A key filling method, related equipment, medium and product

Abstract

The application discloses a key filling method, related equipment, medium and product; wherein the method comprises: receiving a first message sent by a filling platform; the first message comprises a terminal list to be filled and a number of keys to be filled for each terminal in the terminal list; sending a second message and / or a third message to the filling platform; the second message indicates a first terminal entering an initialization process; and the third message indicates a second terminal entering a key filling process.

Description

Technical Field

[0001] This invention relates to the field of communication technology, and in particular to a key filling method, related equipment, medium and product. Background Technology

[0002] With the rapid development of internet technology, the network security risks of information systems continue to increase. Employing quantum key distribution (QK) can improve the security of business systems. Based on the principles of quantum mechanics, QK utilizes the non-cloning and non-measurable properties of quantum states to achieve real-time encrypted communication and improve communication efficiency.

[0003] In related technologies, quantum keys are sent in batches from a quantum key service platform to a filling platform for filling. The filling platform can obtain the same full set of keys as the quantum key service platform, which cannot guarantee the security of the quantum key filling process. Summary of the Invention

[0004] This application provides a key filling method, related equipment, medium, and product.

[0005] The technical solution of this application embodiment is implemented as follows:

[0006] A key injection method, applied to a cryptographic service platform, the method comprising:

[0007] Receive a first message sent by the recharge platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0008] Send a second message and / or a third message to the filling platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0009] In the above scheme, before sending the second message and / or the third message to the filling platform, the following steps are included:

[0010] The first terminal that does not include the first key parameter and / or the second terminal that includes the first key parameter are identified in the terminal list.

[0011] In the above scheme, after determining that the first terminal in the terminal list does not include the first key parameter, the process includes:

[0012] Generate a second key parameter for the first terminal; the second message includes the second key parameter.

[0013] In the above scheme, after sending the second message to the filling platform, the following steps are included:

[0014] The system receives a sixth message from the recharge platform; the sixth message includes the first key parameter, the second key parameter, the third key parameter, and the number of keys to be recharged on the first terminal.

[0015] In the above scheme, after receiving the sixth message sent by the filling platform, the process includes:

[0016] Verify the third key parameter;

[0017] If the third key parameter is verified to be valid, the first key parameter is saved.

[0018] In the above scheme, after saving the first key parameter, the following steps are included:

[0019] Generate the first charging key for the first terminal;

[0020] Determine whether to update the fourth key parameter of the first terminal;

[0021] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0022] The first filling key is encrypted based on the updated fourth key parameter to obtain the encrypted first filling key;

[0023] Generate the fifth key parameter based on the updated fourth key parameter;

[0024] A seventh message is sent to the refilling platform; the seventh message includes the encrypted first refilling key, the encrypted fourth key parameter, and the fifth key parameter;

[0025] If not, the first filling key is encrypted based on the fourth key parameter to obtain an encrypted first filling key;

[0026] Generate the fifth key parameter based on the fourth key parameter;

[0027] Send an eighth message to the filling platform; the eighth message includes the encrypted first filling key and the fifth key parameter.

[0028] In the above scheme, after determining that the second terminal in the terminal list includes the first key parameter, the process includes:

[0029] Generate the second charging key for the second terminal;

[0030] Determine whether to update the fourth key parameter of the second terminal;

[0031] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0032] The second filling key is encrypted based on the updated fourth key parameters to obtain an encrypted second filling key;

[0033] A fifth key parameter is generated based on the updated fourth key parameter; the third message includes the encrypted second charging key, the encrypted fourth key parameter, and the fifth key parameter;

[0034] If not, the second filling key is encrypted based on the fourth key parameter to obtain an encrypted second filling key;

[0035] A fifth key parameter is generated based on the fourth key parameter; the third message includes the encrypted second injection key and the fifth key parameter.

[0036] The method in the above scheme further includes:

[0037] Set the first charge state of the first charge key and / or the second charge key and the second charge state.

[0038] A key filling method, applied to a filling platform, the method comprising:

[0039] Send a first message to the cryptographic service platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0040] The system receives a second message and / or a third message sent by the cryptographic service platform; the second message indicates that the first terminal is entering the initialization process; the third message indicates that the second terminal is entering the key filling process.

[0041] In the above scheme, after receiving the second message sent by the cryptographic service platform, the process includes:

[0042] A fourth message is sent to the first terminal; the fourth message includes the second key parameter.

[0043] In the above scheme, after sending the fourth message to the first terminal, the following steps are included:

[0044] Receive a fifth message sent by the first terminal; the fifth message includes a first key parameter, a second key parameter, and a third key parameter;

[0045] A sixth message is sent to the cryptographic service platform; the sixth message includes the first key parameter, the second key parameter, the third key parameter, and the number of keys to be recharged on the first terminal.

[0046] In the above scheme, after sending the sixth message to the cryptographic service platform, the following steps are included:

[0047] Receive a seventh message or an eighth message sent by the cryptographic service platform; the seventh message includes an encrypted first injection key, an encrypted fourth key parameter, and a fifth key parameter; the eighth message includes the encrypted first injection key and the fifth key parameter.

[0048] Send a ninth message to the first terminal; the ninth message includes the encrypted first charging key, the fifth key parameter and / or the encrypted fourth key parameter.

[0049] In the above scheme, after receiving the third message sent by the cryptographic service platform, the following steps are included:

[0050] Send a tenth message to the second terminal; the tenth message includes an encrypted second charging key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0051] A key filling method, applied to a terminal, the method comprising:

[0052] Receive a fourth message and / or a tenth message sent by the recharge platform; the fourth message includes a second key parameter; the tenth message includes an encrypted second recharge key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0053] In the above scheme, after receiving the fourth message sent by the filling platform, the process includes:

[0054] Generate the first key parameter and the third key parameter;

[0055] A fifth message is sent to the filling platform; the fifth message includes the first key parameter, the second key parameter, and the third key parameter.

[0056] In the above scheme, after sending the fifth message to the filling platform, the following steps are included:

[0057] Receive a ninth message sent by the refilling platform; the ninth message includes an encrypted first refilling key, a fifth key parameter, and / or an encrypted fourth key parameter;

[0058] If the ninth message includes the encrypted fourth key parameter, the encrypted fourth key parameter is decrypted to obtain the updated fourth key parameter;

[0059] Verify the fifth key parameter;

[0060] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the updated fourth key parameter to obtain the first injection key;

[0061] If the ninth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0062] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the fourth key parameter to obtain the first injection key;

[0063] Recharge the first recharge key.

[0064] In the above scheme, after receiving the tenth message sent by the refilling platform, the process includes:

[0065] If the tenth message includes the encrypted fourth key parameter, the encrypted fourth key parameter is decrypted to obtain the updated fourth key parameter;

[0066] Verify the fifth key parameter;

[0067] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the updated fourth key parameter to obtain the second injection key;

[0068] If the tenth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0069] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the fourth key parameter to obtain the second injection key;

[0070] Recharge the second recharge key.

[0071] A key filling device, applied to a cryptographic service platform, the device comprising:

[0072] Receive a first message sent by the recharge platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0073] Send a second message and / or a third message to the filling platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0074] A key filling device, applied to a filling platform, the device comprising:

[0075] Send a first message to the cryptographic service platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0076] The system receives a second message and / or a third message sent by the cryptographic service platform; the second message indicates that the first terminal is entering the initialization process; the third message indicates that the second terminal is entering the key filling process.

[0077] A key filling device, applied to a terminal, the device comprising:

[0078] Receive a fourth message and / or a tenth message sent by the recharge platform; the fourth message includes a second key parameter; the tenth message includes an encrypted second recharge key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0079] A cryptographic service platform includes a first communication interface and a first processor; wherein,

[0080] The first communication interface is used to receive a first message sent by the recharge platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0081] Send a second message and / or a third message to the filling platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0082] A filling platform includes a second communication interface and a second processor; wherein,

[0083] The second communication interface is used to send a first message to the cryptographic service platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0084] The system receives a second message and / or a third message sent by the cryptographic service platform; the second message indicates that the first terminal is entering the initialization process; the third message indicates that the second terminal is entering the key filling process.

[0085] A terminal includes a third communication interface and a third processor; wherein,

[0086] The third communication interface is used to receive a fourth message and / or a tenth message sent by the refilling platform; the fourth message includes a second key parameter; the tenth message includes an encrypted second refilling key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0087] A storage medium storing a computer program, characterized in that, when the computer program is executed by a processor, it implements the steps of any of the methods on the cryptographic service platform side, or the steps of any of the methods on the charging platform side, or the steps of any of the methods on the terminal side.

[0088] A computer product includes a computer program, characterized in that, when the computer program is executed by a processor, it implements the steps of any of the methods on the cryptographic service platform side, or the steps of any of the methods on the charging platform side, or the steps of any of the methods on the terminal side.

