E-mail encryption system based on data privacy security password-free login and automatic key exchange

Abstract

The invention discloses an E-mail encryption system based on data privacy security password-free login and automatic key exchange, and particularly relates to the technical field of E-mail encryption, which comprises the following steps of: S1, registering an E-mail address; s2, an email box login process; s3, sending an E-mail; and S4, receiving the E-mail. According to the method, a password authentication system is abandoned, login verification is carried out in a mail certificate verification mode, and vulnerabilities, including easy forgetting of passwords, insufficient password strength, easy library collision attack, easy brute force cracking and the like, of a password system are avoided. Meanwhile, the S / MIME protocol encryption process is supported in the system, third-party mail client software does not need to be installed, and the whole encryption and decryption process can be completed in the system. The use difficulty of a user is reduced, and the usability is improved. According to the invention, automatic public key exchange is realized in the system, the process of actively acquiring the public key of the opposite side is avoided, and great convenience is brought to the user.

Description

Technical Field

[0001] The present invention relates to the technical field of encrypted emails, and in particular to an encrypted email system for automatically exchanging keys based on data privacy security and password-free login. Background Art

[0002] With the development and popularization of the Internet today, email has become a basic communication tool, and its security has received increasing attention.

[0003] At present, the disadvantage of traditional email systems is that the protection method for email security is relatively simple. The email system login is mainly authenticated through the email login password, and the email content is basically stored in plain text or simply encoded with Base64, QP, etc., and relies on secondary authentication methods such as login passwords or attached mobile phones to determine whether the user has the right to view the email content. If there is a problem with the authentication or the email storage server is infiltrated, all the user's email data will be completely exposed, which seriously threatens the security of the user's email.

[0004] Due to the use of a password authentication system, many users lack sufficient security awareness and set passwords that are too simple or the same as passwords for other websites. As a result, email passwords are often stolen, which makes it easy for email data to be stolen.

[0005] Although there are some existing methods and systems for encrypting emails, they are often inconvenient to use and require the sender and receiver of the email to exchange encryption keys respectively, which is very restrictive for both the sender and the receiver.

[0006] However, in the S / MIME protocol, when sending an email to a recipient, you need to first obtain the recipient's public key. The protocol does not specify how to obtain the recipient's public key, so the method of obtaining it is not fixed. The public key can be provided by the recipient first, or obtained from a public key server (if available). For each recipient, you need to find a suitable way to obtain the public key, which is a tortuous and cumbersome process.

[0007] S / MIME does not provide a certificate distribution process, so for the convenience of users, we usually need a certificate and key management and distribution system. Currently, there is no standard in the industry to guide the way of certificate distribution, so the certificate exchange process is relatively complicated.

[0008] In actual environments, S / MIME often requires a client that supports the S / MIME protocol, such as Outlook, The Bat!, etc., which raises the threshold for users to use it.

[0009] S / MIME does not include the login part of the mail system. Generally, mail system providers provide login verification methods, usually using passwords for verification. Passwords are vulnerable to attacks such as database collisions and blasting, and face security risks. Therefore, we provide an encrypted email system based on data privacy security, password-free login, and automatic key exchange. Summary of the invention

[0010] The purpose of the present invention is to solve the shortcomings of the prior art and to propose an encrypted email system based on data privacy security and automatic key exchange without password login.

[0011] In order to achieve the above object, the present invention adopts the following technical solutions: An encrypted email system based on data privacy security and password-free login and automatic key exchange includes the following steps: S1. Email address registration; S2, email login process; S3, email sending; S4. Email receiving.

[0012] The present invention is further configured as follows: in the step S1, in the email address registration: S1.1. The user uses a browser to access the registration page of the email system; S1.2. The user fills in the registration information on the registration page. The required item is the registered email address; S1.3. When the user submits the registration information, it is determined whether the email address filled in has been registered in the system. If it has been registered, an error message is returned; S1.4. When the system accepts the email address submitted by the user, it generates an email certificate based on the email address and saves the user's public key in the system; S1.5. After the system completes the registration process, the user will be prompted to download the email certificate. After the download is complete, the entire registration process is completed; Among them: Step S1, the email address registration process, the only content that must be filled in is the email address, and there is no need to fill in traditional login password and other information, which is simple and easy to register and use. After registration is completed, the email system will only store the registered user's public key and will not store the registered user's private key.

