Encrypted signature system and method based on dynamic parameter selection

Abstract

The invention provides an encrypted signature system and method based on dynamic parameter selection, the encrypted signature system comprises a background management system, a signature adding and verifying interface and an encryption machine method interface, the background management system is used for configuring system parameters, and the system parameters comprise a signature mode; the signature adding and verifying interface is used for dynamically selecting corresponding algorithm implementation classes to carry out encryption signature operation and encryption signature verification operation according to system parameters configured in the background management system; the encryption machine implementation class adopting the national secret algorithm is packaged in the encryption machine method interface, the system achieves flexible selection of the encryption signature algorithm and dynamic switching of encryption machine equipment through parameter configuration in the background management system, guarantees continuity and safety of system services, and efficiently and smoothly completes national secret transformation work of an existing system.

Description

Technical Field

[0001] The present invention relates to the field of information security technology, and specifically to an encryption signature system and method based on dynamic parameter selection. The system and method can flexibly select a national encryption algorithm or an international algorithm for encryption signature according to the parameter configuration in the background management system, and support dynamic switching of encryption machines of multiple manufacturers to ensure the continuity and security of system services. Background Art

[0002] In the process of connecting different systems between banks, in order to ensure the confidentiality, integrity and non-repudiation of transmitted messages, it is necessary to sign and encrypt the transmitted messages and verify and decrypt the response messages each time.

[0003] After years of development, my country's independently developed national encryption algorithms can be independently controlled, reducing external dependence and having higher security. The existing banking system is gradually advancing the process of transforming from international algorithms to national encryption algorithms. In the process of transformation, there are also different encryption machine options. In particular, when it comes to the switching between national encryption algorithms (such as SM2, SM3, etc., cryptographic algorithms independently developed by China) and international algorithms (such as RSA, SHA-256, etc.), as well as the compatibility of multi-vendor encryption machines (hardware encryption provided by various encryption machine manufacturers), the existing system often lacks flexibility and scalability.

[0004] In addition to the above problems, traditional systems often use fixed international algorithms (open source algorithms released by the US Security Agency). However, with the development of technology, although international algorithms are safe and reliable, the security of the source code of the international algorithms themselves cannot be guaranteed and may be attacked or tampered with by external parties.

[0005] In the process of national encryption transformation, most systems will directly replace the original international algorithm with the national encryption algorithm. However, this method is prone to problems caused by "one size fits all" during the improvement process. Figure 1 The existing signature and verification system shown in the figure needs to obtain the object of the specific class to implement the specific signature and verification methods when calling the signature and verification classes. If the interface calls the signature method, after calling the post request to the external system, it is changed to the national encryption algorithm, and the signature verification still uses the international algorithm, then the signature verification fails. The same algorithm is required to ensure the integrity of the business, and the signature and verification must be consistent to have no problems. In this way, the existing business needs to be stopped before the system goes online to ensure that there is no existing business before the encryption algorithm can be changed. If you switch back to the original international algorithm, you may need to switch by rolling back the version or changing the parameters. If you change the encryption machine manufacturer, you may not be able to guarantee the continuity of the existing business. Summary of the invention

[0006] The purpose of the present invention is to provide an encryption signature system and method based on dynamic parameter selection to solve the above technical problems. Through the parameter configuration in the background management system, the flexible selection of encryption signature algorithms and the dynamic switching of encryption machine devices are realized to ensure the continuity and security of system services. The present invention splits the two functions of signature verification and encryption machine selection into the signature verification interface and the encryption machine method interface. Further, through the parameter configuration in the background management system, the flexible selection of encryption signature algorithms and the dynamic switching of encryption machine devices are realized. Certificates can be flexibly switched or encryption machines can be replaced. When the certificate expires or fails, the certificate can be replaced at any time. At the same time, the existing business is not interrupted and the system does not shut down, which ensures the continuity and security of the system business and completes the replacement of the national secret algorithm efficiently and smoothly.

