A method for detecting key splitting
Through key segmentation scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection, the problem of incomplete key segmentation detection in the existing technology is solved, and the key segmentation technology is realized Comprehensive and multi-dimensional evaluation to ensure the security and correctness of the key segmentation process.
Patent Information
- Application Number
- CN202411466788.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2024-10-21
- Publication Date
- 2024-12-17
- Estimated Expiration
- 2044-10-21
AI Technical Summary
The existing key segmentation detection technology cannot effectively detect the correctness and security of the key segmentation method, and lacks a systematic detection process, so it is impossible to accurately evaluate the correctness and security of the key segmentation object.
Through key segmentation scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection, key component storage detection, etc., we can determine whether there is an abnormality in key segmentation, and output errors, insecure or Warning information realizes a comprehensive and multi-dimensional evaluation of key segmentation technology.
It provides a complete detection process that can accurately evaluate all aspects of key segmentation technology, ensure the security and correctness of the key segmentation process, and solves the problem of lack of systematic detection process in the prior art.
Smart Images
Figure CN118972061B_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of password security detection, and in particular to a key splitting detection method. Background Art
[0002] Key technology is the cornerstone of modern communication security technology. Keys are the key to encryption protection and security authentication. Once the key is leaked, no matter how strong the cryptographic algorithm is, all cryptographic operations corresponding to this key are unsafe. In the specific application of cryptography, the complete key is divided into multiple key components and kept by multiple parties; when it is needed, when the required number of key components are involved in the calculation, the complete key can be restored to run the password.
[0003] At present, there is no complete detection technology for key splitting. The existing detection is to detect the storage location of the key components formed after key splitting, but not to detect the correctness and security of the key splitting method, nor to detect the security of the key component storage mechanism and use mechanism. The detection content and method are relatively arbitrary, and cannot accurately detect the correctness and security of the key splitting detection object.
[0004] Therefore, a key splitting detection method is needed to solve the above technical problems. Summary of the invention
[0005] In order to solve the above technical problems, the present invention provides a key splitting detection method, which performs key splitting scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection and key component storage detection on the key splitting technology used by the detection object, and judges whether there is an abnormality in the key splitting according to the situation of each detection step, and outputs corresponding error, insecurity or warning information when an abnormality occurs.
[0006] As a further solution, the key splitting scheme is tested by the following steps:
[0007] Obtain the key splitting technology used by the detection object, and determine whether the key splitting technology used by the detection object is a problematic technology through design data; if so, the output is unsafe;
[0008] Identify whether the key splitting technology actually applied by the detection object is consistent with the design data corresponding to the design data; if they are consistent, continue to perform the key splitting scheme detection; if they are inconsistent, output an error;
[0009] The key splitting technology used by the detection object is deduced and analyzed to determine whether the key components can be derived from each other and whether there is any correlation between the key components; if any of them is true, the output is unsafe;
[0010] Read the number n1 of key components in the key splitting technology used by the detection object, and perform according to the type of key splitting technology; wherein,
[0011] Equal-division processing type: Determine the lower limit of the key component length n; if the key length is m, then the maximum number of key components a is m / n rounded; if n1>a, the output is unsafe; if n1≤2, the output is unsafe;
[0012] Non-equal distribution processing type: determine the lower limit value n of the key component length; the minimum key component length used by the detection object should be greater than or equal to n, otherwise the output is unsafe; if n1≤2, the output is unsafe;
[0013] Get the number of key components t that can be used to recover the key; if t≤n1 / 2, the output is unsafe; if t>n1, the output is wrong;
[0014] If the key component length is less than the minimum bit value and there are no application scenario requirements or restrictions on the detection object, the output is unsafe.
[0015] As a further solution, for the equal-division processing type: the upper limit q of the key component length is determined according to the requirements and restrictions of the application scenario of the detection object; the number of key components n1 should be between a and m / q, otherwise the output is unsafe.
[0016] As a further solution, correctness and safety checks are performed through the following steps:
[0017] Run the test object and obtain the actual running status, and make judgments on the key splitting scheme detection one by one; if the actual running status is inconsistent with the key splitting scheme detection status, the output is unsafe;
[0018] Capture all key components of the key after the detection object is split and compare the key component values; if any two key component values are the same, the output is unsafe;
[0019] Capture all key components of the key after splitting the detection object and compare the key component values; if the similarity between any two key component values exceeds the standard, continue to run the detection object, and continue to capture all key components after splitting the key and compare the key component values; if any key component value is consistent, output unsafe; otherwise output a warning.