[0089] This invention provides a key injection method, related equipment, medium, and product; receiving a first message sent by an injection platform; the first message including a list of terminals to be injected and the number of keys to be injected for each terminal in the list; sending a second message and / or a third message to the injection platform; the second message indicating a first terminal entering the initialization process; the third message indicating a second terminal entering the key injection process. In other words, this application receives a first message sent by an injection platform through a cryptographic service platform, the first message including a list of terminals to be injected and the number of keys to be injected for each terminal in the list; the cryptographic service platform sends a second message and / or a third message to the injection platform, the second message indicating a first terminal entering the initialization process; the third message indicating a second terminal entering the key injection process; thereby achieving a dual separation of terminal access rights (injection platform) and key management rights (cryptographic service platform), preventing the injection platform from obtaining the injected quantum keys, and solving the problem in related technologies where the injection platform can obtain the same full set of keys as the quantum key service platform, thus failing to protect the security of the quantum key injection process. Attached Figure Description

[0090] Figure 1 A flowchart illustrating a key filling method provided in an embodiment of this application;

[0091] Figure 2 A key relationship diagram provided for an embodiment of this application;

[0092] Figure 3 A schematic diagram of a key filling preparation stage provided for an embodiment of this application;

[0093] Figure 4 A schematic diagram of a key filling stage provided for an embodiment of this application;

[0094] Figure 5 A flowchart illustrating another key filling method provided in an embodiment of this application;

[0095] Figure 6 A flowchart illustrating the third key filling method provided in this application embodiment;

[0096] Figure 7 This is a schematic diagram of a key filling device provided in an embodiment of this application;

[0097] Figure 8This is a schematic diagram of another key filling device provided in an embodiment of this application;

[0098] Figure 9 This is a schematic diagram of the structure of the third key filling device provided in the embodiments of this application;

[0099] Figure 10 This is a schematic diagram of the structure of the cryptographic service platform provided in the embodiments of this application;

[0100] Figure 11 This is a schematic diagram of the filling platform provided in an embodiment of this application;

[0101] Figure 12 This is a schematic diagram of the terminal structure provided in an embodiment of this application. Detailed Implementation

[0102] To make the objectives, technical solutions, and advantages of this application clearer, the technical solutions of this application are further described in detail below with reference to the accompanying drawings and embodiments. The described embodiments should not be regarded as limitations on this application. All other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0103] In the following description, references are made to “some embodiments,” which describe a subset of all possible embodiments. However, it is understood that “some embodiments” may be the same subset or different subsets of all possible embodiments and may be combined with each other without conflict.

[0104] The terms "first / second / third" used in this application are merely to distinguish similar objects and do not represent a specific ordering of objects. It is understood that "first / second / third" may be interchanged in a specific order or sequence where permitted, so that the embodiments of this application described herein can be implemented in an order other than that illustrated or described herein.

[0105] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as commonly understood by one of ordinary skill in the art to which this application belongs. The terminology used herein is for the purpose of describing embodiments of this application only and is not intended to limit this application.

[0106] In related technologies, quantum keys on user equipment (UE) are typically injected offline into the UE's secure area in a single offline process to construct a quantum key resource pool. Service applications then obtain and use quantum keys from this resource pool. The secure area can be a Subscriber Identity Module (SIM) card, a Universal Subscriber Identity Module (USIM) card, a Super SIM card, a Secure Digital (SD) card, or similar cards on the terminal.

[0107] To ensure the security of quantum keys, they are generally managed in layers. Taking the USIM card as the security zone of the UE as an example, the quantum key service platform is mainly responsible for interfacing with the quantum random number generator and quantum key distribution (QKD) nodes to generate, manage, and distribute quantum keys. The refilling platform receives refilling tasks from the quantum key service platform in one go or in batches, and refills the quantum keys into the quantum key service card application of the USIM card to complete the quantum key refilling. The card vendor (the manufacturer of the USIM card) is mainly responsible for making blank cards and writing the card application and personalized data.

[0108] The embodiments of this application provide a key filling method applied to a cryptographic service platform, referring to... Figure 1 As shown, the method includes the following steps:

[0109] Step S101: Receive the first message sent by the recharge platform.

[0110] The first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the list.

[0111] It is understood that the cryptographic service platform can be understood as a quantum key service platform. The terminal may include a UE (User Equipment), and may also include a quantum secure terminal (QSE), that is, a secure terminal device that can provide quantum security services to upper-layer business applications based on quantum keys; this application does not limit this. This application uses a UE as an example for illustration, and the UE includes a USIM card.

[0112] The quantum key can be managed by the quantum key service card application on the USIM card. This application receives instructions and data from the refilling platform, stores the quantum key in the secure storage area of ​​the USIM card, and completes the quantum key refill. Before receiving the quantum key refill task, the refilling platform can send the quantum key service card application to the card vendor via a secure channel. After writing the card, the card vendor synchronizes the list of Security Element Identifiers (SEIDs) of the USIM card to both the refilling platform and the quantum key service platform via a secure channel.

[0113] refer to Figure 2 As shown, the quantum key service platform can generate an initial key encapsulation key KEK_i and a key encapsulation key KEK; KEK is used to protect QK, and KEK_i is used to protect the legitimacy of KEK. The quantum key service card application can automatically generate a public-private key pair (SKc, PKc) during initialization, which is used to protect the key encapsulation key KEK. The card vendor possesses its own unique public-private key pair (SKm, PKm) used to protect KEK_i; the quantum key service platform can obtain the card vendor's public key PKm from secure channels.

[0114] In practical applications, refer to Figure 3 As shown, before sending KEK_i to the card vendor, the quantum key distribution platform can encrypt KEK_i using an encryption algorithm to obtain EKEK_i, where EKEK_i = Epub(PKm, KEK_i). The quantum key distribution platform then sends EKEK_i to the card vendor through a secure channel. The card vendor can decrypt EKEK_i using a decryption algorithm to obtain KEK_i; KEK_i = Dpub(SKm, EKEK_i).

[0115] After receiving a quantum key injection task, the injection platform can prepare a QK requirement list {SEID, QKN}_i, where i = 1, ..., n, and QKN is the number of injection keys corresponding to each SEID. The injection platform then sends an injection key retrieval request to the quantum key service platform, containing {SEID, QKN}_i. This first message can be understood as the injection key retrieval request; {SEID, QKN}_i includes the identifier of each terminal to be injected and the number of keys to be injected for that terminal.

[0116] Step S102: Send a second message and / or a third message to the filling platform.

[0117] The second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0118] Understandable, for reference Figure 3As shown, for each pair (SEID, QKN)_i, the quantum key service platform can query the database to see if there is a public key PKc corresponding to the SEID, thus confirming whether the quantum key service card application on the USIM card has been initialized.

[0119] In practical applications, for uninitialized USIM cards used in quantum key distribution (QKD) applications, an initialization process is executed. The first terminal can be understood as the terminal corresponding to the uninitialized USIM card. The QKD platform generates a key parameter R_PKc, which can be a random number or a timestamp. After generating R_PKc, the QKD platform sends an initialization request to the refilling platform. The second message can be understood as the initialization request, which includes the SEID and R_PKc corresponding to the first terminal.

[0120] For USIM cards initialized using the quantum key service card application, a key charging process is executed. The second terminal can be understood as the terminal corresponding to the USIM card initialized using the quantum key service card application. After the quantum key service platform generates a quantum key for the second terminal, it can encrypt the quantum key based on KEK and then send a key retrieval response to the charging platform. The third message can be understood as the key retrieval response. The third message includes the SEID corresponding to the second terminal and the encrypted quantum key.

[0121] As can be seen from the above, in this embodiment, the cryptographic service platform receives a first message sent by the key-addressing platform. The first message includes a list of terminals to be added and the number of keys to be added to each terminal in the list. The cryptographic service platform sends a second message and / or a third message to the key-addressing platform. The second message indicates the first terminal to enter the initialization process, and the third message indicates the second terminal to enter the key-addressing process. This achieves a dual separation of terminal access rights (key-addressing platform) and key management rights (cryptographic service platform), preventing the key-addressing platform from obtaining the added quantum keys. This solves the problem in related technologies where the key-addressing platform can obtain the same full set of keys as the quantum key service platform, thus failing to protect the security of the quantum key-addressing process.

[0122] In some embodiments of this application, before sending the second and / or third message to the filling platform, the following steps are included:

[0123] Determine the first terminal that does not include the first key parameter and / or the second terminal that includes the first key parameter in the terminal list.

[0124] Understandably, the first key parameter can be understood as the public key PKc.

[0125] In practical applications, for each pair of (SEID, QKN)_i, the quantum key service platform can query the database to see if there is a public key PKc corresponding to the SEID, thus confirming whether the quantum key service card application on the USIM card has been initialized. The first terminal can be understood as the terminal corresponding to the USIM card whose quantum key service card application has not been initialized. The second terminal can be understood as the terminal corresponding to the USIM card whose quantum key service card application has been initialized.