[0007] To achieve the above-mentioned purpose, the present invention provides an encryption signature system based on dynamic parameter selection, including a background management system, a signature adding and verification interface, and an encryption machine method interface, wherein:

[0008] A backend management system is used to configure system parameters, including signature mode;

[0009] The signature verification interface dynamically selects the corresponding algorithm implementation class to perform encryption signature operations and encryption signature verification operations according to the system parameters configured in the background management system;

[0010] The encryption machine method interface encapsulates the encryption machine implementation class using the national secret algorithm;

[0011] When adding a signature, the signature adding and verification interface calls the encryption machine method interface according to the signature method in the background management system. When the signature method is the national secret algorithm, the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation;

[0012] When verifying the signature, the signature adding and verification interface calls the encryption machine method interface according to the received signature method. When the signature method is the national secret algorithm, the signature adding and verification interface selects the encryption machine implementation class of the national secret algorithm to perform encryption and verification operations according to the signature method returned by the encryption machine method interface.

[0013] The system splits the two functions of signing and verification and encryption machine selection into the signing and verification interface and the encryption machine method interface. Through the parameter configuration in the background management system, it realizes the flexible selection of encryption signature algorithm and the dynamic switching of encryption machine equipment, ensuring the continuity and security of system business and completing the replacement of national secret algorithm efficiently and smoothly.

[0014] In one embodiment, the system also includes an international algorithm implementation class,

[0015] When adding a signature, the signature adding and verification interface selects the international algorithm implementation class or the encryption machine method interface to perform the encryption signature operation in the following manner according to the signature method in the background management system:

[0016] When the signature method is an international algorithm, calling the international algorithm implementation class to perform encryption signature operation;

[0017] When the signature method is the national secret algorithm, the encryption machine method interface is called, and the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation according to the signature method;

[0018] When verifying the signature, the signature verification interface selects the national secret algorithm implementation class or the encryption machine method interface to perform encryption and verification operations according to the received signature method in the following way:

[0019] When the signature method is an international algorithm, the international algorithm implementation class is called to perform encryption and signature verification operations;

[0020] When the signature method is the national secret algorithm, the encryption machine implementation class of the national secret algorithm is selected to perform encryption and signature verification operations according to the signature method returned by the encryption machine method interface.

[0021] The system realizes the flexible selection of encryption signature algorithms and the dynamic switching of encryption machine equipment through parameter configuration in the background management system, ensures the continuity and security of system business, and efficiently and smoothly completes the national encryption transformation of the existing system. By isolating the international algorithm from the national encryption algorithm, it is possible to flexibly switch certificates or replace encryption machines. When the certificate expires or becomes invalid, the certificate can be replaced at any time to ensure that the existing business is not interrupted and the system does not shut down.

[0022] In one embodiment, the system parameters also include the encryption machine type, and the encryption machine method interface encapsulates the encryption machine implementation classes of different manufacturers using the national secret algorithm;

[0023] When adding a signature, the signature adding and verification interface selects the national secret algorithm implementation class or the encryption machine method interface to perform encryption and signature operations according to the signature method and encryption machine type in the background management system in the following way:

[0024] When the signature method is the national secret algorithm, the encryption machine method interface is called, and the encryption machine method interface dynamically selects the corresponding encryption machine implementation class using the national secret algorithm to perform encryption signature operations according to the signature method and encryption machine type;

[0025] When verifying the signature, the signature verification interface selects the national encryption algorithm implementation class in the following way according to the signature method and encryption machine type in the background management system:

[0026] When the signature method is the national secret algorithm, the corresponding encryption machine implementation class using the national secret algorithm is dynamically selected to perform encryption and signature verification operations according to the signature method and encryption machine type returned by the encryption machine method interface.

[0027] During the transformation of the national encryption algorithm, the system of the present invention ensures that the system can smoothly transition to the new algorithm through parameter configuration, thereby ensuring business continuity. In the event of an encryption machine failure or the manufacturer no longer supports it, it can quickly switch to other encryption machine implementation classes to ensure stable operation of the system.

