Cryptographic device, energy control method, security system and storage medium

Abstract

The invention provides a password device, an energy control method, a security system and a storage medium, and relates to the technical field of information security. The password device comprises an energy management module and a password processing module. The energy management module comprises a main control module and a charging and discharging module; the main control module is connected with the charging and discharging module, and the charging and discharging module is used for charging or discharging; the main control module is connected with the password processing module; the password processing module is used for receiving external input data and starting password processing operation; and the main control module is used for controlling the charging and discharging module to charge or discharge after monitoring that the password processing module starts the password processing operation. According to the password equipment provided by the method, the charging or discharging operation can be immediately controlled to be executed after the password processing operation is monitored, so that the energy fluctuation generated in the password processing operation process is interfered and covered by utilizing the energy fluctuation generated by the charging or discharging operation, the safety of the password processing operation is improved, and the safety of the password processing operation is improved. And the data security is improved.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to a cryptographic device, an energy control method, a security system and a storage medium. Background Art

[0002] In modern electronic devices, encryption technology is the key to protecting information security. Especially in cryptographic cards that carry sensitive information, such as payment cards and security authentication cards, the security of the encryption process is crucial. When cryptographic cards execute cryptographic algorithms, energy fluctuations will occur, which can be detected by malicious attackers through side channel attacks, thereby inferring the encryption and decryption process or key information, increasing the risk of information leakage.

[0003] In the prior art, the above problems are usually solved from the software level, for example, by reducing the risk of information leakage through algorithm optimization or data masking. However, these methods cannot completely prevent energy fluctuations from being maliciously exploited, and therefore the effect is not ideal. Summary of the invention

[0004] The purpose of this application is to provide a cryptographic device, an energy control method, a security system and a storage medium to address the deficiencies in the above-mentioned prior art, so that the energy fluctuations generated by the charging and discharging technology during the cryptographic operation can interfere with the energy fluctuations during the cryptographic operation, thereby preventing the energy fluctuations in the cryptographic operation from being maliciously detected and used, and improving the security of the cryptographic operation.

[0005] To achieve the above purpose, the technical solution adopted in the embodiment of the present application is as follows: In a first aspect, an embodiment of the present application provides a cryptographic device, including: an energy management module and a cryptographic processing module; The energy management module includes: a main control module and a charge and discharge module; the main control module is connected to the charge and discharge module, and the charge and discharge module is used for charging or discharging; The main control module is connected to the password processing module; The password processing module is used to receive external input data and start the password processing operation; The main control module is used to control the charging and discharging module to charge or discharge after monitoring that the password processing module starts the password processing operation.

[0006] Optionally, the cryptographic device further comprises: a status register; the status register is used to indicate the status of the current cryptographic processing operation of the cryptographic processing module; the main control module is also connected to the status register; The main control module is specifically used to monitor whether the password processing module starts the password processing operation by reading the value of the status register.

[0007] Optionally, the energy management module further includes: a power battery; the power battery is connected to the main control module; The main control module is used to control the charging and discharging module to charge or discharge the power battery according to the power information of the power battery after monitoring that the password processing module starts the password processing operation.

[0008] Optionally, the charging and discharging module includes: a power management chip and an oscillation circuit; the power management chip and the oscillation circuit are both connected to the main control module; the power battery is respectively connected to the oscillation circuit, the power management chip and the main control module; The main control module is specifically used to determine charging or discharging according to the power information of the power battery after monitoring that the cryptographic processing module starts the cryptographic processing operation, and when charging is determined, control the power management chip to charge the power battery, and when discharging is determined, control the oscillation circuit to discharge the power battery.

[0009] Optionally, the main control module is specifically configured to determine charging when the power information of the power battery is less than a first preset power.

[0010] Optionally, the main control module is specifically configured to determine discharge when the power information of the power battery reaches a second preset power.

[0011] Optionally, the main control module is specifically used to control the power management chip to charge the power battery according to a preset fluctuating current.

[0012] Optionally, the main control module is further used to control the energy management module to enter a standby mode after monitoring that the cryptographic processing operation of the cryptographic processing module is completed.