[0013] The present invention is further configured as follows: in the step S2, during the e-mail login process: S2.1. The user uses a browser to access the login page of the email system; S2.2, determine whether the user system has imported the certificate; S2.3. If the certificate has been imported, a system selection box will pop up and you can select the email certificate that needs to be authenticated. S2.4. If the email certificate has not been imported, prompt the user to import the email certificate; S2.5. Use the selected email certificate for password-free login verification. The email address can be obtained from the email certificate, and identity authentication is performed through digital signature; S2.6. If the login verification is successful, the login is successful and the mailbox management interface is entered; S2.7. If the login verification fails, an error message will be displayed; Among them: in the step S2, the email login process, there is no need to fill in the traditional login password and other information. You only need to use the email certificate file downloaded during registration to import it into the system to effectively complete the login verification process. Without a password, it will not be attacked by database collisions. The security strength is high, and a password-free login process is realized.

[0014] The present invention is further configured as follows: in the step S3, in sending the email: S3.1. After logging into the email system, fill in the recipient's email address on the email sending interface; S3.2. On the email sending interface, write the body of the email. After completing the body, select Send. S3.3, after receiving the sending request, the email system determines in the background whether the email address of the recipient has been registered in the system. If not, it returns to re-fill the email address of the recipient; S3.4. If the recipient's email address has been registered in the system, the email is encrypted using a symmetric encryption algorithm, and then the recipient's public key stored in the email system is automatically extracted to perform asymmetric encryption on the symmetric encryption key of the encrypted email, and the ciphertext is attached to the email. After encryption, the sender's private key is used to sign the email ciphertext and then sent to the recipient; S3.5. After the email leaves the sender, the entire email is stored in the email system, and what is stored at this time is the ciphertext of the email; Among them: in the step S3, in the email sending, the plain text is only displayed when the user is editing the email body. From the beginning of sending, all transmission and storage processes use email ciphertext. Because the encrypted email uses a symmetric encryption algorithm, and the symmetric encryption algorithm key is encrypted using an asymmetric encryption algorithm, taking into account both encryption efficiency and security, the transmission and storage processes are highly secure. During the sending process, the public key exchange is automatically completed in the email system, and the user does not need to explicitly know the recipient's public key information.

[0015] The present invention is further configured as follows: Step S4, receiving email: S4.1. After the user logs into the email system, if a new email arrives, the user will be prompted to open the email; S4.2. Before opening the email, the email system automatically verifies the sender's signature using the sender's public key stored in the system; S4.3. If the signature verification fails, an error message is displayed; S4.4. If the signature verification is successful, the email system uses the email certificate private key selected by the user when logging in to decrypt the email. If the decryption fails, an error message is prompted; S4.5. After the decryption is successfully completed, the plain text of the email is displayed; Among them: in the step S4, during the email receiving process, the email will be decrypted and displayed to the user for reading only when the user chooses to open the email. The plain text of the email will not be stored in the email system. The private key of the certificate selected by the user when logging in will not be stored in the email either. The email certificate will only be called for use when the email is decrypted. Due to the characteristics of the asymmetric encryption algorithm, only the corresponding private key of the recipient can decrypt the encryption key, and then the encryption key can be used to decrypt the email. Even if other third parties intercept the ciphertext content of the email, they cannot perform the decryption operation. The security strength is high. During the receiving process, the public key exchange is automatically completed in the email system to verify the signature, without the user explicitly knowing the sender's public key information; The entire email system only stores limited and necessary user information, including the user's email address, the user's public key, and the ciphertext content of the email. The less content is stored, the lower the risk of privacy leakage. Since all transmitted and stored emails are in ciphertext form, even if the email system is penetrated by a third party, only the ciphertext data will be leaked, and the user's content information will not be leaked.

[0016] The present invention is further configured as follows: S1, email address registration: the email system registers according to the unique user name filled in by the user, and generates the user's email certificate after the registration is completed, which is provided to the user for download and import into the operating system; S2, email login process: the email system uses the email certificate private key issued to the registered user during registration for authentication, and there is no need to set and remember traditional passwords. The login verification process has high security strength; S3, email sending: before sending, the email is encrypted using the recipient's public key and signed using the sender's private key. From the time the email leaves the sender until the recipient receives the email and decrypts it, all transmission and storage processes in between are in ciphertext state; S4, email reception: when receiving an email, the sender's public key is used to verify the signature, confirm the sender and the integrity of the email, and use the held private key to decrypt the email for viewing.