[0126] In some embodiments of this application, after determining that a first terminal not included in the terminal list is a first terminal, the process includes:

[0127] Generate the second key parameters for the first terminal; the second message includes the second key parameters.

[0128] In practical applications, refer to Figure 4 As shown, the second key parameter can be understood as the R_PKc generated by the quantum key service platform. The R_PKc can be a random number or a timestamp. After generating the R_PKc, the quantum key service platform sends an initialization request to the charging platform. The second message can be understood as the initialization request, which includes the SEID and R_PKc corresponding to the first terminal.

[0129] After receiving the second message, the refilling platform sends a fourth message via SEID to the quantum key service card application on each first terminal, requesting the quantum key service card application to initialize. Upon receiving the fourth message, the quantum key service card application generates a public-private key pair (SKc, PKc) and a public key verification code PKc_MAC, where PKc_MAC = HMAC(KEK_i, PKc, SEID, R_PKc). It then sends a fifth message to the refilling platform, responding to the platform's initialization request. The fifth message may include SEID, R_PKc, PKc, and PKc_MAC.

[0130] After receiving the fifth message, the recharge platform sends a sixth message to the cryptographic service platform in response to the initialization request of the cryptographic service platform. The sixth message may include {SEID, QKN, R_PKc, PKc, PKc_MAC}_i, i = 1, ..., n.

[0131] In some embodiments of this application, after sending the second message to the filling platform, the process includes:

[0132] Receive the sixth message sent by the recharge platform; the sixth message includes the first key parameter, the second key parameter, the third key parameter, and the number of keys to be recharged on the first terminal.

[0133] In practical applications, refer to Figure 4As shown, after receiving the initialization response from the first terminal, the refilling platform returns an initialization response to the cryptographic service platform. The sixth message can be understood as the initialization response; the sixth message may include {SEID, QKN, R_PKc, PKc, PKc_MAC}_i, i = 1, ..., n. The first key parameter can be understood as PKc, the second key parameter as R_PKc, the third key parameter as PKc_MAC, and QKN as the number of keys to be refilled on the first terminal.

[0134] In some embodiments of this application, after receiving the sixth message sent by the filling platform, the process includes:

[0135] Verify the third key parameters;

[0136] If the third key parameter is verified to be valid, the first key parameter is saved.

[0137] In practical applications, refer to Figure 4 As shown, after receiving the sixth message sent by the injection platform, the cryptographic service platform can verify the validity of PKc_MAC for each pair (SEID, QKN)_i. If PKc_MAC is valid, PKc is saved.

[0138] In some embodiments of this application, after saving the first key parameter, the process includes:

[0139] Generate the first charging key for the first terminal;

[0140] Determine whether to update the fourth key parameter of the first terminal;

[0141] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0142] The first filling key is encrypted based on the updated fourth key parameters to obtain the encrypted first filling key;

[0143] Generate the fifth key parameter based on the updated fourth key parameter;

[0144] Send a seventh message to the recharge platform; the seventh message includes an encrypted first recharge key, an encrypted fourth key parameter, and a fifth key parameter;

[0145] If not, encrypt the first filling key based on the fourth key parameter to obtain the encrypted first filling key;

[0146] Generate the fifth key parameter based on the fourth key parameter;

[0147] Send an eighth message to the refilling platform; the eighth message includes the encrypted first refilling key and the fifth key parameter.

[0148] In practical applications, refer to Figure 4 As shown, after the cryptographic service platform saves the PKc of the first terminal, it generates a quantum key set QKs = {QK1, QK2, ..., QKn} and corresponding key identifiers QKIDs = {QKID1, QKID2, ..., QKIDn} for the first terminal. The first charging key can be understood as QKs.

[0149] The cryptographic service platform needs to determine whether to update the KEK of the first terminal; the fourth key parameter can be understood as the KEK. The cryptographic service platform updates the key encapsulation key as needed for security, which helps protect and improve the security of the quantum key.

[0150] If yes, a new KEK is randomly generated and saved according to SEID. The updated KEK is then encrypted to obtain the encrypted fourth key parameter EKEK = Epub(PKc, KEK). QKs are then encrypted using the updated KEK to obtain the encrypted first charging key EQKs, and the first charging key verification code QKs_MAC is generated. The fifth key parameter can be understood as QKs_MAC, QKs_MAC = HMAC(SEID, EKEK, QKIDs, EQKs, ...). If no, QKs are encrypted using KEK to obtain EQKs, and QKs_MAC is generated, QKs_MAC = HMAC(SEID, KEK, QKIDs, EQKs, ...). Where EQKs = E(KEK, QKs). The seventh message may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n. The eighth message may include {SEID, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n.

[0151] After receiving the seventh message, the refilling platform sends the ninth message to the quantum key service card application on each first terminal via SEID. The ninth message may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}. After receiving the eighth message, the refilling platform sends the ninth message to the quantum key service card application on each first terminal via SEID. At this time, the ninth message may include {SEID, QKIDs, EQKs, QKs_MAC}.

[0152] According to the ninth message, the quantum key distribution card application checks whether an EKEK exists for each SEID. If so, the EKEK needs to be decrypted to obtain a new KEK. The new KEK = Dpub(SKc, EKEK). After overwriting and saving the KEK, the validity of QKs_MAC is verified. If QKs_MAC is valid, EQKs is decrypted to obtain QKs. Then, QKs and the corresponding QKIDs are written locally.

[0153] In some embodiments of this application, after determining that the terminal list includes a second terminal with the first key parameter, the process includes:

[0154] Generate the second filling key for the second terminal;

[0155] Determine whether to update the fourth key parameter of the second terminal;

[0156] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0157] The second filling key is encrypted based on the updated fourth key parameters to obtain the encrypted second filling key;

[0158] The fifth key parameter is generated based on the updated fourth key parameter; the third message includes the encrypted second charge key, the encrypted fourth key parameter, and the fifth key parameter;

[0159] If not, encrypt the second filling key based on the fourth key parameter to obtain the encrypted second filling key;

[0160] The fifth key parameter is generated based on the fourth key parameter; the third message includes the encrypted second charging key and the fifth key parameter.

[0161] In practical applications, for each pair (SEID, QKN)_i, the quantum key service platform can query the database to see if there is a public key PKc corresponding to the SEID, that is, to confirm whether the quantum key service card application on the USIM card has been initialized. The second terminal can be understood as the terminal corresponding to the USIM card that has been initialized by the quantum key service card application.

[0162] Run the key filling process for the USIM card that has been initialized using the quantum key service card application. (Reference) Figure 4 As shown, the cryptographic service platform generates a quantum key set QKs = {QK1, QK2, ..., QKn} and corresponding key identifiers QKIDs = {QKID1, QKID2, ..., QKIDn} for the second terminal. The second charging key can be understood as QKs.

[0163] The cryptographic service platform needs to determine whether to update the KEK of the second terminal. The fourth key parameter can be understood as KEK. If so, a new KEK is randomly generated and saved according to SEID. The updated KEK is then encrypted to obtain the encrypted fourth key parameter EKEK = Epub(PKc, KEK). QKs are then encrypted using the updated KEK to obtain the encrypted second recharge key EQKs, generating the second recharge key verification code QKs_MAC. The fifth key parameter can be understood as QKs_MAC, QKs_MAC = HMAC(SEID, EKEK, QKIDs, EQKs, ...). If not, QKs are encrypted using KEK to obtain EQKs, generating QKs_MAC, QKs_MAC = HMAC(SEID, KEK, QKIDs, EQKs, ...). Where EQKs = E(KEK, QKs). After generating QKs_MAC and QKs, the password service platform sends a third message to the recharge platform. The third message may include {SEID, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n, and may also include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n.

[0164] After receiving the third message, the charging platform sends the tenth message to the quantum key service card application on each second terminal via SEID. The tenth message may include {SEID, QKIDs, EQKs, QKs_MAC}, or it may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}.

[0165] According to the tenth message, the quantum key distribution card application checks whether an EKEK exists for each SEID. If so, the EKEK needs to be decrypted to obtain a new KEK. The new KEK = Dpub(SKc, EKEK). After overwriting and saving the KEK, the validity of QKs_MAC is verified. If QKs_MAC is valid, EQKs is decrypted to obtain QKs. Then, QKs and the corresponding QKIDs are written locally.

[0166] In some embodiments of this application, the method further includes:

[0167] Set the first charge state of the first charge key and / or the second charge key and the second charge state.

[0168] In practical applications, after the quantum key service card application completes the charging, it can return a charging response to the charging platform. After receiving the response, the charging platform sends a charging response to the cryptographic service platform. The charging platform can set the charging status of each QKs.