[0013] In a second aspect, an embodiment of the present application further provides an energy control method, which is applied to a main control module in the cryptographic device described in the first aspect; the method comprises: Monitoring the password processing module to initiate the password processing operation; After monitoring that the cryptographic processing module starts the cryptographic processing operation, the charging and discharging module in the energy management module is controlled to charge or discharge.

[0014] In a third aspect, an embodiment of the present application provides a security system, comprising the cryptographic device and an electronic device described in the first aspect; the cryptographic device is integrated in the electronic device, or the electronic device is connected to the cryptographic device; The cryptographic device is used to execute the energy control method described in the second aspect to implement cryptographic processing operations on data in the electronic device.

[0015] In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the energy control method provided in the second aspect is executed.

[0016] The beneficial effects of this application are: The present application provides a cryptographic device, an energy control method, a security system and a storage medium. The cryptographic device includes: an energy management module and a cryptographic processing module; the energy management module includes: a main control module and a charging and discharging module; the main control module is connected to the charging and discharging module, and the charging and discharging module is used for charging or discharging; the main control module is connected to the cryptographic processing module; the cryptographic processing module is used to receive external input data and start the cryptographic processing operation; the main control module is used to control the charging and discharging module to charge or discharge after detecting that the cryptographic processing module starts the cryptographic processing operation. The cryptographic device provided by the present method deploys an energy management module in the cryptographic device, and the main control module in the energy management module is connected to the cryptographic processing module in the cryptographic device, so that the main control module can monitor the cryptographic processing operation of the cryptographic processing module, and after monitoring that the cryptographic processing module starts the cryptographic processing operation, immediately control the charging and discharging module in the energy management module to perform charging or discharging operations, thereby utilizing the energy fluctuations generated by the charging or discharging operations to interfere with and mask the energy fluctuations generated during the cryptographic processing operation, so as to prevent the energy fluctuations generated during the cryptographic processing operation from being easily detected and obtained, and effectively prevent malicious attackers from inferring the cryptographic processing operation process or key information by detecting energy fluctuations, thereby improving the security of the cryptographic processing operation and enhancing data security. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] In order to more clearly illustrate the technical solutions of the embodiments of the present application, the drawings required for use in the embodiments will be briefly introduced below. It should be understood that the following drawings only show certain embodiments of the present application and therefore should not be regarded as limiting the scope. For ordinary technicians in this field, other related drawings can be obtained based on these drawings without paying creative work.

[0018] Figure 1 A schematic diagram of the structure of a cryptographic device provided in an embodiment of the present application; Figure 2 A schematic diagram of the structure of another cryptographic device provided in an embodiment of the present application; Figure 3 A schematic diagram of the structure of another cryptographic device provided in an embodiment of the present application; Figure 4 A schematic diagram of a flow chart of an energy control method provided in an embodiment of the present application; Figure 5A schematic diagram of the architecture of a security system provided in an embodiment of the present application; Figure 6 A schematic diagram of the structure of the main control module provided in an embodiment of the present application. DETAILED DESCRIPTION

[0019] To make the purpose, technical scheme and advantages of the embodiments of the present application clearer, the technical scheme in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. It should be understood that the drawings in the present application only serve the purpose of explanation and description and are not used to limit the scope of protection of the present application. In addition, it should be understood that the schematic drawings are not drawn in real proportion. The flowchart used in this application shows the operations implemented according to some embodiments of the present application. It should be understood that the operations of the flowchart can be implemented out of sequence, and the steps without logical context can be reversed in order or implemented simultaneously. In addition, those skilled in the art can add one or more other operations to the flowchart under the guidance of the content of the present application, or remove one or more operations from the flowchart.

[0020] In addition, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. The components of the embodiments of the present application described and shown in the drawings here can be arranged and designed in various configurations. Therefore, the following detailed description of the embodiments of the present application provided in the drawings is not intended to limit the scope of the application claimed for protection, but merely represents the selected embodiments of the present application. Based on the embodiments of the present application, all other embodiments obtained by those skilled in the art without making creative work belong to the scope of protection of the present application.