[0017] The beneficial effects of the present invention are: 1. The present invention abandons the password authentication system and uses email certificate verification for login verification, avoiding the vulnerabilities of the password system, including easy forgetting of passwords, insufficient password strength, susceptibility to database collision attacks, and brute force cracking.

[0018] 2. The present invention realizes automatic public key exchange within the system, avoiding the need to actively obtain the other party's public key, which greatly facilitates users.

[0019] 3. The present invention supports the S / MIME protocol encryption process in the system, and the entire encryption and decryption process can be completed in the system without installing third-party mail client software, which reduces the user's difficulty of use and improves ease of use.

[0020] 4. All email information stored in the system of the present invention is encrypted, which eliminates the risk of plain text information leakage from the source and greatly improves the security of information. BRIEF DESCRIPTION OF THE DRAWINGS

[0021] Figure 1 is a flow chart of e-mail address registration of the present invention; Figure 2 is a flow chart of the e-mail login process of the present invention; Figure 3 It is a flow chart of sending an e-mail of the present invention; Figure 4 It is a flow chart of receiving email of the present invention. DETAILED DESCRIPTION

[0022] The technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the drawings in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, rather than all the embodiments.

[0023] like Figure 1 As shown, an encrypted email system based on data privacy security and password-free login and automatic key exchange, in the step S1, email address registration: S1.1. The user uses a browser to access the registration page of the email system; S1.2. The user fills in the registration information on the registration page. The required item is the registered email address; S1.3. When the user submits the registration information, it is determined whether the email address filled in has been registered in the system. If it has been registered, an error message is returned; S1.4. When the system accepts the email address submitted by the user, it generates an email certificate based on the email address and saves the user's public key in the system; S1.5. After the system completes the registration process, the user will be prompted to download the email certificate. After the download is complete, the entire registration process is completed; Among them: Step S1, the email address registration process, the only content that must be filled in is the email address, and there is no need to fill in traditional login password and other information, which is simple and easy to register and use. After registration is completed, the email system will only store the registered user's public key and will not store the registered user's private key.

[0024] In the above embodiment, the user first accesses the registration page of the email system through a browser and fills in the email address as the only required information on the page. After the user submits the information, the system will check whether the email address has been registered in the system. If it has been registered, an error prompt will be returned; if it has not been registered, the system will generate a pair of public and private keys, and generate an email certificate based on the email address. The public key will be saved in the system. Next, the user is prompted to download the email certificate. After the download is complete, the entire registration process ends. During the entire process, the user does not need to fill in the traditional password, which simplifies the registration process, and the system only stores the user's public key to ensure that the user's private key will not be saved by the system, thereby enhancing the security of the system.

[0025] like Figure 1-Figure 2 As shown, an encrypted email system based on data privacy security and password-free login and automatic key exchange, in the step S2, during the email login process: S2.1. The user uses a browser to access the login page of the email system; S2.2, determine whether the user system has imported the certificate; S2.3. If the certificate has been imported, a system selection box will pop up and you can select the email certificate that needs to be authenticated. S2.4. If the email certificate has not been imported, prompt the user to import the email certificate; S2.5. Use the selected email certificate for password-free login verification. The email address can be obtained from the email certificate, and identity authentication is performed through digital signature; S2.6. If the login verification is successful, the login is successful and the mailbox management interface is entered; S2.7. If the login verification fails, an error message will be displayed; Among them: in the step S2, the email login process, there is no need to fill in the traditional login password and other information. You only need to use the email certificate file downloaded during registration to import it into the system to effectively complete the login verification process. Without a password, it will not be attacked by database collisions. The security strength is high, and a password-free login process is realized.