[0028] In one embodiment, the system parameters also include a certificate ID, and the certificate ID corresponds to the national secret certificate of an encryption machine that uses a national secret algorithm. When the signature method is the national secret algorithm, the encryption machine method interface dynamically selects the corresponding encryption machine that uses the national secret algorithm and the national secret certificate according to the encryption machine type and the certificate ID, and implements the class to perform encryption signature operations or encryption signature verification operations.

[0029] The system enables the national secret algorithm implementation class to support encryption machines from multiple manufacturers, and provides an extensible encryption machine implementation class interface. Each manufacturer provides specific encryption machine call functions by implementing this interface. The encryption machine implementation class can be dynamically selected for encryption and signature operations based on information such as the encryption machine status and certificate validity period. Through the correspondence between the certificate ID and the encryption machine, the management of the national secret certificate is realized, and the automatic replacement of the certificate when it expires is supported without changing the program or restarting the program.

[0030] The present invention also provides an encryption signature method based on dynamic parameter selection, which is applied to an encryption signature system based on dynamic parameter selection. The system includes a background management system, a signature adding and verification interface, and an encryption machine method interface, wherein:

[0031] When adding a signature, the signature adding and verification interface selects the encryption machine method interface to perform encryption and signature operation according to the system parameters configured by the background management system, and the system parameters include the signature method;

[0032] When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation according to the signature method;

[0033] During the signature verification, the signature verification interface selects the encryption machine method interface to perform the encryption and verification operation according to the system parameters configured by the background management system, and the system parameters include the signature method;

[0034] When the signature method is the national secret algorithm, the signature verification interface selects the encryption machine implementation class of the national secret algorithm to perform encryption and verification operations according to the signature method returned by the encryption machine method interface.

[0035] The method described in the present invention ensures the continuity of system services, and there is no need to change or restart the program even when the encryption algorithm is changed.

[0036] The present invention also provides an encryption signature method based on dynamic parameter selection, which is applied to an encryption signature system based on dynamic parameter selection. The system includes a background management system, a signature adding and verification interface, and an encryption machine method interface, wherein:

[0037] When adding a signature, the signature adding and verification interface selects the international algorithm implementation class or the encryption machine method interface to perform the encryption signature operation according to the system parameters configured by the background management system;

[0038] The system parameters include a signature method. When the signature method is an international algorithm, the signature verification interface calls the international algorithm implementation class to perform encryption and signature operations;

[0039] When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation according to the signature method;

[0040] During the signature verification, the signature verification interface selects the international algorithm implementation class or the encryption machine method interface to perform the encryption and verification operation according to the system parameters configured by the background management system, and the system parameters include the signature mode;

[0041] When the signature method is an international algorithm, the signature verification interface calls the international algorithm implementation class to perform encryption and verification operations;

[0042] When the signature method is the national secret algorithm, the signature verification interface selects the encryption machine implementation class of the national secret algorithm to perform encryption and verification operations according to the signature method returned by the encryption machine method interface.

[0043] The method described in the present invention ensures the continuity of system services, and there is no need to change or restart the program even when the encryption algorithm is changed.

[0044] In one embodiment, the encryption signature method based on dynamic parameter selection, when adding a signature, the signature adding and verification interface selects the national secret algorithm implementation class or the encryption machine method interface according to the system parameters of the background management system to perform the encryption signature operation, and the system parameters also include the encryption machine type, and the encryption machine type corresponds to the encryption machine implementation class using the national secret algorithm of different manufacturers encapsulated by the encryption machine method interface;

[0045] When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface dynamically selects the corresponding encryption machine implementation class using the national secret algorithm to perform encryption signature operations according to the signature method and encryption machine type;

[0046] When verifying the signature, the signature verification interface dynamically selects the corresponding encryption machine implementation class using the national secret algorithm to perform encryption and verification operations based on the signature method and encryption machine type returned by the encryption machine method interface.

[0047] The method described in the present invention ensures the continuity of system services, and there is no need to change or restart the program even when the encryption machine type changes. During the transformation of the national encryption algorithm, parameter configuration is used to ensure that the system can smoothly transition to the new algorithm, thereby ensuring business continuity. In the event of an encryption machine failure or no longer supported by the manufacturer, it can quickly switch to other encryption machine implementation classes to ensure stable operation of the system.