[0021] It should be noted that the term "comprising" will be used in the embodiments of the present application to indicate the existence of the features declared thereafter, but does not exclude the addition of other features.

[0022] The password card is a basic password device that can be applied to various password security application systems and provide high-speed, multi-task parallel processing of password operations. It can meet the requirements of digital signature and data encryption of application system data and ensure the confidentiality, integrity and validity of transmitted information. At the same time, the password card also provides a safe and complete key management mechanism to ensure the safe storage and use of keys.

[0023] The password card provides security protection by generating, encrypting, storing, verifying and updating passwords. It uses a random number generator to generate complex passwords and encrypts the passwords through encryption technology (such as symmetric encryption algorithm AES and asymmetric encryption algorithm RSA). The encrypted password is stored in the chip of the password card and can only be decrypted and read with the correct key. In addition, the password card can also be configured with restrictions such as time, location and terminal device to further improve security.

[0024] In modern electronic devices, encryption technology is the key to protecting information security. Especially in cryptographic cards that carry sensitive information, such as payment cards and security authentication cards, the security of the encryption process is crucial. When these devices execute encryption algorithms, energy fluctuations will be generated, which can be detected by malicious attackers through side channel attacks to infer the encryption process or key information, increasing the risk of information leakage.

[0025] Current solutions are mainly focused on the software level, including algorithm optimization and data masking. However, these methods have limited application effects at the hardware level and cannot completely prevent energy fluctuations from being maliciously exploited. In addition, existing charging technologies generally ignore the control and utilization of energy fluctuations during the encryption process, lacking solutions that can both meet energy requirements and enhance confidentiality.

[0026] When cryptographic cards perform encryption operations, their energy consumption patterns vary depending on the complexity of the encrypted data and the different algorithms. These energy fluctuations may be observed by external parties and then used maliciously to infer encryption keys or details of the encryption process. Therefore, a new technical approach is needed to mask these energy fluctuations through energy management and interference at the hardware level.

[0027] Based on this, the present solution provides a cryptographic device. By configuring an energy management module in the cryptographic device, the cryptographic processing operation of the cryptographic device can be monitored through the energy management module. After monitoring that the cryptographic device starts the cryptographic processing operation, the charging and discharging module in the energy management module is triggered to perform charging and discharging operations, so that the energy generated by the charging and discharging operations interferes with and masks the energy generated by the cryptographic processing operations, thereby reducing the probability of energy fluctuations in the cryptographic processing operation being obtained and utilized, and improving the security of cryptographic processing.

[0028] Figure 1 A schematic diagram of the structure of a password device provided in an embodiment of the present application; the password device may be a password card; Figure 1 As shown, the cryptographic device may include: an energy management module and a cryptographic processing module; the energy management module includes: a main control module and a charge and discharge module; the main control module is connected to the charge and discharge module, and the charge and discharge module is used for charging or discharging.

[0029] The cryptographic processing module may be a security chip, in which relevant cryptographic algorithms may be deployed to encrypt, decrypt, sign, and verify the user's sensitive data to ensure the security and privacy of the data.

[0030] The charging and discharging module can perform charging or discharging operations according to the instructions issued by the main control module. At a time, only one of the charging and discharging operations can be performed, that is, at the same time, the charging and discharging module can only perform charging operations or only perform discharging operations. The specific execution of charging operations or discharging operations can be controlled by the main control module.

[0031] The main control module is connected to the password processing module; the password processing module is used to receive external input data and start the password processing operation; the main control module is used to control the charge and discharge module to charge or discharge after monitoring that the password processing module starts the password processing operation.

[0032] In the process of using the password device, the password device needs to be started first to activate the energy management module and the password processing module in the password device. Optionally, when the user initiates a data processing request, the password processing module can respond to the data processing request and start the password processing operation to perform password processing on the data initiated by the user. Among them, the data processing request initiated by the user can be a login request, a data transmission request, etc., and the password processing module can encrypt, decrypt, sign, and verify the user's important data during the user's login request or data transmission request, etc., by starting the password processing operation, so as to ensure the security of the data.