[0020] As a further solution, perform key recovery testing through the following steps:
[0021] Run the test object and obtain the minimum number of key components required to recover the complete key through the design data;
[0022] Randomly extract a key component and input it into the test object, and test whether the complete key can be recovered;
[0023] Randomly select a test object from the remaining key components and test whether the complete key can be recovered;
[0024] Repeat random extraction until all key components are input into the test object, and test whether the complete key can be recovered;
[0025] When the number of key components of the input test object does not reach the minimum number of key components; the test result should be that the complete key cannot be recovered, otherwise the output is unsafe;
[0026] When the number of key components of the input test object reaches or exceeds the minimum number of key components, the test result should be the correct recovery of the complete key, otherwise the output is unsafe;
[0027] Randomly input incorrect key components and test whether the complete key can be recovered; if it can be recovered, the output is not secure.
[0028] As a further solution, if the test object has requirements on the order of key component input, then after completing the key recovery test,
[0029] When the number of key components of the input detection object reaches or exceeds the minimum number of key components,
[0030] If the key component input sequence meets the requirements: then the test result should be the correct recovery of the complete key, otherwise the output is unsafe;
[0031] If the order of key component input does not meet the requirements: the test result should be that the complete key cannot be recovered, otherwise the output is unsafe.
[0032] As a further solution, the key management and storage mechanism is tested through the following steps:
[0033] Check whether the temporary key components after key splitting are destroyed immediately. If any temporary key components are not destroyed immediately, the output is unsafe.
[0034] Check whether protection measures are set during the issuance and transmission of key components; if protection measures are not set during any issuance or transmission process, the output is unsafe.
[0035] As a further solution, key component storage detection is performed through the following steps:
[0036] The recipients and storage parties of the key components after key splitting should be different. If there are any identical recipients or storage parties, the output is not secure.
[0037] Detect the storage location of the key components after key splitting. If any two key components are stored in the same physical device, the output is unsafe.
[0038] Detect the storage devices of the key components after key splitting. If the storage device of any key component does not have permissions set to restrict arbitrary reading and writing, the output is unsafe;
[0039] Detect the storage device of the key component after key splitting. If the storage device of any key component can use the key component for any scenario other than key recovery, the output is unsafe. Detect whether there is a permission requirement for obtaining or calling the key component. If not, the output is unsafe.
[0040] Detecting that the key component storage device performs integrity protection on the key component, and outputting a warning if the storage device does not perform integrity protection on the stored key component;
[0041] Check whether the key components after key splitting are only fixedly stored in the corresponding key component storage devices; if any key component is not only fixedly stored in the corresponding key component storage device, the output is not secure.
[0042] Compared with the related art, the key splitting detection method provided by the present invention has the following beneficial effects:
[0043] The present invention performs key splitting scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection and key component storage detection on the key splitting technology used by the detection object, determines whether there is any abnormality in the key splitting according to the situation of each detection step, and outputs corresponding error, insecurity or warning information when an abnormality occurs; the present invention aims to design a complete detection process for the whole stage process of key splitting, so as to realize a comprehensive and multi-dimensional evaluation of various aspects of the key splitting technology, so as to solve the problem that there is no systematic detection process in the key splitting technology in the prior art. BRIEF DESCRIPTION OF THE DRAWINGS
[0044] Figure 1 A schematic diagram of the steps of a key splitting detection method provided by the present invention;
[0045] Figure 2 A schematic diagram of the key splitting scheme detection steps provided by the present invention;
[0046] Figure 3 A schematic diagram of the correctness and safety detection steps provided by the present invention;
[0047] Figure 4 A schematic diagram of the key recovery detection steps provided by the present invention;
[0048] Figure 5 A schematic diagram of the key component storage detection steps provided by the present invention. DETAILED DESCRIPTION
[0049] In order to make the purpose, technical solutions and advantages of the embodiments of the present invention clearer, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Generally, the components of the embodiments of the present invention described and shown in the drawings here can be arranged and designed in various different configurations.
[0050] Example 1
[0051] like Figure 1 As shown, the present embodiment provides a key splitting detection method, which performs key splitting scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection and key component storage detection on the key splitting technology used by the detection object, and determines whether there is an abnormality in the key splitting according to the situation of each detection step, and outputs corresponding error, insecurity or warning information when an abnormality occurs.