[0026] In the above embodiment, the user uses a browser to access the login page of the email system. The system will first check whether the user has imported the email certificate. If the user has not imported the certificate, the system will prompt the user to import the email certificate downloaded during the registration process. If the certificate has been imported, the system will pop up a selection box for the user to select the email certificate that needs to be authenticated. Next, the system will use the selected email certificate to perform password-free login verification. Through digital signature technology, the system can obtain the email address from the email certificate and confirm the validity of the user's identity. If the verification is successful, the user can enter the mailbox management interface; otherwise, the system will prompt an error message. The entire login process does not require entering a traditional password. Identity authentication only requires using the email certificate, which greatly improves security and avoids the risk of passwords being attacked by database collisions, thereby achieving a high-security password-free login process.

[0027] like Figure 1-Figure 3 As shown, an encrypted email system based on data privacy security and automatic key exchange without password login, in the step S3, email sending: S3.1. After logging into the email system, fill in the recipient's email address on the email sending interface; S3.2. On the email sending interface, write the body of the email. After completing the body, select Send. S3.3, after receiving the sending request, the email system determines in the background whether the email address of the recipient has been registered in the system. If not, it returns to re-fill the email address of the recipient; S3.4. If the recipient's email address has been registered in the system, the email is encrypted using a symmetric encryption algorithm, and then the recipient's public key stored in the email system is automatically extracted to perform asymmetric encryption on the symmetric encryption key of the encrypted email, and the ciphertext is attached to the email. After encryption, the sender's private key is used to sign the email ciphertext and then sent to the recipient; S3.5. After the email leaves the sender, the entire email is stored in the email system, and what is stored at this time is the ciphertext of the email; Among them: in the step S3, in the email sending, the plain text is only displayed when the user is editing the email body. From the beginning of sending, all transmission and storage processes use email ciphertext. Because the encrypted email uses a symmetric encryption algorithm, and the symmetric encryption algorithm key is encrypted using an asymmetric encryption algorithm, taking into account both encryption efficiency and security, the transmission and storage processes are highly secure. During the sending process, the public key exchange is automatically completed in the email system, and the user does not need to explicitly know the recipient's public key information.

[0028] In the above embodiment, after logging into the system, the user first fills in the recipient's email address and composes the email body in the email sending interface. After receiving the sending request, the system will determine whether the recipient's email address has been registered in the background. If the recipient is not registered, the system will prompt the user to re-fill in the email address; if the recipient is registered, the system will use a symmetric encryption algorithm to encrypt the email body. Then, the system automatically extracts the recipient's public key and uses the public key to asymmetrically encrypt the email's symmetric encryption key. After encryption is completed, the system will sign the encrypted email with the sender's private key, and finally send the signed and encrypted email to the recipient. The entire email sending process, starting from the user clicking send, the transmission and storage of the email in the system are encrypted, ensuring the security and privacy of the email. The public key exchange process is completely completed automatically within the system, and the user does not need to understand or manually operate the recipient's public key, which greatly improves the convenience of use.

[0029] like Figure 1-Figure 4 As shown, an encrypted email system based on data privacy security and automatic key exchange without password login, the step S4, email reception: S4.1. After the user logs into the email system, if a new email arrives, the user will be prompted to open the email; S4.2. Before opening the email, the email system automatically verifies the sender's signature using the sender's public key stored in the system; S4.3. If the signature verification fails, an error message is displayed; S4.4. If the signature verification is successful, the email system uses the email certificate private key selected by the user when logging in to decrypt the email. If the decryption fails, an error message is displayed; S4.5. After the decryption is successfully completed, the plain text of the email is displayed; Among them: in the step S4, during the email receiving process, the email will be decrypted and displayed to the user for reading only when the user chooses to open the email. The plain text of the email will not be stored in the email system. The private key of the certificate selected by the user when logging in will not be stored in the email either. The email certificate will only be called for use when the email is decrypted. Due to the characteristics of the asymmetric encryption algorithm, only the corresponding private key of the recipient can decrypt the encryption key, and then the encryption key can be used to decrypt the email. Even if other third parties intercept the ciphertext content of the email, they cannot perform the decryption operation. The security strength is high. During the receiving process, the public key exchange is automatically completed in the email system to verify the signature, without the user explicitly knowing the sender's public key information; The entire email system only stores limited and necessary user information, including the user's email address, the user's public key, and the ciphertext content of the email. The less content is stored, the lower the risk of privacy leakage. Since all transmitted and stored emails are in ciphertext form, even if the email system is penetrated by a third party, only the ciphertext data will be leaked, and the user's content information will not be leaked.