[0033] The cryptographic processing module will generate energy fluctuations when performing cryptographic processing operations, among which encryption, decryption, signing, verification and other processes will all generate energy fluctuations.

[0034] After the main control module detects that the password processing module starts the password processing operation, it can control the charging and discharging module to charge or discharge. Energy fluctuations will also be generated during the charging or discharging process, so the energy fluctuations generated by the charging and discharging process can interfere with and consume the energy fluctuations generated during the password processing operation, thereby effectively preventing the energy fluctuations generated by the password processing module in the password device from being detected by malicious attacks when performing the password processing operation, thereby improving the security and confidentiality of the password device during the password processing operation.

[0035] That is to say, this method triggers the parallel execution of charging and discharging operations during the process of the cryptographic device performing cryptographic processing operations, so as to interfere with and mask the energy fluctuations generated by the cryptographic processing operations through the energy fluctuations generated by the charging and discharging operations, thereby preventing the energy fluctuations generated during the cryptographic processing operations from being easily detected and obtained.

[0036] In summary, the cryptographic device provided in this embodiment includes: an energy management module and a cryptographic processing module; the energy management module includes: a main control module and a charging and discharging module; the main control module is connected to the charging and discharging module, and the charging and discharging module is used for charging or discharging; the main control module is connected to the cryptographic processing module; the cryptographic processing module is used to receive external input data and start the cryptographic processing operation; the main control module is used to control the charging and discharging module to charge or discharge after monitoring that the cryptographic processing module starts the cryptographic processing operation. The cryptographic device provided by this method deploys an energy management module in the cryptographic device, and the main control module in the energy management module is connected to the cryptographic processing module in the cryptographic device, so that the main control module can monitor the cryptographic processing operation of the cryptographic processing module, and immediately control the charging and discharging module in the energy management module to charge or discharge after monitoring that the cryptographic processing module starts the cryptographic processing operation, so as to use the energy fluctuations generated by the charging or discharging operation to interfere with and cover up the energy fluctuations generated in the cryptographic processing operation process, so as to prevent the energy fluctuations generated in the cryptographic processing operation process from being easily detected and obtained, and effectively prevent malicious attackers from inferring the cryptographic processing operation process or key information by detecting energy fluctuations, thereby improving the security of the cryptographic processing operation and improving data security.

[0037] Figure 2 A schematic diagram of the structure of another cryptographic device provided in an embodiment of the present application; optionally, as Figure 2 As shown, the cryptographic device may also include: a status register; the status register is used to indicate the status of the current cryptographic processing operation of the cryptographic processing module; and the main control module is also connected to the status register.

[0038] In some embodiments, the cryptographic device may further include: a status register; the status register is used to indicate the status of the current cryptographic processing operation, such as: starting encryption, encrypting, encryption completed, error, decrypting, etc. Different values ​​of the status register are used to represent different states, such as: 1 represents starting encryption, 2 represents encrypting, etc.

[0039] The main control module is specifically used to monitor whether the password processing module starts the password processing operation by reading the value of the status register.

[0040] The main control module can monitor whether the password processing module starts the password processing operation by reading the current value of the status register. After monitoring that the password processing operation is started, the charging and discharging module is immediately controlled to charge or discharge.

[0041] Optionally, the main control module may send a data access request to the cryptographic processing module to request access to the value of the status register in the cryptographic processing module, and the cryptographic processing module may respond to the request and return the current value of the status register to the main control module in real time.

[0042] Optionally, the main control module may periodically read the status register of the cryptographic device by polling to grasp the progress and status of the cryptographic processing operation.

[0043] It should be noted that the main control module will continue to read the current value of the status register to control the charging and discharging module to charge or discharge during the entire cryptographic processing operation. The end condition of charging or discharging is that the cryptographic processing module ends the cryptographic processing operation. In other words, during the startup and execution of the cryptographic processing operation, the main control module can control the charging and discharging module to charge or discharge to ensure the security of the entire cryptographic processing operation process, and when the cryptographic processing operation is completed, the charging or discharging can be stopped. By controlling the energy fluctuations through charging and discharging technology during the cryptographic processing operation, both energy requirements and confidentiality can be met.