[0052] It should be noted that: this embodiment constitutes a complete set of detection technologies for key splitting technology through key splitting scheme detection (for the scheme theoretical stage), correctness and security detection (for the actual operation stage), key recovery detection (for the key generation stage), key management and storage mechanism detection (for the key management distribution stage) and key component storage detection (for the key distribution storage stage). It can detect the correctness and security of the key splitting technology, and the security of the key component storage mechanism and usage mechanism. It aims to achieve a comprehensive and multi-dimensional evaluation of all aspects of the key splitting technology through a complete set of detection processes, so as to solve the problem that there is no systematic detection process in the prior art for key splitting technology.
[0053] like Figure 2 As shown, as a further solution, the key splitting scheme detection is performed through the following steps:
[0054] S101: Obtain the key splitting technology used by the detection object, and determine whether the key splitting technology used by the detection object is a problematic technology through design data; if so, output that it is unsafe;
[0055] S102: Identify whether the key splitting technology actually applied by the detection object is consistent with the design data corresponding to the design data; if they are consistent, continue to perform the key splitting scheme detection; if they are inconsistent, output an error;
[0056] S103: deriving and analyzing the key splitting technology used by the detection object to determine whether the key components can be derived from each other and whether there is any correlation between the key components; if any of them is true, the output is unsafe;
[0057] S104: Read the number n1 of key components in the key splitting technology used by the detection object, and perform according to the type of key splitting technology; wherein,
[0058] Equal-division processing type: Determine the lower limit of the key component length n; if the key length is m, then the maximum number of key components a is m / n rounded; if n1>a, the output is unsafe; if n1≤2, the output is unsafe;
[0059] Non-equal distribution processing type: determine the lower limit value n of the key component length; the minimum key component length used by the detection object should be greater than or equal to n, otherwise the output is unsafe; if n1≤2, the output is unsafe;
[0060] S105: Obtain the number t of key components for recovering the key; if t≤n1 / 2, the output is unsafe; if t>n1, the output is wrong;
[0061] S106: When the key component length of the detection object is less than the minimum bit value without any application scenario requirements and restrictions, the output is unsafe.
[0062] It should be noted that: this embodiment aims to perform a theoretical security test on the key splitting technology scheme before the detection object implements the key splitting technology. For example, in step S101, the key is processed equally or unequally. If the detection object cannot be processed unequally, then when the key splitting technology scheme of the unequal processing type is selected, there will be problems and an unsafe output will be required; and we need to ensure that the key splitting technology actually applied by the detection object is consistent with the design data corresponding to the design data, otherwise the subsequent detection steps cannot be executed and an error will be output; step S104 is to ensure that the length of the key component meets the theoretical expectations to avoid theoretical deviations; step S106 is for the requirements and restrictions of no application scenarios, it is necessary to ensure that the length of the key component is not less than the minimum bit value, otherwise there will be a security risk caused by the key component length being too short.
[0063] As a further solution, for the equal distribution processing type of S104: we also determine the upper limit q of the key component length based on the requirements and restrictions of the application scenario of the detection object; the number of key components n1 should be between a and m / q, otherwise the output is unsafe.
[0064] like Figure 3 As a further solution, the following steps are performed to check correctness and safety:
[0065] S201: Run the detection object and obtain the actual operation status, and judge the key splitting scheme detection one by one; if the actual operation status is inconsistent with the key splitting scheme detection status, the output is unsafe;
[0066] S202: Capture all key components of the key split of the detection object and compare the key component values; if any two key component values are consistent, the output is unsafe;
[0067] S203: Capture all key components of the key after splitting of the detection object and compare the key component values; if there are any two key component values whose similarity exceeds the standard, continue to run the detection object, and continue to capture all key components after the key is split, and compare the key component values; if there is any key component value that is consistent, output unsafe; otherwise output a warning.
[0068] It should be noted that: this embodiment checks the actual operation of the key splitting scheme based on the actual operation of the detection object. Step S201 is to compare the actual operation with the previous round of theoretical security detection to ensure that the theoretical situation is consistent with the actual situation; steps S202 and S203 are to detect situations where the key component values are consistent or similar, so as to avoid security problems caused by the reuse of key components.