[0048] In one embodiment, the encryption signature method based on dynamic parameter selection, when adding a signature, the signature adding and verification interface selects the national secret algorithm implementation class or the encryption machine method interface according to the system parameters of the background management system to perform the encryption signature operation, and the system parameters also include a certificate ID, and the certificate ID corresponds to the national secret certificate of the encryption machine using the national secret algorithm;

[0049] When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface selects the encryption machine and national secret certificate of the national secret algorithm corresponding to the certificate ID according to the signature method, encryption machine type, and certificate ID, and performs encryption and signature operations;

[0050] When verifying the signature, the signature addition and verification interface calls the encryption machine method interface. The encryption machine method interface selects the encryption machine and national secret certificate of the national secret algorithm corresponding to the certificate ID according to the signature mode, encryption machine type, and certificate ID returned by the encryption machine method interface to perform the encryption and verification operation.

[0051] The method described in the present invention ensures the continuity of system services. Even when the encryption algorithm or encryption machine changes, there is no need to change the program or restart the program. The certificate management process is simplified, and automatic replacement of certificates upon expiration is supported, thereby reducing operation and maintenance costs. The security of the system is enhanced, and the risk resistance of the system is improved through the support of encryption machines from multiple manufacturers. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 Schematic diagram of the existing signature verification system

[0053] Figure 2 Schematic diagram of an encryption signature system based on dynamic parameter selection according to the present invention

[0054] Figure 3 for Figure 2 Flow chart of the signature method used by the encryption signature system based on dynamic parameter selection

[0055] Figure 4 Schematic diagram of another encryption signature system based on dynamic parameter selection according to the present invention

[0056] Figure 5 for Figure 4 Flow chart of the signature method used by the encryption signature system based on dynamic parameter selection

[0057] Figure 6 Schematic diagram of the correspondence between the encryption machine of the national secret algorithm and the national secret certificate DETAILED DESCRIPTION

[0058] In order to clearly describe the encryption signature system and method based on dynamic parameter selection according to the present invention, further explanation is now provided in conjunction with the accompanying drawings.

[0059] like Figure 3 As shown, an encryption signature system based on dynamic parameter selection includes a background management system 1, a signature adding and verification interface 2, and an encryption machine method interface 3, wherein the background management system 1 is signal-connected with the signature adding and verification interface 2, the signature adding and verification interface 2 is signal-connected with the encryption machine method interface 3, and the encryption machine method interface 3 is signal-connected with the implementation class 31 of the national secret algorithm and the implementation class 32 of the national secret algorithm.

[0060] The backend management system 1 is used to configure system parameters, including the signature method.

[0061] like Figure 2 , Figure 3 As shown, the signature adding and verification interface 2 dynamically selects the corresponding algorithm implementation class to perform encryption signature operation and encryption signature verification operation according to the system parameters configured in the background management system 1;

[0062] The encryption machine method interface 3 encapsulates the encryption machine implementation class 31 using the national secret algorithm and the encryption machine implementation class 32 using the national secret algorithm;

[0063] When adding a signature, the signature adding and verification interface 2 selects the encryption machine method interface 3 to perform the encryption signature operation according to the signature method in the background management system 1. When the signature method is the national secret algorithm, the encryption machine method interface 3 is called. The encryption machine method interface 3 selects the encryption machine implementation class 31 of the national secret algorithm or the encryption machine implementation class 32 of the national secret algorithm to perform the encryption signature operation according to the signature method;

[0064] When verifying the signature, the signature adding and verification interface 2 selects the encryption machine method interface 3 to perform the encryption and verification operation according to the received signature method. When the signature method is the national secret algorithm, the encryption machine implementation class 31 of the national secret algorithm or the encryption machine implementation class 32 of the national secret algorithm is selected to perform the encryption and verification operation according to the signature method returned by the encryption machine method interface 3.