[0169] Embodiments of this application provide a key injection method, applied to an injection platform, with reference to... Figure 5 As shown, the method includes the following steps:

[0170] Step S501: Send a first message to the cryptographic service platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list.

[0171] In practical applications, after receiving a quantum key injection task, the injection platform can prepare a QK requirement list {SEID, QKN}_i, where i = 1, ..., n, and QKN is the number of injection keys corresponding to each SEID. The injection platform sends an injection key acquisition request to the quantum key service platform, the request containing {SEID, QKN}_i. The first message can be understood as the injection key acquisition request, where {SEID, QKN}_i includes the identifier of each terminal to be injected and the number of keys to be injected for each terminal.

[0172] Step S502: Receive the second and / or third message sent by the cryptographic service platform.

[0173] The second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0174] Understandably, for each pair (SEID, QKN)_i, the quantum key service platform can query the database to see if there is a public key PKc corresponding to the SEID, thus confirming whether the quantum key service card application on the USIM card has completed initialization.

[0175] In practical applications, for uninitialized USIM cards used in quantum key distribution (QKD) applications, an initialization process is executed. The first terminal can be understood as the terminal corresponding to the uninitialized USIM card. The QKD platform generates a key parameter R_PKc, which can be a random number or a timestamp. After generating R_PKc, the QKD platform sends an initialization request to the refilling platform. The second message can be understood as the initialization request, which includes the SEID and R_PKc corresponding to the first terminal.

[0176] For USIM cards initialized using the quantum key service card application, a key charging process is executed. The second terminal can be understood as the terminal corresponding to the USIM card initialized using the quantum key service card application. After the quantum key service platform generates a quantum key for the second terminal, it can encrypt the quantum key based on KEK and then send a key retrieval response to the charging platform. The third message can be understood as the key retrieval response. The third message includes the SEID corresponding to the second terminal and the encrypted quantum key.

[0177] As can be seen from the above, in this embodiment, the cryptographic service platform receives a first message sent by the key-addressing platform. The first message includes a list of terminals to be added and the number of keys to be added to each terminal in the list. The cryptographic service platform sends a second message and / or a third message to the key-addressing platform. The second message indicates the first terminal to enter the initialization process, and the third message indicates the second terminal to enter the key-addressing process. This achieves a dual separation of terminal access rights (key-addressing platform) and key management rights (cryptographic service platform), preventing the key-addressing platform from obtaining the added quantum keys. This solves the problem in related technologies where the key-addressing platform can obtain the same full set of keys as the quantum key service platform, thus failing to protect the security of the quantum key-addressing process.

[0178] In some embodiments of this application, after receiving the second message sent by the cryptographic service platform, the process includes:

[0179] Send a fourth message to the first terminal; the fourth message includes the second key parameter.

[0180] In practical applications, the second key parameter can be understood as the R_PKc generated by the quantum key service platform. The R_PKc can be a random number or a timestamp. After generating the R_PKc, the quantum key service platform sends an initialization request to the charging platform. The second message can be understood as the initialization request, which includes the SEID and R_PKc corresponding to the first terminal.

[0181] After receiving the second message, the refilling platform sends a fourth message via SEID to the quantum key service card application on each first terminal, requesting the quantum key service card application to initialize. Upon receiving the fourth message, the quantum key service card application generates a public-private key pair (SKc, PKc) and a public key verification code PKc_MAC, where PKc_MAC = HMAC(KEK_i, PKc, SEID, R_PKc). It then sends a fifth message to the refilling platform, responding to the platform's initialization request. The fifth message may include SEID, R_PKc, PKc, and PKc_MAC.

[0182] In some embodiments of this application, after sending the fourth message to the first terminal, the process includes:

[0183] Receive the fifth message sent by the first terminal; the fifth message includes the first key parameter, the second key parameter, and the third key parameter.

[0184] Send a sixth message to the cryptographic service platform; the sixth message includes the first key parameters, the second key parameters, the third key parameters, and the number of keys to be refilled on the first terminal.

[0185] In practical applications, after receiving the fourth message, the quantum key service card application on the first terminal generates a public-private key pair (SKc, PKc) and a public key verification code PKc_MAC, where PKc_MAC = HMAC(KEK_i, PKc, SEID, R_PKc). It then sends a fifth message to the refilling platform in response to the platform's initialization request. The fifth message may include SEID, R_PKc, PKc, and PKc_MAC.

[0186] After receiving the fifth message, the recharge platform sends a sixth message to the cryptographic service platform in response to the initialization request of the cryptographic service platform. The sixth message may include {SEID, QKN, R_PKc, PKc, PKc_MAC}_i, i = 1, ..., n.

[0187] In some embodiments of this application, after sending the sixth message to the cryptographic service platform, the process includes:

[0188] Receive a seventh or eighth message sent by the cryptographic service platform; the seventh message includes an encrypted first injection key, an encrypted fourth key parameter, and a fifth key parameter; the eighth message includes an encrypted first injection key and a fifth key parameter.

[0189] Send a ninth message to the first terminal; the ninth message includes an encrypted first charging key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0190] In practical applications, after the cryptographic service platform stores the PKc of the first terminal, it generates the quantum key set QKs = {QK1, QK2, ..., QKn} and the corresponding key identifiers QKIDs = {QKID1, QKID2, ..., QKIDn} for the first terminal. The first charging key can be understood as QKs.

[0191] The cryptographic service platform needs to determine whether to update the KEK of the first terminal; the fourth key parameter can be understood as the KEK. The cryptographic service platform updates the key encapsulation key as needed for security, which helps protect and improve the security of the quantum key.

[0192] If yes, a new KEK is randomly generated and saved according to SEID. The updated KEK is then encrypted to obtain the encrypted fourth key parameter EKEK = Epub(PKc, KEK). QKs are then encrypted using the updated KEK to obtain the encrypted first charging key EQKs, and the first charging key verification code QKs_MAC is generated. The fifth key parameter can be understood as QKs_MAC, QKs_MAC = HMAC(SEID, EKEK, QKIDs, EQKs, ...). If no, QKs are encrypted using KEK to obtain EQKs, and QKs_MAC is generated, QKs_MAC = HMAC(SEID, KEK, QKIDs, EQKs, ...). Where EQKs = E(KEK, QKs). The seventh message may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n. The eighth message may include {SEID, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n.

[0193] After receiving the seventh message, the refilling platform sends the ninth message to the quantum key service card application on each first terminal via SEID. The ninth message may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}. After receiving the eighth message, the refilling platform sends the ninth message to the quantum key service card application on each first terminal via SEID. At this time, the ninth message may include {SEID, QKIDs, EQKs, QKs_MAC}.

[0194] According to the ninth message, the quantum key distribution card application checks whether an EKEK exists for each SEID. If so, the EKEK needs to be decrypted to obtain a new KEK. The new KEK = Dpub(SKc, EKEK). After overwriting and saving the KEK, the validity of QKs_MAC is verified. If QKs_MAC is valid, EQKs is decrypted to obtain QKs. Then, QKs and the corresponding QKIDs are written locally.

[0195] In some embodiments of this application, after receiving a third message sent by the cryptographic service platform, the process includes:

[0196] Send a tenth message to the second terminal; the tenth message includes an encrypted second charging key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0197] In practical applications, for each pair (SEID, QKN)_i, the quantum key service platform can query the database to see if there is a public key PKc corresponding to the SEID, that is, to confirm whether the quantum key service card application on the USIM card has been initialized. The second terminal can be understood as the terminal corresponding to the USIM card that has been initialized by the quantum key service card application.

[0198] Run the key filling process for the USIM card that has been initialized using the quantum key service card application. (Reference) Figure 4 As shown, the cryptographic service platform generates a quantum key set QKs = {QK1, QK2, ..., QKn} and corresponding key identifiers QKIDs = {QKID1, QKID2, ..., QKIDn} for the second terminal. The second charging key can be understood as QKs.

[0199] The cryptographic service platform needs to determine whether to update the KEK of the second terminal. The fourth key parameter can be understood as KEK. If so, a new KEK is randomly generated and saved according to SEID. The updated KEK is then encrypted to obtain the encrypted fourth key parameter EKEK = Epub(PKc, KEK). QKs are then encrypted using the updated KEK to obtain the encrypted second recharge key EQKs, generating the second recharge key verification code QKs_MAC. The fifth key parameter can be understood as QKs_MAC, QKs_MAC = HMAC(SEID, EKEK, QKIDs, EQKs, ...). If not, QKs are encrypted using KEK to obtain EQKs, generating QKs_MAC, QKs_MAC = HMAC(SEID, KEK, QKIDs, EQKs, ...). Where EQKs = E(KEK, QKs). After generating QKs_MAC and QKs, the password service platform sends a third message to the recharge platform. The third message may include {SEID, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n, and may also include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}_i, i = 1, ..., n.