[0030] In the above embodiment, after the user logs in to the email system, if a new email arrives, the system will remind the user to choose to open the email. Before the user chooses to open the email, the system will automatically use the stored sender's public key to verify the sender's signature. If the signature verification fails, the system will prompt an error message; if the verification is successful, the system will use the email certificate private key selected by the user when logging in to decrypt the email. If the decryption fails, the system will also prompt an error message; after successful decryption, the email content will be displayed to the user in plain text. During the entire process, the email will only be decrypted when the user chooses to open the email, and the plain text of the email will not be stored in the system. All email transmission and storage in the system are performed in ciphertext form to ensure that even if the email is intercepted by a third party, it cannot be decrypted and read. The system will automatically complete the exchange and verification of public keys in the background, and the user does not need to manually obtain or know the other party's public key information, thereby ensuring the security and convenience of the entire process.

[0031] Working principle: When the present invention is used, during the registration stage, the user only needs to access the registration page of the email system through a browser and fill in the email address. The system will generate an email certificate (including public key and private key) for each email address and only store the user's public key. This approach ensures that only the user holding the private key can decrypt the email, which greatly enhances security. After registration is completed, the user can download the email certificate file for subsequent password-free login.

[0032] When logging into the email system, users do not need to enter a password, they only need to import the previously downloaded email certificate to complete the verification. The system verifies the user's identity through digital signature technology. This password-free login mechanism not only simplifies user operations, but also avoids the database collision attacks that traditional password methods are vulnerable to, thereby improving security. After successful login, users can enter the mailbox management interface to process emails.

[0033] During the process of sending and receiving emails, the system automatically completes the public key exchange and uses hybrid encryption technology to ensure security. When sending emails, the symmetric encryption algorithm is used to encrypt the email content, and the symmetric key is asymmetrically encrypted using the public key of the recipient and attached to the email. After the email is sent, it is stored in the system in ciphertext form. When receiving emails, the system verifies the email signature through the sender's public key and decrypts the email content with the recipient's private key. The entire transmission and storage process is in ciphertext form, so that even if the email system is infiltrated by a third party, only the ciphertext data will be leaked, and the confidentiality of the user content will not be affected.

[0034] The above description is only a preferred specific implementation manner of the present invention, but the protection scope of the present invention is not limited thereto. Any technician familiar with the technical field can make equivalent replacements or changes according to the technical scheme and inventive concept of the present invention within the technical scope disclosed by the present invention, which should be covered by the protection scope of the present invention.

Claims

1. An encrypted email system based on data privacy security and automatic key exchange without password login, characterized in that: The following steps are involved: S1. Email address registration; S2, email login process; S3, email sending; S4. Email receiving.

2. According to claim 1, an encrypted email system based on data privacy security and automatic key exchange without password login is characterized in that: In the step S1, email address registration: S1.

1. The user uses a browser to access the registration page of the email system; S1.

2. The user fills in the registration information on the registration page. The required item is the registered email address; S1.

3. When the user submits the registration information, it is determined whether the email address filled in has been registered in the system. If it has been registered, an error message is returned; S1.

4. When the system accepts the email address submitted by the user, it generates an email certificate based on the email address and saves the user's public key in the system; S1.

5. After the system completes the registration process, the user will be prompted to download the email certificate. After the download is complete, the entire registration process is completed; Among them: Step S1, the email address registration process, the only content that must be filled in is the email address, and there is no need to fill in traditional login password and other information, which is simple and easy to register and use. After registration is completed, the email system will only store the registered user's public key and will not store the registered user's private key.

3. According to claim 1, an encrypted email system based on data privacy security and automatic key exchange without password login is characterized in that: In the step S2, during the email login process: S2.

1. The user uses a browser to access the login page of the email system; S2.2, determine whether the user system has imported the certificate; S2.

3. If the certificate has been imported, a system selection box will pop up and you can select the email certificate that needs to be authenticated. S2.

4. If the email certificate has not been imported, prompt the user to import the email certificate; S2.

5. Use the selected email certificate for password-free login verification. The email address can be obtained from the email certificate, and identity authentication is performed through digital signature; S2.