[0065] The system splits the two functions of signing and verification and encryption machine selection into signing and verification interface 2 and encryption machine method interface 3, and further implements flexible selection of encryption signature algorithms and dynamic switching of encryption machine devices through parameter configuration in the background management system, ensuring the continuity and security of system business and completing the replacement of national secret algorithms efficiently and smoothly.

[0066] like Figure 5 As shown, an encryption signature system based on dynamic parameter selection includes a background management system 1, a signature adding and verification interface 2, and an encryption machine method interface 3, wherein the background management system 1 is signal-connected with the signature adding and verification interface 2, the signature adding and verification interface 2 is signal-connected with the encryption machine method interface 3 and the international algorithm implementation class 4, and the encryption machine method interface 3 is signal-connected with the national secret algorithm implementation class 31 and the national secret algorithm implementation class 32.

[0067] The backend management system 1 is used to configure system parameters, including the signature method;

[0068] like Figure 4 , Figure 5 As shown, the signature adding and verification interface 2 dynamically selects the corresponding algorithm implementation class to perform encryption signature operation and encryption signature verification operation according to the system parameters configured in the background management system 1;

[0069] The encryption machine method interface 3 encapsulates the encryption machine implementation class 31 using the national secret algorithm and the encryption machine implementation class 32 using the national secret algorithm;

[0070] When adding a signature, the signature adding and verification interface 2 selects the international algorithm implementation class 4 or the encryption machine method interface 3 to perform the encryption signature operation according to the signature method in the background management system 1 in the following way:

[0071] When the signature method is the international algorithm, call the international algorithm implementation class 4 to perform encryption and signature operations;

[0072] When the signature method is the national secret algorithm, the encryption machine method interface 3 is called, and the encryption machine method interface 3 selects the encryption machine implementation class 31 of the national secret algorithm or the encryption machine implementation class 32 of the national secret algorithm to perform encryption signature operation according to the signature method;

[0073] When verifying the signature, the signature verification interface 2 selects the international algorithm implementation class 4 or the encryption machine method interface 3 to perform the encryption verification operation according to the received signature method in the following way:

[0074] When the signature method is an international algorithm, call the international algorithm implementation class 4 to perform encryption and signature verification operations;

[0075] When the signature method is the national secret algorithm, according to the signature method returned by the encryption machine method interface 3, the encryption machine implementation class 31 of the national secret algorithm or the encryption machine implementation class 32 of the national secret algorithm is selected to perform the encryption and signature verification operation.

[0076] The system adds parameter configuration items in the background management system to achieve flexible selection of encryption signature algorithms and dynamic switching of encryption equipment. When verifying the signature, the returned "signature method" parameter is used to select the national encryption algorithm implementation class or the international algorithm implementation class, ensuring the continuity and security of the system's business and completing the national encryption transformation of the existing system efficiently and smoothly.

[0077] The present invention realizes the national secret transformation method on the system by utilizing the open-closed principle, single responsibility, Liskov substitution principle, dependency inversion principle and interface isolation principle in the design pattern.

[0078] In a specific embodiment, the system parameters may further include a certificate ID, such as Figure 6 As shown, the certificate ID corresponds to the national secret certificate of the encryption machine using the national secret algorithm. When the signature method is the national secret algorithm, the encryption machine method interface dynamically selects the corresponding encryption machine using the national secret algorithm and the national secret certificate according to the encryption machine type and certificate ID, and implements the encryption signature operation or encryption signature verification operation.

[0079] The system enables the national secret algorithm implementation class to support encryption machines from multiple manufacturers, and provides an extensible encryption machine implementation class interface. Each manufacturer provides specific encryption machine call functions by implementing this interface. The encryption machine implementation class can be dynamically selected for encryption and signature operations based on information such as the encryption machine status and certificate validity period. Through the correspondence between the certificate ID and the encryption machine, the management of the national secret certificate is realized, and the automatic replacement of the certificate when it expires is supported without changing the program or restarting the program.

[0080] For example, in the national encryption algorithm implementation class, select the required encryption machine mode, and also select different encryption machine implementation classes according to the parameters and certificate ID. If both encryption machine manufacturers support it, the different encryption machine implementation classes can be called according to the strategy of random distribution of two sets of certificates.