[0200] After receiving the third message, the charging platform sends the tenth message to the quantum key service card application on each second terminal via SEID. The tenth message may include {SEID, QKIDs, EQKs, QKs_MAC}, or it may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}.

[0201] According to the tenth message, the quantum key distribution card application checks whether an EKEK exists for each SEID. If so, the EKEK needs to be decrypted to obtain a new KEK. The new KEK = Dpub(SKc, EKEK). After overwriting and saving the KEK, the validity of QKs_MAC is verified. If QKs_MAC is valid, EQKs is decrypted to obtain QKs. Then, QKs and the corresponding QKIDs are written locally.

[0202] Embodiments of this application provide a key injection method applied to a terminal, as shown below. Figure 6 As shown, the method includes the following steps:

[0203] Step S601: Receive the fourth message and / or the tenth message sent by the recharge platform; the fourth message includes the second key parameter; the tenth message includes the encrypted second recharge key, the fifth key parameter and / or the encrypted fourth key parameter.

[0204] In practical applications, for uninitialized USIM cards used in quantum key distribution (QDT) applications, an initialization process is executed. The QDT platform generates a key parameter R_PKc, which can be a random number or a timestamp. After generating R_PKc, the QDT platform sends a second message to the refilling platform. This second message includes the SEID and R_PKc corresponding to the first terminal. Upon receiving the second message, the refilling platform sends a fourth message to the QDT application on each first terminal via the SEID, requesting the QDT application to initialize.

[0205] After receiving the third message, the charging platform sends the tenth message to the quantum key service card application on each second terminal via SEID. The tenth message may include {SEID, QKIDs, EQKs, QKs_MAC}, or it may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}.

[0206] As can be seen from the above, in this embodiment, the cryptographic service platform receives a first message sent by the key-addressing platform. The first message includes a list of terminals to be added and the number of keys to be added to each terminal in the list. The cryptographic service platform sends a second message and / or a third message to the key-addressing platform. The second message indicates the first terminal to enter the initialization process, and the third message indicates the second terminal to enter the key-addressing process. This achieves a dual separation of terminal access rights (key-addressing platform) and key management rights (cryptographic service platform), preventing the key-addressing platform from obtaining the added quantum keys. This solves the problem in related technologies where the key-addressing platform can obtain the same full set of keys as the quantum key service platform, thus failing to protect the security of the quantum key-addressing process.

[0207] In some embodiments of this application, after receiving the fourth message sent by the filling platform, the process includes:

[0208] Generate the first key parameter and the third key parameter;

[0209] Send a fifth message to the recharge platform; the fifth message includes the first key parameter, the second key parameter, and the third key parameter.

[0210] In practical applications, after the refilling platform sends an initialization request command to the quantum key service card application on each first terminal via SEID, the quantum key service card application generates a public-private key pair (SKc, PKc) and a public key verification code PKc_MAC, where PKc_MAC = HMAC(KEK_i, PKc, SEID, R_PKc). The first parameter key is PKc, and the third key parameter can be understood as the public key verification code.

[0211] Send a fifth message to the recharge platform in response to the platform's initialization request. The fifth message may include SEID, R_PKc, PKc, and PKc_MAC.

[0212] In some embodiments of this application, after sending the fifth message to the filling platform, the process includes:

[0213] Receive the ninth message sent by the recharge platform; the ninth message includes the encrypted first recharge key, the fifth key parameter and / or the encrypted fourth key parameter;

[0214] If the ninth message includes an encrypted fourth key parameter, the encrypted fourth key parameter is decrypted to obtain the updated fourth key parameter;

[0215] Verify the fifth key parameter;

[0216] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the updated fourth key parameter to obtain the first injection key;

[0217] If the ninth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0218] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the fourth key parameter to obtain the first injection key;

[0219] Recharge the first recharge key.

[0220] In practical applications, after receiving the seventh message, the refilling platform sends the ninth message to the quantum key service card application on each first terminal via SEID. The ninth message may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}. After receiving the eighth message, the refilling platform sends the ninth message to the quantum key service card application on each first terminal via SEID. At this time, the ninth message may include {SEID, QKIDs, EQKs, QKs_MAC}.

[0221] According to the ninth message, the quantum key distribution card application checks whether an EKEK exists for each SEID. If so, the EKEK needs to be decrypted to obtain a new KEK. The new KEK = Dpub(SKc, EKEK). After overwriting and saving the KEK, the validity of QKs_MAC is verified. If QKs_MAC is valid, EQKs is decrypted to obtain QKs. Then, QKs and the corresponding QKIDs are written locally.

[0222] In some embodiments of this application, after receiving the tenth message sent by the filling platform, the process includes:

[0223] If the tenth message includes an encrypted fourth key parameter, the encrypted fourth key parameter is decrypted to obtain the updated fourth key parameter.

[0224] Verify the fifth key parameter;

[0225] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the updated fourth key parameter to obtain the second injection key;

[0226] If the tenth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0227] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the fourth key parameter to obtain the second injection key;

[0228] Recharge the second recharge key.

[0229] In practical applications, after receiving the third message, the charging platform sends the tenth message to the quantum key service card application on each second terminal via SEID. The tenth message may include {SEID, QKIDs, EQKs, QKs_MAC}, or it may include {SEID, EKEK, QKIDs, EQKs, QKs_MAC}.

[0230] According to the tenth message, the quantum key distribution card application checks whether an EKEK exists for each SEID. If so, the EKEK needs to be decrypted to obtain a new KEK. The new KEK = Dpub(SKc, EKEK). After overwriting and saving the KEK, the validity of QKs_MAC is verified. If QKs_MAC is valid, EQKs is decrypted to obtain QKs. Then, QKs and the corresponding QKIDs are written locally.

[0231] Based on the same inventive concept as described above Figure 7 This is a schematic diagram of a key filling device provided in an embodiment of the present invention, applied to a cryptographic service platform. The device includes:

[0232] The first receiving unit 701 is used to receive a first message sent by the recharge platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list.

[0233] The first sending unit 702 is used to send a second message and / or a third message to the key filling platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0234] In some embodiments of this application, the apparatus further includes: a first processing unit, configured to determine a first terminal that does not include the first key parameter and / or a second terminal that includes the first key parameter in the terminal list.

[0235] In some embodiments of this application, the first processing unit is further configured to generate a second key parameter for the first terminal; the second message includes the second key parameter.

[0236] In some embodiments of this application, the first receiving unit 701 is further configured to receive a sixth message sent by the refilling platform; the sixth message includes a first key parameter, a second key parameter, a third key parameter, and the number of keys to be refilled on the first terminal.

[0237] In some embodiments of this application, the first processing unit is further configured to verify the third key parameter;

[0238] If the third key parameter is verified to be valid, the first key parameter is saved.

[0239] In some embodiments of this application, the first processing unit is further configured to generate a first charging key for the first terminal;

[0240] Determine whether to update the fourth key parameter of the first terminal;

[0241] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0242] The first filling key is encrypted based on the updated fourth key parameters to obtain the encrypted first filling key;

[0243] Generate the fifth key parameter based on the updated fourth key parameter;

[0244] The first sending unit 702 is also used to send a seventh message to the refilling platform; the seventh message includes an encrypted first refilling key, an encrypted fourth key parameter, and a fifth key parameter;

[0245] The first processing unit is also configured to, if not, encrypt the first injection key based on the fourth key parameter to obtain the encrypted first injection key;

[0246] Generate the fifth key parameter based on the fourth key parameter;

[0247] The first sending unit 702 is also used to send an eighth message to the refilling platform; the eighth message includes an encrypted first refilling key and a fifth key parameter.

[0248] In some embodiments of this application, the first processing unit is further configured to generate a second charging key for the second terminal;

[0249] Determine whether to update the fourth key parameter of the second terminal;

[0250] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0251] The second filling key is encrypted based on the updated fourth key parameters to obtain the encrypted second filling key;

[0252] The fifth key parameter is generated based on the updated fourth key parameter; the third message includes the encrypted second charge key, the encrypted fourth key parameter, and the fifth key parameter;

[0253] If not, encrypt the second filling key based on the fourth key parameter to obtain the encrypted second filling key;

[0254] The fifth key parameter is generated based on the fourth key parameter; the third message includes the encrypted second charging key and the fifth key parameter.

[0255] In some embodiments of this application, the first processing unit is further configured to set a first charging state of the first charging key and / or a second charging key and a second charging state.

[0256] Based on the same inventive concept as described above Figure 8 This is a schematic diagram of a key filling device provided in an embodiment of the present invention, applied to a filling platform. The device includes:

[0257] The second sending unit 801 is used to send a first message to the cryptographic service platform; the first message includes a list of terminals to be filled and the number of keys to be filled for each terminal in the terminal list.

[0258] The second receiving unit 802 is used to receive a second message and / or a third message sent by the cryptographic service platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0259] In some embodiments of this application, the second sending unit 801 is further configured to send a fourth message to the first terminal; the fourth message includes a second key parameter.

