described in further detail with reference to the accompanying drawings and specific embodiments.

[0031] A visual dynamic design method for symmetric key distribution is implemented based on a database storing key component information and a drag-and-drop interface. The flow of the visual dynamic design method is as follows: Figure 1 As shown, the specific steps include:

[0032] S1. Establish a database for storing key component information; the key component information includes key encryption keys and business keys.

[0033] The key encryption key is used when the root node distributes protection encryption keys to the first-level business nodes. The business key is mainly used by each layer of business nodes to create keys for their own business transmission requirements. When the key is formed, it can be protected by the key encryption key or its own existing encryption key.

[0034] S2. Create a visual symmetric key distribution operation interface on the operating end.

[0035] The symmetric key distribution operation interface includes operation modules and form modules arranged side by side; such as Figures 1 to 2 As shown.

[0036] The operation module is divided into an option area and a display area. The option area has three options: node component, key component, and connection line. The key component is associated with the database mentioned in step S1, and the relevant key component is extracted from the database during operation. The display area is used to show the key distribution establishment process and the final key distribution topology.

[0037] The form module displays node component information or key component information during the operation process.

[0038] The key component information includes the node to which it belongs, the receiving node, the key number, the key name, the key status, the effective time, the expiration time, and the distribution strategy information; the node component information includes the node ID, the node name, and the node type information; the connection line represents the offline key distribution relationship between nodes.

[0039] S3. Based on the business scenario, drag and drop operations on the symmetric key distribution operation interface generated in step S2 to establish a node structure and assign a protection encryption key.

[0040] S31. Create Node Architecture: Based on the business scenario, click on the node component in the options area and drag it to the display area to establish the node architecture. The first node is the root node, and the remaining nodes form several layers of nodes. The relationship between nodes can adopt a hierarchical design. The root node manages the keys of the second-level nodes, and the second-level nodes can manage the keys of the third-level nodes.

[0041] When a new node is created, enter the ID, name, and type of the new node in the form module, and save to complete the creation.

[0042] In this embodiment, Figure 2In the interface shown, node A is the root node and does not need to be created. Click and drag the node component to the display area to create a new node B. When the cursor focuses on the node, the form area on the right displays the input node information, including node ID, node name, and node type. Click save to complete the addition of node information. As shown in the figure, nodes B and C have been created.

[0043] S32. Create a connection line: Click on the connection line in the options area and drag it to the display area to connect two nodes with business relationships according to the business scenario.

[0044] In this embodiment, as Figure 3 As shown, there is a connection between node A and node B, and a connection between node A and node C, indicating that node A can generate keys that are distributed to nodes B and C.

[0045] S33. Create inter-node keys with business relationships: Click the key component in the options area and drag it to the display area. Add the key component to the parent node that issued the key and display it on the parent node.

[0046] When creating a key component at the root node, first create the key encryption key, then add the business key. When creating each key, enter the node to which the key belongs and the receiving node information in the form module, save, and the key addition is complete. The added key will be displayed at the root node and also at the target node receiving the key, showing the node information and node number.

[0047] In this embodiment, as Figure 3 As shown, three keys K1, K2, and K3 are created at root node A. The same key number indicates that they are the same key. K1 is the encryption key issued by root node A; K2 is the business key sent by root node A to node B; and K3 is the business key between node B and node C, which can choose either K1 or K2 as the encryption key for protection.

[0048] S34. After adding the key component to the parent node, add a distribution strategy to the key component. The encryption key is distributed in either key component form or agreed-upon key form. The business key dynamically selects the encryption key for distribution protection according to requirements, and the same key number uses the same distribution strategy. If the distribution strategy of agreed-upon key protection is selected, the agreed-upon key needs to be entered; otherwise, the corresponding key can be directly selected for protection.

[0049] In this embodiment, Figure 3 In region 2, click on the distribution strategy to add it.

[0050] S35. On the key component with the distribution strategy added, select the target node for receiving the key and export it directly. In this embodiment, in Figure 3In area 2, click "Export Key" to export the key to the target node; in area 1 under the root node, there is also a batch export option for the target node receiving the key.

[0051] S4. Generate and display the key relationship topology structure for the business scenario.

[0052] In this embodiment, after all keys are created according to business relationships, the display area shows the final key relationship topology, such as... Figure 4 As shown.

[0053] This invention, through modular design, establishes a database to store key components and enables the rapid generation and distribution of symmetric keys by selecting, dragging, and connecting, meeting the needs of different business scenarios and greatly improving development efficiency.

Claims

1. A method for symmetric key distribution visual dynamic design, characterized in that, The visual dynamic design method is realized based on a database storing key component information and an operation terminal capable of drag operation, and specifically includes the following steps: S1. Establishing a database storing key component information; the key includes a key encryption key and a service key; S2. Creating a visual symmetric key distribution operation interface on the operation terminal; The symmetric key distribution operation interface includes an operation module and a form module arranged side by side; the operation module part is divided into an option area and a display area, and the option area is provided with three options of node component, key component and connection line, wherein the key component is associated with the database in step S1; the display area is used for displaying the key distribution establishment process and the topology structure; the form module displays the node component information or the key component information in the operation process; S3. According to the business scenario, performing drag operation on the symmetric key distribution operation interface generated in step S2, establishing a node framework, and assigning a protection encryption key, specifically including: S31. Creating a node framework: according to the business scenario, clicking the node component in the option area and dragging it to the display area to establish a node framework, the first node is the root node, and the remaining nodes form several layers of nodes; S32. Creating a connection line: clicking the connection line in the option area and dragging it to the display area, and connecting two nodes having a business relationship according to the business scenario; S33. Creating a key between nodes having a business relationship: clicking the key component in the option area and dragging it to the display area, adding a key component in the superior node of the key distribution, and displaying the superior node; S34. After adding the key component in the superior node, adding a distribution strategy on the key component; S35. Selecting the target node receiving the key on the key component with the added distribution strategy and directly exporting the key to the target node; S4. Generating a key relationship topology structure for the business scenario and displaying it.

2. The method of claim 1, wherein, The key component information includes the node, the receiving node, the key number, the key name, the key state, the effective time, the invalid time and the distribution strategy information; the node component information includes the node ID, the node name and the node type information; and the connection line represents the offline key distribution relationship between nodes.

3. The method of claim 2, wherein, In step S31, when a new node is created, the ID, name and type of the newly created node are input in the form module, and the creation is completed after saving.

4. The method of claim 3, wherein, In step S33, when creating a key component in the root node, a key encryption key is first created, and then a service key is added; when each key is created, the node and the receiving node information of the key are input in the form module, and the key addition is completed after saving.

5. The method of claim 4, wherein, The key encryption key is distributed in the form of key components or agreed keys, and the service key dynamically selects the protection encryption key according to the demand.

6. The method of claim 1, wherein, Batch export options for target nodes receiving keys are set under the root node.

Images