[0081] The method applied by this system can reference the development kit provided by the Xin'an Century manufacturer in the Xin'an Century encryption machine implementation class to call the encryption machine to achieve the results of adding and verifying signatures; and reference the development kit provided by the Jiangnan Tianan manufacturer in the Jiangnan Tianan encryption machine implementation class to call the encryption machine to achieve the results of adding and verifying signatures.

[0082] In the system described in the present invention, when the national secret algorithm is modified and launched, if the signature algorithm is an international algorithm, the international algorithm or the national secret algorithm will be selected according to the parameters returned by the called system, thereby ensuring the continuity of system services. If a problem occurs during the implementation of the national secret algorithm during signature, it can be switched to the international algorithm at any time.

[0083] If the national secret certificate expires, you only need to replace the certificate ID. You can obtain the national secret certificate corresponding to the encryption machine through the certificate ID and the corresponding channel, without changing the program or restarting the program. If the encryption machine manufacturer no longer supports it, you can add the implementation class of another manufacturer's encryption machine without affecting the existing code and business. You can choose different encryption machines for encryption. If an encryption machine fails, you can use another set of certificates to switch to other encryption machine implementation classes to complete the signing and verification methods.

Claims

1. An encryption signature system based on dynamic parameter selection, characterized in that: Including background management system, signature verification interface, encryption machine method interface, among which, A backend management system, used to configure system parameters, including signature mode; The signature verification interface dynamically selects the corresponding algorithm implementation class to perform encryption signature operations and encryption signature verification operations according to the system parameters configured in the background management system; The encryption machine method interface encapsulates the encryption machine implementation class using the national secret algorithm; When adding a signature, the signature adding and verification interface calls the encryption machine method interface according to the signature method in the background management system. When the signature method is the national secret algorithm, the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation; When verifying the signature, the signature adding and verification interface calls the encryption machine method interface according to the received signature method. When the signature method is the national secret algorithm, the signature adding and verification interface selects the encryption machine implementation class of the national secret algorithm to perform encryption and verification operations according to the signature method returned by the encryption machine method interface.

2. The encryption signature system based on dynamic parameter selection as claimed in claim 1, characterized in that: The system parameters also include the encryption machine type, and the encryption machine method interface encapsulates the encryption machine implementation classes of different manufacturers using the national secret algorithm; When adding a signature, the signature adding and verification interface selects the national secret algorithm implementation class or the encryption machine method interface to perform encryption and signature operations according to the signature method and encryption machine type in the background management system in the following way: When the signature method is the national secret algorithm, the encryption machine method interface is called, and the encryption machine method interface dynamically selects the corresponding encryption machine implementation class using the national secret algorithm to perform encryption signature operations according to the signature method and encryption machine type; When verifying the signature, the signature verification interface selects the national encryption algorithm implementation class in the following way according to the signature method and encryption machine type in the background management system: When the signature method is the national secret algorithm, the corresponding encryption machine implementation class using the national secret algorithm is dynamically selected to perform encryption and signature verification operations according to the signature method and encryption machine type returned by the encryption machine method interface.

3. The encryption signature system based on dynamic parameter selection as claimed in claim 1, characterized in that: The system parameters also include a certificate ID, which corresponds to the national secret certificate of an encryption machine that uses a national secret algorithm. When the signature method is the national secret algorithm, the encryption machine method interface dynamically selects the corresponding encryption machine that uses the national secret algorithm and the national secret certificate according to the encryption machine type and the certificate ID, and implements the class to perform encryption signature operations or encryption signature verification operations.