6. If the login verification is successful, the login is successful and the mailbox management interface is entered; S2.

7. If the login verification fails, an error message will be displayed; Among them: in the step S2, the email login process, there is no need to fill in the traditional login password and other information. You only need to use the email certificate file downloaded during registration to import it into the system to effectively complete the login verification process. Without a password, it will not be attacked by database collisions. The security strength is high, and a password-free login process is realized.

4. According to claim 1, an encrypted email system based on data privacy security and automatic key exchange without password login is characterized in that: In the step S3, sending an email: S3.

1. After logging into the email system, fill in the recipient's email address on the email sending interface; S3.

2. On the email sending interface, write the body of the email. After completing the body, select Send. S3.3, after receiving the sending request, the email system determines in the background whether the email address of the recipient has been registered in the system. If not, it returns to re-fill the email address of the recipient; S3.

4. If the recipient's email address has been registered in the system, the email is encrypted using a symmetric encryption algorithm, and then the recipient's public key stored in the email system is automatically extracted to perform asymmetric encryption on the symmetric encryption key of the encrypted email, and the ciphertext is attached to the email. After encryption, the sender's private key is used to sign the email ciphertext and then sent to the recipient; S3.

5. After the email leaves the sender, the entire email is stored in the email system, and what is stored at this time is the ciphertext of the email; Among them: in the step S3, in the email sending, the plain text is only displayed when the user is editing the email body. From the beginning of sending, all transmission and storage processes use email ciphertext. Because the encrypted email uses a symmetric encryption algorithm, and the symmetric encryption algorithm key is encrypted using an asymmetric encryption algorithm, taking into account both encryption efficiency and security, the transmission and storage processes are highly secure. During the sending process, the public key exchange is automatically completed in the email system, and the user does not need to explicitly know the recipient's public key information.

5. According to claim 1, an encrypted email system based on data privacy security and automatic key exchange without password login is characterized in that: Step S4, email reception: S4.

1. After the user logs into the email system, if a new email arrives, the user will be prompted to open the email; S4.

2. Before opening the email, the email system automatically verifies the sender's signature using the sender's public key stored in the system; S4.

3. If the signature verification fails, an error message is displayed; S4.

4. If the signature verification is successful, the email system uses the email certificate private key selected by the user when logging in to decrypt the email. If the decryption fails, an error message is displayed; S4.

5. After the decryption is successfully completed, the plain text of the email is displayed; Among them: in the step S4, during the email receiving process, the email will be decrypted and displayed to the user for reading only when the user chooses to open the email. The plain text of the email will not be stored in the email system. The private key of the certificate selected by the user when logging in will not be stored in the email either. The email certificate will only be called for use when the email is decrypted. Due to the characteristics of the asymmetric encryption algorithm, only the corresponding private key of the recipient can decrypt the encryption key, and then the encryption key can be used to decrypt the email. Even if other third parties intercept the ciphertext content of the email, they cannot perform the decryption operation. The security strength is high. During the receiving process, the public key exchange is automatically completed in the email system to verify the signature, without the user explicitly knowing the sender's public key information; The entire email system only stores limited and necessary user information, including the user's email address, the user's public key, and the ciphertext content of the email. The less content is stored, the lower the risk of privacy leakage. Since all transmitted and stored emails are in ciphertext form, even if the email system is penetrated by a third party, only the ciphertext data will be leaked, and the user's content information will not be leaked.

6. The encrypted email system based on data privacy security and automatic key exchange without password login according to claim 1 is characterized in that: S1, email address registration: the email system registers according to the unique user name filled in by the user, and after the registration is completed, the user's email certificate is generated and provided to the user for download and import into the operating system; S2, email login process: the email system uses the email certificate private key issued to the registered user during registration for authentication, and there is no need to set and remember traditional passwords. The login verification process has high security strength; S3, email sending: before sending, the email is encrypted with the public key of the recipient and signed with the private key of the sender. From the time the email leaves the sender until the recipient receives the email and decrypts it, all transmission and storage processes in the middle are in ciphertext state; S4, email reception: When an email is received, the sender's public key is used to verify the signature, confirm the sender and the integrity of the email, and the private key held is used to decrypt the email for viewing.

Images