[0069] like Figure 4 As a further solution, key recovery detection is performed through the following steps:
[0070] S301: Run the detection object and obtain the minimum number of key components to recover the complete key through the design data;
[0071] S302: randomly extract a key component and input it into the detection object, and detect whether the complete key can be recovered;
[0072] S303: randomly selecting a component from the remaining key components and inputting it into a detection object, and detecting whether the complete key can be recovered;
[0073] S304: Repeat random extraction until all key components are input into the detection object, and detect whether the complete key can be recovered;
[0074] S305: When the number of key components of the input detection object does not reach the minimum number of key components; the detection result should be that the complete key cannot be recovered, otherwise the output is unsafe;
[0075] S306: When the number of key components of the input detection object reaches or exceeds the minimum number of key components, the detection result should be that the complete key is correctly recovered, otherwise the output is unsafe;
[0076] S307: Randomly input incorrect key components and detect whether the complete key can be recovered; if it can be recovered, the output is unsafe.
[0077] It should be noted that: this embodiment realizes forward detection of key recovery by randomly inputting key components with the least number of key components to determine whether the complete key can be recovered after the detection object is actually running and the corresponding key components are generated; and then realizes reverse detection of key recovery by randomly inputting wrong key components and detecting whether the complete key can be recovered.
[0078] As a further solution, if the test object has requirements on the order of key component input, then after completing the key recovery test,
[0079] When the number of key components of the input detection object reaches or exceeds the minimum number of key components,
[0080] If the key component input sequence meets the requirements: then the test result should be the correct recovery of the complete key, otherwise the output is unsafe;
[0081] If the order of key component input does not meet the requirements: the test result should be that the complete key cannot be recovered, otherwise the output is unsafe.
[0082] It should be noted that: this embodiment takes into account the situation where the detection object has requirements on the input order of key components, and further determines whether the input order of key components meets the requirements.
[0083] As a further solution, the key management and storage mechanism is tested through the following steps:
[0084] Check whether the temporary key components after key splitting are destroyed immediately. If any temporary key components are not destroyed immediately, the output is unsafe.
[0085] Check whether protection measures are set during the issuance and transmission of key components; if protection measures are not set during any issuance or transmission process, the output is unsafe.
[0086] It should be noted that: after obtaining the key components, this embodiment needs to ensure whether there is a risk of key leakage during the generation, distribution and transmission process.
[0087] like Figure 5 As shown, as a further solution, key component storage detection is performed through the following steps:
[0088] S401: The key component receivers and key component storage parties after key splitting should be different. If there are any identical receivers or storage parties, the output is unsafe.
[0089] S402: Detect the storage location of the key components after the key is split. If any two key components are stored in the same physical device, the output is unsafe.
[0090] S403: Detect the storage devices of the key components after the key splitting. If the storage device of any key component does not have permissions set to restrict arbitrary reading and writing, the output is unsafe;
[0091] S404: Detect the storage devices of the key components after key splitting. If the storage device of any key component can use the key component for any scenario other than key recovery, the output is unsafe; detect whether there is a permission requirement for obtaining or calling the key component; if not, the output is unsafe;
[0092] S405: Detect whether the key component storage device performs integrity protection on the key component, and output a warning if the storage device does not perform integrity protection on the stored key component;
[0093] S406: Check whether the key components after key splitting are only fixedly stored in the corresponding key component storage device; if any key component is not only fixedly stored in the corresponding key component storage device, the output is not safe.
[0094] It should be noted that: this embodiment detects the storage security of key components; first, it is necessary to ensure that the key components cannot be controlled by the same party and cannot be stored in the same physical device; in addition, the storage device needs to set permissions to limit arbitrary reading and writing and cannot be used in other scenarios; finally, it is necessary to ensure that the key components will not be lost or damaged, causing unsafe conditions, and cannot be stored in non-fixed storage devices.
[0095] The above are only embodiments of the present invention, and are not intended to limit the patent scope of the present invention. Any equivalent structure or equivalent process transformation made using the contents of the present invention specification and drawings, or directly or indirectly applied in other related technical fields, are also included in the patent protection scope of the present invention.