4. The encryption signature system based on dynamic parameter selection as claimed in any one of claims 1 to 3, characterized in that: It also includes international algorithm implementation classes, When adding a signature, the signature adding and verification interface selects the international algorithm implementation class or the encryption machine method interface to perform the encryption signature operation according to the signature method in the background management system in the following way: When the signature method is an international algorithm, calling the international algorithm implementation class to perform encryption signature operation; When the signature method is the national secret algorithm, the encryption machine method interface is called, and the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation according to the signature method; When verifying the signature, the signature verification interface selects the international algorithm implementation class or the encryption machine method interface to perform the encryption and verification operation according to the received signature method in the following way: When the signature method is an international algorithm, the international algorithm implementation class is called to perform encryption and signature verification operations; When the signature method is the national secret algorithm, the encryption machine implementation class of the national secret algorithm is selected to perform encryption and signature verification operations according to the signature method returned by the encryption machine method interface.

5. An encryption signature method based on dynamic parameter selection, applied to an encryption signature system based on dynamic parameter selection, characterized in that: The system includes a background management system, a signature verification interface, and an encryption machine method interface. When adding a signature, the signature adding and verification interface selects the encryption machine method interface to perform encryption and signature operation according to the system parameters configured by the background management system, and the system parameters include the signature method; When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation according to the signature method; During the signature verification, the signature verification interface selects the encryption machine method interface to perform the encryption and verification operation according to the system parameters configured by the background management system, and the system parameters include the signature method; When the signature method is the national secret algorithm, the signature verification interface selects the encryption machine implementation class of the national secret algorithm to perform encryption and verification operations according to the signature method returned by the encryption machine method interface.

6. The encryption signature method based on dynamic parameter selection as claimed in claim 5, characterized in that: The system parameters also include the encryption machine type; the encryption machine method interface encapsulates the encryption machine implementation classes of different manufacturers using the national secret algorithm; When adding a signature, the signature adding and verification interface selects the national secret algorithm implementation class or the encryption machine method interface to perform encryption and signature operations according to the signature method and encryption machine type in the background management system in the following way: When the signature method is the national secret algorithm, the encryption machine method interface is called, and the encryption machine method interface dynamically selects the corresponding encryption machine implementation class using the national secret algorithm to perform encryption signature operations according to the signature method and encryption machine type; During the signature verification, the signature verification interface selects the national secret algorithm implementation class or the international algorithm implementation class according to the signature method and encryption machine type in the background management system in the following manner: When the signature method is the national secret algorithm, the corresponding encryption machine implementation class using the national secret algorithm is dynamically selected to perform encryption and signature verification operations according to the signature method and encryption machine type returned by the encryption machine method interface.

7. The encryption signature method based on dynamic parameter selection as claimed in claim 5, characterized in that: The system parameters also include a certificate ID, which corresponds to the national secret certificate of the encryption machine using the national secret algorithm; When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface selects the encryption machine and national secret certificate of the national secret algorithm corresponding to the certificate ID according to the signature method, encryption machine type, and certificate ID, and performs encryption and signature operations; When verifying the signature, the signature addition and verification interface calls the encryption machine method interface. The encryption machine method interface selects the encryption machine and national secret certificate of the national secret algorithm corresponding to the certificate ID according to the signature mode, encryption machine type, and certificate ID returned by the encryption machine method interface to perform the encryption and verification operation.

8. An encryption signature method based on dynamic parameter selection as described in any one of claims 5 to 7, characterized in that: The system also includes international algorithm implementation classes, When adding signatures, the signature adding and verification interface selects the international algorithm implementation class or the encryption machine method interface to perform encryption signature operations according to the system parameters configured by the background management system; When the signature method is an international algorithm, the signature verification interface calls the international algorithm implementation class to perform encryption and signature operations; When the signature method is the national secret algorithm, the signature verification interface calls the encryption machine method interface, and the encryption machine method interface selects the encryption machine implementation class of the national secret algorithm to perform encryption signature operation according to the signature method; During the signature verification, the signature verification interface selects the international algorithm implementation class or the encryption machine method interface to perform the encryption and signature verification operation according to the system parameters configured by the background management system; When the signature method is an international algorithm, the signature verification interface calls the international algorithm implementation class to perform encryption and verification operations; When the signature method is the national secret algorithm, the signature verification interface selects the encryption machine implementation class of the national secret algorithm to perform encryption and verification operations according to the signature method returned by the encryption machine method interface.

Images