[0260] In some embodiments of this application, the second receiving unit 802 is further configured to receive a fifth message sent by the first terminal; the fifth message includes a first key parameter, a second key parameter, and a third key parameter;

[0261] The second sending unit 801 is also used to send a sixth message to the cryptographic service platform; the sixth message includes the first key parameters, the second key parameters, the third key parameters, and the number of keys to be filled in the first terminal.

[0262] In some embodiments of this application, the second receiving unit 802 is further configured to receive a seventh message or an eighth message sent by the cryptographic service platform; the seventh message includes an encrypted first charging key, an encrypted fourth key parameter, and a fifth key parameter; the eighth message includes an encrypted first charging key and a fifth key parameter.

[0263] The second sending unit 801 is also used to send a ninth message to the first terminal; the ninth message includes an encrypted first charging key, a fifth key parameter and / or an encrypted fourth key parameter.

[0264] In some embodiments of this application, the second sending unit 801 is further configured to send a tenth message to the second terminal; the tenth message includes an encrypted second charging key, a fifth key parameter and / or an encrypted fourth key parameter.

[0265] Based on the same inventive concept as described above Figure 9 This is a schematic diagram of a key filling device provided in an embodiment of the present invention, applied to a terminal. The device includes:

[0266] The third receiving unit 901 is used to receive a fourth message and / or a tenth message sent by the refilling platform; the fourth message includes a second key parameter; the tenth message includes an encrypted second refilling key, a fifth key parameter and / or an encrypted fourth key parameter.

[0267] In some embodiments of this application, the apparatus further includes: a second processing unit and a third sending unit; wherein the second processing unit is configured to generate a first key parameter and a third key parameter;

[0268] The third sending unit is used to send a fifth message to the filling platform; the fifth message includes a first key parameter, a second key parameter, and a third key parameter.

[0269] In some embodiments of this application, the third receiving unit 901 is used to receive a ninth message sent by the refilling platform; the ninth message includes an encrypted first refilling key, a fifth key parameter and / or an encrypted fourth key parameter;

[0270] The second processing unit is further configured to, if the ninth message includes an encrypted fourth key parameter, decrypt the encrypted fourth key parameter to obtain an updated fourth key parameter.

[0271] Verify the fifth key parameter;

[0272] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the updated fourth key parameter to obtain the first injection key;

[0273] If the ninth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0274] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the fourth key parameter to obtain the first injection key;

[0275] Recharge the first recharge key.

[0276] In some embodiments of this application, the second processing unit is further configured to, if the tenth message includes an encrypted fourth key parameter, decrypt the encrypted fourth key parameter to obtain an updated fourth key parameter;

[0277] Verify the fifth key parameter;

[0278] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the updated fourth key parameter to obtain the second injection key;

[0279] If the tenth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0280] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the fourth key parameter to obtain the second injection key;

[0281] Recharge the second recharge key.

[0282] Based on the hardware implementation of the above program modules, and in order to implement the method on the cryptographic service platform side of this application embodiment, this application embodiment also provides a cryptographic service platform, such as... Figure 10 As shown, the cryptographic service platform 1000 includes:

[0283] The first communication interface 1001 is capable of exchanging information with the filling platform;

[0284] The first processor 1002 is connected to the first communication interface 1001 to enable information interaction with the filling platform and to execute the methods provided by one or more technical solutions on the cryptographic service platform side when running a computer program.

[0285] The computer program is stored in the first memory 1003.

[0286] Specifically, the first communication interface 1001 is used to receive a first message sent by the recharge platform; the first message includes a list of terminals to be recharged and the number of keys to be recharged for each terminal in the terminal list;

[0287] Send a second message and / or a third message to the key filling platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0288] In some embodiments of this application, a first processor 1002 is used to determine a first terminal that does not include the first key parameter and / or a second terminal that includes the first key parameter in the terminal list.

[0289] In some embodiments of this application, a first processor 1002 is used to generate a second key parameter for a first terminal; the second message includes the second key parameter.

[0290] In some embodiments of this application, the first communication interface 1001 is used to receive a sixth message sent by the refilling platform; the sixth message includes a first key parameter, a second key parameter, a third key parameter, and the number of keys to be refilled on the first terminal.

[0291] In some embodiments of this application, the first processor 1002 is used to verify the third key parameter;

[0292] If the third key parameter is verified to be valid, the first key parameter is saved.

[0293] In some embodiments of this application, the first processor 1002 is used to generate a first charging key for the first terminal;

[0294] Determine whether to update the fourth key parameter of the first terminal;

[0295] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0296] The first filling key is encrypted based on the updated fourth key parameters to obtain the encrypted first filling key;

[0297] Generate the fifth key parameter based on the updated fourth key parameter;

[0298] The first communication interface 1001 is used to send a seventh message to the refilling platform; the seventh message includes an encrypted first refilling key, an encrypted fourth key parameter, and a fifth key parameter;

[0299] The first processor 1002 is used to, if not, encrypt the first charging key based on the fourth key parameter to obtain the encrypted first charging key;

[0300] Generate the fifth key parameter based on the fourth key parameter;

[0301] The first communication interface 1001 is used to send an eighth message to the refilling platform; the eighth message includes an encrypted first refilling key and a fifth key parameter.

[0302] In some embodiments of this application, the first processor 1002 is further configured to generate a second charging key for the second terminal;

[0303] Determine whether to update the fourth key parameter of the second terminal;

[0304] If so, update the fourth key parameter, save the updated fourth key parameter, and encrypt the updated fourth key parameter to obtain the encrypted fourth key parameter;

[0305] The second filling key is encrypted based on the updated fourth key parameters to obtain the encrypted second filling key;

[0306] Generate the fifth key parameter based on the updated fourth key parameter;

[0307] The third message includes an encrypted second charge key, an encrypted fourth key parameter, and a fifth key parameter;

[0308] If not, encrypt the second filling key based on the fourth key parameter to obtain the encrypted second filling key;

[0309] The fifth key parameter is generated based on the fourth key parameter; the third message includes the encrypted second charging key and the fifth key parameter.

[0310] In some embodiments of this application, a first processor 1002 is used to set a first charging state of a first charging key and / or a second charging key and a second charging state.

[0311] Of course, in practical applications, the various components in the cryptographic service platform 1000 are coupled together through the bus system 1004. It can be understood that the bus system 1004 is used to implement communication between these components. In addition to the data bus, the bus system 1004 also includes a power bus, a control bus, and a status signal bus. However, for clarity, in... Figure 10 The general labeled all buses as Bus System 1004.

[0312] The first memory 1003 in this embodiment is used to store various types of data to support the operation of the cryptographic service platform 1000. Examples of such data include any computer program used to operate on the cryptographic service platform 1000.

[0313] The methods disclosed in the embodiments of this application can be applied to or implemented by the first processor 1002. The first processor 1002 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the integrated logic circuit of the hardware or by instructions in the form of software in the first processor 1002. The first processor 1002 may be a general-purpose processor, a digital signal processor (DSP), or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The first processor 1002 can implement or execute the methods, steps and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the methods disclosed in the embodiments of this application can be directly reflected as being executed by a hardware decoding processor, or being executed by a combination of hardware and software modules in the decoding processor. The software modules may be located in a storage medium, which is located in the first memory 1003. The first processor 1002 reads the information in the first memory 1003 and completes the steps of the aforementioned method in combination with its hardware.

[0314] In an exemplary embodiment, the cryptographic service platform 1000 may be implemented by one or more application-specific integrated circuits (ASICs), DSPs, programmable logic devices (PLDs), complex programmable logic devices (CPLDs), field-programmable gate arrays (FPGAs), general-purpose processors, controllers, microcontrollers (MCUs), microprocessors, or other electronic components to perform the aforementioned methods.

[0315] Based on the hardware implementation of the above program modules, and in order to implement the filling platform method of this application embodiment, this application embodiment also provides a filling platform, such as... Figure 11 As shown, the filling platform 1100 includes:

[0316] The second communication interface 1101 is capable of exchanging information with the cryptographic service platform and the terminal;

[0317] The second processor 1102 is connected to the second communication interface 1101 to enable information interaction with the cryptographic service platform and the terminal, and to execute the methods provided by one or more technical solutions on the above-mentioned filling platform side when running computer programs;

[0318] The computer program is stored in the second memory 1103.

[0319] Specifically, the second communication interface 1101 is used to send a first message to the cryptographic service platform; the first message includes a list of terminals to be refilled and the number of keys to be refilled for each terminal in the terminal list;

[0320] Receive a second message and / or a third message sent by the cryptographic service platform; the second message indicates the first terminal to enter the initialization process; the third message indicates the second terminal to enter the key filling process.

[0321] In some embodiments of this application, the second communication interface 1101 is also used to send a fourth message to the first terminal; the fourth message includes a second key parameter.