[0044] In other embodiments, the main control module may also perform data transmission and command control with the password processing module through a communication interface (such as SPI (Serial Peripheral Interface, serial peripheral interface), I2C (Inter-Integrated Circuit, serial communication protocol), etc.), so as to monitor and obtain the command of the password processing module to start the password processing operation through the communication interface.

[0045] Continue to refer Figure 2 The energy management module may also include: a power battery; the power battery is connected to the charging and discharging module; the main control module is used to control the charging and discharging module to charge or discharge the power battery according to the power information of the power battery after monitoring that the password processing module starts the password processing operation.

[0046] The charge and discharge module can detect the power information of the power supply battery and feed it back to the main control module, so that the main control module can control charging or discharging according to the power information of the power supply battery.

[0047] Typically, the cryptographic device may also include a power supply for supplying power to a cryptographic processing module, an energy management module, a status register, etc. in the cryptographic device.

[0048] In this embodiment, the power battery in the energy management module is different from the power supply in the cryptographic device, and the power battery in the energy management module is only used to supply power to the circuit unit that performs discharge in the charge and discharge module in the energy management module.

[0049] When the main control module controls the charge and discharge module to charge or discharge, it may specifically control the charge and discharge module to charge the power battery, or control the charge and discharge module to discharge the power battery.

[0050] Figure 3A schematic diagram of the structure of another cryptographic device provided in an embodiment of the present application; optionally, as Figure 3 As shown, the charge and discharge module may include: a power management chip and an oscillation circuit; the power management chip and the oscillation circuit are both connected to the main control module; and the power battery is respectively connected to the oscillation circuit and the power management chip.

[0051] The power management chip is used to perform charging operations under the control of the main control module, and the oscillation circuit can perform discharging operations under the control of the main control module.

[0052] The main control module is specifically used to determine charging or discharging according to the power information of the power battery after monitoring that the password processing module starts the password processing operation, and when charging is determined, control the power management chip to charge the power battery, and when discharging is determined, control the oscillation circuit to discharge the power battery.

[0053] The power management chip is an integrated circuit that plays a vital role in electronic devices and ensures that the device can obtain a stable and reliable power supply under various working conditions. It monitors and controls the power input and output to achieve functions such as voltage regulation, current management, and battery protection, thereby improving the energy efficiency of the device, extending the battery life, and ensuring the safe and stable operation of the device. In this embodiment, the power management chip is mainly used to charge the power battery.

[0054] Optionally, the oscillation circuit may be an oscillator, such as a Colpitts oscillator, also known as a Colpitts oscillator, a capacitor three-point oscillator or a capacitor feedback oscillator, which utilizes a combination of capacitor and inductor to determine the oscillation frequency and plays an important role in the fields of electronic communications and signal processing.

[0055] In one feasible method, when the main control module detects that the cryptographic processing module has started a cryptographic processing operation, it can first determine whether charging or discharging is currently being performed based on the power information of the power battery; when it is determined that charging is currently being performed, the power management chip is controlled to charge the power battery; and when it is determined that discharging is currently being performed, the oscillation circuit is controlled to discharge the power battery.

[0056] Discharging the power battery using an oscillation circuit can generate a stable oscillation signal to mask energy fluctuations in cryptographic processing operations.

[0057] Among them, the parameters of the oscillation circuit can be determined according to the following formula:

[0058] Where: f is the oscillation frequency; L is the inductance; C is the equivalent capacitance; The equivalent capacitance can be expressed as:

[0059] The inductance calculation formula is as follows:

[0060] The impedance calculation formula is as follows:

[0061] Optionally, the power management chip can monitor the power information of the power battery and feed the power information of the power battery back to the main control module in real time, so that the main control module determines whether to charge or discharge the power battery according to the power information of the power battery.

[0062] Optionally, the main control module is specifically configured to determine charging when the power information of the power battery is less than a first preset power.