Claims
1. A key splitting detection method, characterized in that: By performing key splitting scheme detection, correctness and security detection, key recovery detection, key management and storage mechanism detection and key component storage detection on the key splitting technology used by the detection object, it is determined whether there is an abnormality in the key splitting according to the situation of each detection step, and the corresponding error, insecurity or warning information is output when an abnormality occurs; The key splitting scheme is tested by the following steps: Obtain the key splitting technology used by the detection object, and determine whether the key splitting technology used by the detection object is a problematic technology through design data; if so, the output is unsafe; Identify whether the key splitting technology actually applied by the detection object is consistent with the design data corresponding to the design data; if they are consistent, continue to perform the key splitting scheme detection; if they are inconsistent, output an error; The key splitting technology used by the detection object is deduced and analyzed to determine whether the key components can be derived from each other and whether there is any correlation between the key components; if any of them is true, the output is unsafe; Read the number n1 of key components in the key splitting technology used by the detection object, and perform according to the type of key splitting technology; wherein, Equal-division processing type: Determine the lower limit of the key component length n; if the key length is m, then the maximum number of key components a is m / n rounded; if n1>a, the output is unsafe; if n1≤2, the output is unsafe; Non-equal distribution processing type: determine the lower limit value n of the key component length; the minimum key component length used by the detection object should be greater than or equal to n, otherwise the output is unsafe; if n1≤2, the output is unsafe; Get the number of key components t that can be used to recover the key; if t≤n1 / 2, the output is unsafe; if t>n1, the output is wrong; If the key component length is less than the minimum bit value, the output is unsafe when there are no application scenario requirements or restrictions. Perform correctness and safety checks through the following steps: Run the test object and obtain the actual running status, and make judgments on the key splitting scheme detection one by one; if the actual running status is inconsistent with the key splitting scheme detection status, the output is unsafe; Capture all key components of the key after the detection object is split and compare the key component values; if any two key component values are the same, the output is unsafe; Capture all key components of the key after splitting the detection object and compare the key component values; if the similarity between any two key component values exceeds the standard, continue to run the detection object, and continue to capture all key components after splitting the key and compare the key component values; if any key component value is consistent, output unsafe; otherwise output a warning.
2. A key splitting detection method according to claim 1, characterized in that: For the equal-division processing type: the upper limit value q of the key component length is also determined according to the requirements and restrictions of the application scenario of the detection object; The number of key components n1 should be between a and m / q, otherwise the output is insecure.
3. A key splitting detection method according to claim 1, characterized in that: Perform key recovery test by following the steps below: Run the test object and obtain the minimum number of key components required to recover the complete key through the design data; Randomly extract a key component and input it into the test object, and test whether the complete key can be recovered; Randomly select a test object from the remaining key components and test whether the complete key can be recovered; Repeat random extraction until all key components are input into the test object, and test whether the complete key can be recovered; When the number of key components of the input test object does not reach the minimum number of key components; the test result should be that the complete key cannot be recovered, otherwise the output is unsafe; When the number of key components of the input test object reaches or exceeds the minimum number of key components, the test result should be the correct recovery of the complete key, otherwise the output is unsafe; Randomly input incorrect key components and test whether the complete key can be recovered; if it can be recovered, the output is not secure.
4. A key splitting detection method according to claim 3, characterized in that: If the test object has requirements on the order of key component input, then after completing the key recovery test, When the number of key components of the input detection object reaches or exceeds the minimum number of key components, If the key component input sequence meets the requirements: then the test result should be the correct recovery of the complete key, otherwise the output is unsafe; If the order of key component input does not meet the requirements: the test result should be that the complete key cannot be recovered, otherwise the output is unsafe.
5. A key splitting detection method according to claim 1, characterized in that: Perform key management and storage mechanism testing through the following steps: Check whether the temporary key components after key splitting are destroyed immediately. If any temporary key components are not destroyed immediately, the output is unsafe. Check whether protection measures are set during the issuance and transmission of key components; if protection measures are not set during any issuance or transmission process, the output is unsafe.
6. A key splitting detection method according to claim 1, characterized in that: Perform key component storage detection through the following steps: The recipients and storage parties of the key components after key splitting should be different. If there are any identical recipients or storage parties, the output is not secure. Detect the storage location of the key components after key splitting. If any two key components are stored in the same physical device, the output is unsafe. Detect the storage devices of the key components after key splitting. If the storage device of any key component does not have permissions set to restrict arbitrary reading and writing, the output is unsafe; Detect the storage device of the key component after key splitting. If the storage device of any key component can use the key component for any scenario other than key recovery, the output is unsafe. Detect whether there is a permission requirement for obtaining or calling the key component. If not, the output is unsafe. Detecting that the key component storage device performs integrity protection on the key component, and outputting a warning if the storage device does not perform integrity protection on the stored key component; Check whether the key components after key splitting are only fixedly stored in the corresponding key component storage devices; if any key component is not only fixedly stored in the corresponding key component storage device, the output is not secure.