[0322] In some embodiments of this application, the second communication interface 1101 is further configured to receive a fifth message sent by the first terminal; the fifth message includes a first key parameter, a second key parameter, and a third key parameter;

[0323] Send a sixth message to the cryptographic service platform; the sixth message includes the first key parameters, the second key parameters, the third key parameters, and the number of keys to be refilled on the first terminal.

[0324] In some embodiments of this application, the second communication interface 1101 is further configured to receive a seventh message or an eighth message sent by the cryptographic service platform; the seventh message includes an encrypted first charging key, an encrypted fourth key parameter, and a fifth key parameter; the eighth message includes an encrypted first charging key and a fifth key parameter.

[0325] Send a ninth message to the first terminal; the ninth message includes an encrypted first charging key, a fifth key parameter, and / or an encrypted fourth key parameter.

[0326] In some embodiments of this application, the second communication interface 1101 is also used to send a tenth message to the second terminal; the tenth message includes an encrypted second charging key, a fifth key parameter and / or an encrypted fourth key parameter.

[0327] The methods disclosed in the embodiments of this application can be applied to, or implemented by, the second processor 1102. The second processor 1102 may be an integrated circuit chip with signal processing capabilities. During implementation, each step of the above method can be completed by the integrated logic circuitry of the hardware in the second processor 1102 or by instructions in software form. The second processor 1102 may be a general-purpose processor, a DSP, or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. The second processor 1102 can implement or execute the methods, steps, and logic block diagrams disclosed in the embodiments of this application. The general-purpose processor may be a microprocessor or any conventional processor, etc. The steps of the methods disclosed in the embodiments of this application can be directly manifested as execution by a hardware decoding processor, or execution by a combination of hardware and software modules in the decoding processor. The software modules may be located in a storage medium, specifically in the second memory 1103. The second processor 1102 reads information from the second memory 1103 and, in conjunction with its hardware, completes the steps of the aforementioned method.

[0328] In an exemplary embodiment, the filling platform 1100 may be implemented by one or more ASICs, DSPs, PLDs, CPLDs, FPGAs, general-purpose processors, controllers, MCUs, microprocessors, or other electronic components to perform the aforementioned method.

[0329] Based on the hardware implementation of the above program modules, and in order to implement the terminal-side method of the embodiments of this application, the embodiments of this application also provide a terminal, such as... Figure 12 As shown, the terminal 1200 includes:

[0330] The third communication interface 1201 is capable of exchanging information with the filling platform;

[0331] The third processor 1202 is connected to the second communication interface 1201 to enable information interaction with the filling platform and to execute the methods provided by one or more of the above-mentioned terminal-side technical solutions when running computer programs;

[0332] The third memory 1203 is where the computer program is stored.

[0333] Specifically, the third communication interface 1201 is used to receive a fourth message and / or a tenth message sent by the refilling platform; the fourth message includes a second key parameter; the tenth message includes an encrypted second refilling key, a fifth key parameter and / or an encrypted fourth key parameter.

[0334] In some embodiments of this application, a third processor 1202 is used to generate a first key parameter and a third key parameter;

[0335] The third communication interface 1201 is used to send a fifth message to the refilling platform; the fifth message includes the first key parameter, the second key parameter, and the third key parameter.

[0336] In some embodiments of this application, the third communication interface 1201 is used to receive a ninth message sent by the refilling platform; the ninth message includes an encrypted first refilling key, a fifth key parameter and / or an encrypted fourth key parameter;

[0337] The third processor 1202 is used to decrypt the encrypted fourth key parameter if the ninth message includes the encrypted fourth key parameter, so as to obtain the updated fourth key parameter.

[0338] Verify the fifth key parameter;

[0339] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the updated fourth key parameter to obtain the first injection key;

[0340] If the ninth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0341] If the fifth key parameter is verified to be valid, the encrypted first injection key is decrypted based on the fourth key parameter to obtain the first injection key;

[0342] Recharge the first recharge key.

[0343] In some embodiments of this application, the third processor 1202 is configured to decrypt the encrypted fourth key parameter if the tenth message includes an encrypted fourth key parameter, to obtain an updated fourth key parameter.

[0344] Verify the fifth key parameter;

[0345] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the updated fourth key parameter to obtain the second injection key;

[0346] If the tenth message does not include the encrypted fourth key parameter, verify the fifth key parameter;

[0347] If the fifth key parameter is verified to be valid, the encrypted second injection key is decrypted based on the fourth key parameter to obtain the second injection key;

[0348] Recharge the second recharge key.

[0349] It is understood that the memories (first memory 1003, second memory 1103, and third memory 1203) in the embodiments of this application can be volatile memories or non-volatile memories, or both. Non-volatile memories can be read-only memories (ROM), programmable read-only memories (PROM), erasable programmable read-only memories (EPROM), electrically erasable programmable read-only memories (EEPROM), magnetic random access memories (FRAM), flash memories, magnetic surface memories, optical discs, or compact disc read-only memories (CD-ROM); magnetic surface memories can be disk storage or magnetic tape storage. Volatile memories can be random access memories (RAM), which are used as external caches.By way of example, but not limitation, many forms of RAM are available, such as Static Random Access Memory (SRAM), Synchronous Static Random Access Memory (SSRAM), Dynamic Random Access Memory (DRAM), Synchronous Dynamic Random Access Memory (SDRAM), Double Data Rate Synchronous Dynamic Random Access Memory (DDRSDRAM), Enhanced Synchronous Dynamic Random Access Memory (ESDRAM), SyncLink Dynamic Random Access Memory (SLDRAM), and Direct Rambus Random Access Memory (DRRAM). The memories described in the embodiments of this application are intended to include, but are not limited to, these and any other suitable types of memory.

[0350] Based on the foregoing embodiments, embodiments of this application provide a storage medium storing computer-executable instructions configured to execute... Figure 1 or Figure 5 or Figure 6 The corresponding implementation provides a key filling method.

[0351] Based on the foregoing embodiments, embodiments of this application also provide a computer product, including a computer program, which, when executed by a processor, implements... Figure 1 or Figure 5 or Figure 6 The steps in the key injection method provided in the corresponding embodiment.

[0352] It should be noted that the aforementioned computer storage media can be ROM, PROM, EPROM, EEPROM, FRAM, Flash Memory, magnetic surface memory, optical disc, or CD-ROM, etc.; or it can be various electronic devices that include one or any combination of the above-mentioned storage media, such as mobile phones, computers, tablet devices, personal digital assistants, etc.

[0353] It should be noted that, in this document, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Unless otherwise specified, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes that element.

[0354] The sequence numbers of the embodiments in this application are for descriptive purposes only and do not represent the superiority or inferiority of the embodiments.

[0355] Through the above description of the embodiments, those skilled in the art can clearly understand that the methods of the above embodiments can be implemented by means of software plus necessary general-purpose hardware platforms. Of course, they can also be implemented by hardware, but in many cases the former is a better implementation method. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, can be embodied in the form of a software product. This computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions to cause a first network device (which may be a mobile phone, computer, server, air conditioner, or network device, etc.) to execute the methods described in the various embodiments of this application.

[0356] This application is described with reference to flowchart illustrations and / or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of this application. It will be understood that each block of the flowchart illustrations and / or block diagrams, and combinations of blocks in the flowchart illustrations and / or block diagrams, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, special-purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, generate instructions for implementing the flowchart... Figure 1 One or more processes and / or boxes Figure 1 A device that provides the functions specified in one or more boxes.

[0357] These computer program instructions may also be stored in a computer-readable storage medium that can direct a computer or other programmable data processing device to function in a particular manner, such that the instructions stored in the computer-readable storage medium produce an article of manufacture including instruction means, which are implemented in a process Figure 1 One or more processes and / or boxes Figure 1 The function specified in one or more boxes.

[0358] These computer program instructions may also be loaded onto a computer or other programmable data processing equipment to cause a series of operational steps to be performed on the computer or other programmable equipment to produce a computer-implemented process, thereby providing instructions that execute on the computer or other programmable equipment for implementing the process. Figure 1 One or more processes and / or boxes Figure 1 The steps of the function specified in one or more boxes.