[0063] In one embodiment, when the main control module determines that the power information of the power battery is less than the first preset power, it can be determined that the power battery is currently insufficient, and it can be determined that a charging operation needs to be performed to charge the power battery. When the power information of the power battery is less than the first preset power, it can be considered that the power battery is insufficient. The first preset power can be 10% or 5% of the full power of the power battery, which can be set according to demand.

[0064] Optionally, the main control module is specifically configured to determine discharge when the power information of the power battery reaches a second preset power.

[0065] In another embodiment, when the main control module determines that the power information of the power battery reaches the second preset power, it can be determined that the power battery currently has sufficient power, and it can be determined that a discharge operation needs to be performed to discharge the power battery. When the power information of the power battery reaches the second preset power, it can be considered that the power battery has sufficient power. The second preset power can be 90% or 95% of the full power of the power battery, etc., which can be set according to demand.

[0066] Optionally, the main control module is specifically used to control the power management chip to charge the power battery according to a preset fluctuating current.

[0067] In some embodiments, when the main control module controls the power management chip to charge the power battery, it can control the charging current of the power management chip to achieve random fluctuations in the charging current, thereby increasing the randomness and unpredictability of the energy fluctuations generated during the charging process, so as to enhance the ability to interfere with the energy fluctuations generated during the cryptographic processing operation.

[0068] Optionally, the main control module is also used to control the energy management module to enter the standby mode after monitoring that the password processing operation of the password processing module is completed.

[0069] In some embodiments, when the main control module detects that the cryptographic processing module has completed its cryptographic processing operation, it can control the energy management module to enter a standby mode or a power saving mode to wait for waking up again when the cryptographic processing operation is started next time.

[0070] After the password processing operation is completed, the energy fluctuation generated by the password processing operation will also disappear and will not be detected maliciously. At this time, controlling the energy management module to enter the standby mode can save resources and power consumption. When the password processing module starts the password processing operation again, the energy management module is awakened to continue energy interference according to the above method steps.

[0071] In summary, the cryptographic device provided in this embodiment includes: an energy management module and a cryptographic processing module; the energy management module includes: a main control module and a charging and discharging module; the main control module is connected to the charging and discharging module, and the charging and discharging module is used for charging or discharging; the main control module is connected to the cryptographic processing module; the cryptographic processing module is used to receive external input data and start the cryptographic processing operation; the main control module is used to control the charging and discharging module to charge or discharge after monitoring that the cryptographic processing module starts the cryptographic processing operation. The cryptographic device provided by this method deploys an energy management module in the cryptographic device, and the main control module in the energy management module is connected to the cryptographic processing module in the cryptographic device, so that the main control module can monitor the cryptographic processing operation of the cryptographic processing module, and immediately control the charging and discharging module in the energy management module to charge or discharge after monitoring that the cryptographic processing module starts the cryptographic processing operation, so as to use the energy fluctuations generated by the charging or discharging operation to interfere with and cover up the energy fluctuations generated in the cryptographic processing operation process, so as to prevent the energy fluctuations generated in the cryptographic processing operation process from being easily detected and obtained, and effectively prevent malicious attackers from inferring the cryptographic processing operation process or key information by detecting energy fluctuations, thereby improving the security of the cryptographic processing operation and improving data security.

[0072] Next, the related methods executed by the main control module in the above cryptographic device are described.

[0073] Figure 4 A schematic flow chart of an energy control method provided in an embodiment of the present application. The execution subject of the method may be a main control module in the cryptographic device provided above. The main control module may be an MCU (Microcontroller Unit). Optionally, Figure 4 As shown, the method may include: S101. Monitoring the password processing module to start the password processing operation.

[0074] In some embodiments, the main control module can monitor the cryptographic processing module to start the cryptographic processing operation. The main control module can send a data monitoring request to the cryptographic processing module, and the cryptographic processing module responds to the data monitoring request and returns response data to the main control module after starting the cryptographic processing operation to notify the main control module that the cryptographic processing operation has been started.

[0075] S102: After monitoring that the password processing module starts the password processing operation, control the charge and discharge module in the energy management module to charge or discharge.

[0076] After receiving the instruction to start the password processing operation returned by the password processing module, the main control module can control the charge and discharge module in the energy processing module to charge or discharge.

[0077] Thus, the energy fluctuations generated during the charging and discharging process are used to interfere with the energy fluctuations generated during the cryptographic processing operation, thereby preventing the energy fluctuations during the cryptographic processing operation from being easily detected and acquired.

[0078] Optionally, the main control module may monitor whether the password processing module starts the password processing operation by reading the value of the status register.

[0079] Optionally, after the main control module detects that the password processing module starts the password processing operation, the main control module controls the charging and discharging module to charge or discharge the power battery according to the power information of the power battery.

[0080] Optionally, after monitoring that the cryptographic processing module has started the cryptographic processing operation, the main control module determines whether to charge or discharge based on the power information of the power battery, and when determining to charge, controls the power management chip to charge the power battery, and when determining to discharge, controls the oscillation circuit to discharge the power battery.

[0081] Optionally, the main control module determines charging when the power information of the power battery is less than a first preset power; and determines discharging when the power information of the power battery reaches a second preset power.

[0082] Optionally, after monitoring that the password processing operation of the password processing module is completed, the main control module controls the energy management module to enter the standby mode.

[0083] It is worth noting that the specific implementation methods and corresponding effects of the above-mentioned method steps have been described in detail in the relevant embodiments of the above-mentioned cryptographic device, and will not be repeated here.

[0084] Figure 5 A schematic diagram of the architecture of a security system provided in an embodiment of the present application is shown in FIG. Figure 5 As shown, the security system includes: a cryptographic device and an electronic device; the cryptographic device is integrated into the electronic device, or the electronic device is connected to the cryptographic device.

[0085] The cryptographic device is used to execute the above energy control method to implement cryptographic processing operations on data in the electronic device.

[0086] Optionally, the cryptographic device can be integrated into certain electronic devices, such as mobile phones, PDAs (Personal Digital Assistants), GPS (Global Positioning System) and other smart mobile electronic devices, as a dedicated cryptographic tool for strong identity authentication and data encryption protection.

[0087] In some high-end electronic devices, password cards may be included as standard or as an optional accessory to provide additional security.

[0088] Cryptographic devices and electronic devices can communicate and work together through specific interfaces and protocols. For example, in a smartphone, a cryptographic card can connect and exchange data with the phone through a USB (Universal Serial Bus) interface or NFC (Near Field Communication) technology. After the connection, the cryptographic card can provide users with security services such as encrypted calls, encrypted text messages, and secure payments. At the same time, the cryptographic card can also be integrated with the phone's security chip or operating system to achieve more efficient and convenient security management.

[0089] Figure 6 A schematic diagram of the structure of the main control module provided in the embodiment of the present application is shown in FIG. Figure 6 As shown, the main control module may include: a processor 801 and a storage medium 802 .

[0090] The storage medium 802 is used to store programs, and the processor 801 calls the programs stored in the storage medium 802 to execute the above method embodiment. The specific implementation method and technical effect are similar and will not be repeated here.

[0091] Among them, the storage medium 802 stores program code, and when the program code is executed by the processor 801, the processor 801 executes various steps in the energy control method according to various exemplary embodiments of the present application described in the above "Exemplary Method" section of this specification.

[0092] The processor 801 may be a general-purpose processor, such as a central processing unit (CPU), a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components, and may implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of the present application. A general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application may be directly embodied as being executed by a hardware processor, or may be executed by a combination of hardware and software modules in the processor.