[0359] The above are merely preferred embodiments of this application and do not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A method of key loading, characterized by, The method is applied to a password service platform, and the method comprises the following steps: receiving a first message sent by a charging platform; the first message comprises a terminal list to be charged and a number of keys to be charged for each terminal in the terminal list; sending a second message and / or a third message to the charging platform; the second message indicates a first terminal entering an initialization process; and the third message indicates a second terminal entering a key charging process; wherein, before sending the second message and / or the third message to the charging platform, the method comprises the following steps: determining the first terminal not including a first key parameter and / or the second terminal including the first key parameter in the terminal list; after determining the second terminal including the first key parameter in the terminal list, the method comprises the following steps: generating a second charging key of the second terminal; determining whether to update a fourth key parameter of the second terminal; if yes, updating the fourth key parameter, saving the updated fourth key parameter and encrypting the updated fourth key parameter to obtain an encrypted fourth key parameter; encrypting the second charging key based on the updated fourth key parameter to obtain an encrypted second charging key; generating a fifth key parameter based on the updated fourth key parameter; the third message comprises the encrypted second charging key, the encrypted fourth key parameter and the fifth key parameter; if no, encrypting the second charging key based on the fourth key parameter to obtain an encrypted second charging key; generating a fifth key parameter based on the fourth key parameter; the third message comprises the encrypted second charging key and the fifth key parameter.

2. The method of claim 1, wherein, after determining the first terminal not including the first key parameter in the terminal list, the method comprises the following steps: generating a second key parameter of the first terminal; the second message comprises the second key parameter.

3. The method of claim 2, wherein, after sending the second message to the charging platform, the method comprises the following steps: receiving a sixth message sent by the charging platform; the sixth message comprises the first key parameter, the second key parameter, a third key parameter and a number of keys to be charged for the first terminal.

4. The method of claim 3, wherein, after receiving the sixth message sent by the charging platform, the method comprises the following steps: verifying the third key parameter; in the case that the third key parameter is verified to be legal, saving the first key parameter.

5. The method of claim 4, wherein, after saving the first key parameter, the method comprises the following steps: generating a first charging key of the first terminal; determining whether to update a fourth key parameter of the first terminal; if yes, updating the fourth key parameter, saving the updated fourth key parameter and encrypting the updated fourth key parameter to obtain an encrypted fourth key parameter; encrypting the first charging key based on the updated fourth key parameter to obtain an encrypted first charging key; generating a fifth key parameter based on the updated fourth key parameter; sending a seventh message to the charging platform; the seventh message comprises the encrypted first charging key, the encrypted fourth key parameter and the fifth key parameter; if no, encrypting the first charging key based on the fourth key parameter to obtain an encrypted first charging key; generating a fifth key parameter based on the fourth key parameter; sending an eighth message to the provisioning platform; the eighth message comprising the encrypted first provisioning key and the fifth key parameter.

6. The method according to claim 1 or 5, characterized in that, The method further comprises: setting a first provisioning state of the first provisioning key and / or a second provisioning state of the second provisioning key.

7. A method of key loading, characterized by, The method applied to a provisioning platform, the method comprising: sending a first message to a cryptographic service platform; the first message comprising a list of terminals to be provisioned and a number of keys to be provisioned for each terminal in the list of terminals; receiving a second message and / or a third message sent by the cryptographic service platform; the second message indicating a first terminal to enter an initialization procedure; the third message indicating a second terminal to enter a key provisioning procedure; The cryptographic service platform is configured to perform the method of claim 1.

8. The method of claim 7, wherein, After the receiving the second message sent by the cryptographic service platform, the method comprises: sending a fourth message to the first terminal; the fourth message comprising a second key parameter.

9. The method of claim 8, wherein, After the sending the fourth message to the first terminal, the method comprises: receiving a fifth message sent by the first terminal; the fifth message comprising a first key parameter, the second key parameter and a third key parameter; sending a sixth message to the cryptographic service platform; the sixth message comprising the first key parameter, the second key parameter, the third key parameter and a number of keys to be provisioned for the first terminal.

10. The method of claim 9, wherein, After the sending the sixth message to the cryptographic service platform, the method comprises: receiving a seventh message or an eighth message sent by the cryptographic service platform; the seventh message comprising an encrypted first provisioning key, an encrypted fourth key parameter and a fifth key parameter; the eighth message comprising the encrypted first provisioning key and a fifth key parameter; sending a ninth message to the first terminal; the ninth message comprising the encrypted first provisioning key, the fifth key parameter and / or the encrypted fourth key parameter.

11. The method of claim 10, wherein, After the receiving the third message sent by the cryptographic service platform, the method comprises: sending a tenth message to the second terminal; the tenth message comprising an encrypted second provisioning key, a fifth key parameter and / or an encrypted fourth key parameter.

12. A method of key loading, characterized by, The method applied to a terminal, the terminal comprising a first terminal and a second terminal, the method comprising: receiving a fourth message and / or a tenth message sent by a provisioning platform; the fourth message comprising a second key parameter; the tenth message comprising an encrypted second provisioning key, a fifth key parameter and / or an encrypted fourth key parameter; The provisioning platform is configured to perform the method of claim 11.

13. The method of claim 12, wherein, After the receiving the fourth message sent by the provisioning platform, the method comprises: generating a first key parameter and a third key parameter; sending a fifth message to the provisioning platform; the fifth message comprising the first key parameter, the second key parameter and the third key parameter.

14. The method of claim 13, wherein, After the sending the fifth message to the provisioning platform, the method comprises: receiving a ninth message sent by the provisioning platform; the ninth message comprising an encrypted first provisioning key, a fifth key parameter and / or an encrypted fourth key parameter; decrypting the encrypted fourth key parameter to obtain an updated fourth key parameter if the ninth message comprises the encrypted fourth key parameter; verifying the fifth key parameter; decrypting the encrypted first provisioning key based on the updated fourth key parameter to obtain a first provisioning key if the fifth key parameter is verified to be legal; verifying the fifth key parameter if the ninth message does not comprise the encrypted fourth key parameter; decrypting the encrypted first provisioning key based on the fourth key parameter to obtain a first provisioning key if the fifth key parameter is verified to be legal; provisioning the first provisioning key.

15. The method of claim 12, wherein, after the tenth message sent by the receiving provisioning platform is received, comprising: decrypting the encrypted fourth key parameter to obtain an updated fourth key parameter if the tenth message comprises the encrypted fourth key parameter; verifying the fifth key parameter; decrypting the encrypted second provisioning key based on the updated fourth key parameter to obtain a second provisioning key if the fifth key parameter is verified to be legal; verifying the fifth key parameter if the tenth message does not comprise the encrypted fourth key parameter; decrypting the encrypted second provisioning key based on the fourth key parameter to obtain a second provisioning key if the fifth key parameter is verified to be legal; provisioning the second provisioning key. 16.A cryptographic service platform, comprising a first communication interface and a first processor; wherein, the first communication interface is configured to receive a first message sent by a provisioning platform; the first message comprises a terminal list to be provisioned and a number of keys to be provisioned for each terminal in the terminal list; the first processor is configured to send a second message and / or a third message to the provisioning platform; the second message indicates a first terminal entering an initialization process; the third message indicates a second terminal entering a key provisioning process; wherein, before the second message and / or the third message is sent to the provisioning platform, the first processor is configured to determine the first terminal not comprising a first key parameter in the terminal list and / or the second terminal comprising the first key parameter in the terminal list; after the second terminal comprising the first key parameter in the terminal list is determined, the first processor is configured to generate a second provisioning key for the second terminal; determine whether to update a fourth key parameter of the second terminal; if yes, update the fourth key parameter, save an updated fourth key parameter and encrypt the updated fourth key parameter to obtain an encrypted fourth key parameter; encrypt the second provisioning key based on the updated fourth key parameter to obtain an encrypted second provisioning key; generate a fifth key parameter based on the updated fourth key parameter; the third message comprises the encrypted second provisioning key, the encrypted fourth key parameter and the fifth key parameter; if no, encrypt the second provisioning key based on the fourth key parameter to obtain an encrypted second provisioning key; generating a fifth key parameter based on the fourth key parameter; the third message comprises the encrypted second provisioning key and the fifth key parameter.

17. A provisioning platform comprising a second communication interface and a second processor; wherein, the second communication interface is configured to send a first message to a cryptographic service platform; the first message comprises a list of terminals to be provisioned and a number of keys to be provisioned for each terminal in the list of terminals; receiving a second message and / or a third message sent by the cryptographic service platform; the second message indicates a first terminal to enter an initialization procedure; the third message indicates a second terminal to enter a key provisioning procedure; wherein the cryptographic service platform is configured to perform the method of claim 1.

18. A terminal comprising a third communication interface and a third processor; wherein, the terminals comprise a first terminal and a second terminal; the third communication interface is configured to receive a fourth message and / or a tenth message sent by a provisioning platform; the fourth message comprises a second key parameter; the tenth message comprises an encrypted second provisioning key, a fifth key parameter and / or an encrypted fourth key parameter; wherein the provisioning platform is configured to perform the method of claim 11.

19. A storage medium having stored thereon a computer program, characterized in that The computer program, which when executed by the processor, implements the steps of the method of any one of claims 1 to 6 or 7 to 11 or 12 to 15.

20. A computer product comprising a computer program, characterized in that The computer program, which when executed by the processor, implements the steps of the method of any one of claims 1 to 6 or 7 to 11 or 12 to 15.

Images