[0093] The storage medium 802, as a non-volatile computer-readable storage medium, can be used to store non-volatile software programs, non-volatile computer executable programs and modules. The storage medium may include at least one type of storage medium, for example, a flash memory, a hard disk, a multimedia card, a card-type storage medium, a random access storage medium (Random Access Memory, RAM), a static random access storage medium (Static Random Access Memory, SRAM), a programmable read-only storage medium (Programmable Read Only Memory, PROM), a read-only storage medium (Read Only Memory, ROM), an electrically erasable programmable read-only storage medium (Electrically Erasable Programmable Read-Only Memory, EEPROM), a magnetic storage medium, a disk, an optical disk, and the like. The storage medium is any other medium that can be used to carry or store the desired program code in the form of an instruction or data structure and can be accessed by a computer, but is not limited thereto. The storage medium 802 in the embodiment of the present application can also be a circuit or any other device that can realize a storage function, for storing program instructions and / or data.

[0094] Optionally, the present application also provides a program product, such as a computer-readable storage medium, including a program, which is used to execute the above method embodiment when executed by a processor.

[0095] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0096] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0097] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of hardware plus software functional units.

[0098] The above-mentioned integrated unit implemented in the form of a software functional unit can be stored in a computer-readable storage medium. The above-mentioned software functional unit is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) or a processor (English: processor) to perform some steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only storage medium (English: Read-Only Memory, referred to as: ROM), random access storage medium (English: Random Access Memory, referred to as: RAM), disk or optical disk and other media that can store program codes.

Claims

1. A cryptographic device, characterized in that: include: Energy management module and password processing module; The energy management module includes: a main control module and a charging and discharging module; The main control module is connected to the charging and discharging module, and the charging and discharging module is used for charging or discharging; The main control module is connected to the password processing module; The password processing module is used to receive external input data and start the password processing operation; The main control module is used to control the charging and discharging module to charge or discharge after monitoring that the password processing module starts the password processing operation.

2. The cryptographic device according to claim 1, characterized in that: The cryptographic device further comprises: a status register; the status register is used to indicate the status of the current cryptographic processing operation of the cryptographic processing module; the main control module is also connected to the status register; The main control module is specifically used to monitor whether the password processing module starts the password processing operation by reading the value of the status register.

3. The cryptographic device according to claim 1, characterized in that: The energy management module further includes: a power battery; the power battery is connected to the charging and discharging module; The main control module is used to control the charging and discharging module to charge or discharge the power battery according to the power information of the power battery after monitoring that the password processing module starts the password processing operation.

4. The cryptographic device according to claim 3, characterized in that: The charging and discharging module comprises: a power management chip and an oscillation circuit; the power management chip and the oscillation circuit are both connected to the main control module; the power battery is respectively connected to the oscillation circuit and the power management chip; The main control module is specifically used to determine charging or discharging according to the power information of the power battery after monitoring that the cryptographic processing module starts the cryptographic processing operation, and when charging is determined, control the power management chip to charge the power battery, and when discharging is determined, control the oscillation circuit to discharge the power battery.

5. The cryptographic device according to claim 4, characterized in that: The main control module is specifically used to determine charging when the power information of the power battery is less than a first preset power.

6. The cryptographic device according to claim 4, characterized in that: The main control module is specifically used to determine discharge when the power information of the power battery reaches a second preset power.

7. The cryptographic device according to claim 4, characterized in that: The main control module is specifically used to control the power management chip to charge the power battery according to a preset fluctuating current.

8. The cryptographic device according to claim 1, characterized in that: The main control module is also used to control the energy management module to enter the standby mode after monitoring that the password processing operation of the password processing module is completed.

9. An energy control method, characterized in that: A main control module applied to a cryptographic device according to any one of claims 1 to 7; the method comprising: Monitoring the password processing module to initiate the password processing operation; After monitoring that the cryptographic processing module starts the cryptographic processing operation, the charging and discharging module in the energy management module is controlled to charge or discharge.

10. A security system, characterized in that: Comprising the cryptographic device and the electronic device according to any one of claims 1 to 8; the cryptographic device is integrated in the electronic device, or the electronic device is connected to the cryptographic device; The cryptographic device is used to execute the energy control method described in claim 9 to implement cryptographic processing operations on data in the electronic device.

11. A computer-readable storage medium, characterized in that: The storage medium stores a computer program, and the computer program is executed by a processor to implement the energy control method as claimed in claim 9.

Images