Key dynamic updating method and device, equipment and storage medium

Abstract

The invention relates to the technical field of data processing, and discloses a key dynamic updating method and device, equipment and a storage medium, and the method comprises the steps: detecting a triggering mode triggered by an event; when the trigger mode is a preset event trigger mode, generating a trigger signal; and updating the key in parallel according to the trigger signal. An event triggering mechanism is introduced, and when a specific event occurs, key updating is automatically triggered; meanwhile, a multi-key parallel updating mechanism is adopted, that is, in the key updating process, multiple keys are used at the same time for encryption and decryption operation, the smooth key updating process is achieved, and the problems of interruption and unavailability of data are avoided. The multi-key parallel updating also increases the security of key updating, and even if a certain key is leaked, the security of the whole system is not damaged.

Description

Technical Field

[0001] The present invention relates to the field of data processing technology, and in particular to a key dynamic updating method, device, equipment and storage medium. Background Art

[0002] Medical devices such as anesthesia depth monitors generally have the function of collecting and recording patient-related data, including personal information, medical records, medical images, laboratory test results, physiological parameters and other sensitive data.

[0003] Some devices store relevant data in plain text, and some medical devices that use encryption measures have some defects in key updates; for example, the key update process may require interrupting system operation, resulting in data unavailability or service interruption. Summary of the invention

[0004] The present invention aims to provide a key dynamic update method, device, equipment and storage medium, aiming to solve the technical problems of service interruption and data unavailability during the key update process of medical equipment such as anesthesia depth monitor.

[0005] To achieve the above object, the present invention proposes a key dynamic update method, the key dynamic update method comprising:

[0006] Detection event triggering mode;

[0007] When the trigger mode is a preset event trigger mode, a trigger signal is generated;

[0008] The keys are updated in parallel according to the trigger signal.

[0009] In one embodiment, the updating of the key in parallel according to the trigger signal further includes:

[0010] Generate an initial new key corresponding to the key;

[0011] Gradually migrating data to the initial new key to obtain a target new key;

[0012] verifying the target new key;

[0013] When the target new key is verified, the key is updated.

[0014] In one embodiment, the step of verifying the target new key includes:

[0015] Get the public and private keys required for verification;

[0016] Digitally signing the target new key according to the private key;

[0017] The digital signature is verified based on the public key.

[0018] In one embodiment, after the step of updating the key in parallel according to the trigger signal, the method further includes:

[0019] Splitting the target new key into a plurality of new subkeys;

[0020] Obtain a first share number threshold of the new subkey for recovering the target new key;

[0021] When the number of the collected new subkeys reaches the first share number threshold, the new subkeys are merged to form the complete target new key.

[0022] In one embodiment, before the step of updating the key in parallel according to the trigger signal, the step includes:

[0023] Splitting the key into a plurality of subkeys;

[0024] Obtain a second share number threshold of the subkey for recovering the key;

[0025] When the number of the collected subkeys reaches the second share number threshold, the subkeys are merged to form the complete key.

[0026] In one embodiment, when the trigger mode is a preset event trigger mode, generating a trigger signal further includes:

[0027] When the trigger mode is a preset event trigger mode, a time signal and a frequency signal are generated;

[0028] The trigger signal is acquired according to the time signal and the frequency signal.

[0029] In one embodiment, the updating of the key in parallel according to the trigger signal further includes

[0030] Detect system status and user needs;

[0031] Dynamically adjust the frequency and method of key update according to the system status and the user needs;

[0032] The keys are updated in parallel according to the key update frequency and method and the trigger signal.

[0033] In addition, to achieve the above object, the present invention also provides a key dynamic update device, the device comprising:

[0034] A trigger detection module is used to detect the trigger mode of event triggering;

[0035] A signal generating module, used for generating a trigger signal when the trigger mode is a preset event trigger mode;

[0036] The key updating module is used to update the key in parallel according to the trigger signal.

[0037] In addition, to achieve the above-mentioned purpose, the present invention also proposes a key dynamic update device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, and the computer program is configured to implement the steps of the key dynamic update method as described above.

[0038] In addition, to achieve the above-mentioned purpose, the present invention also proposes a storage medium, which is a computer-readable storage medium, and stores a computer program on the storage medium. When the computer program is executed by a processor, the steps of the key dynamic update method as described above are implemented.

[0039] The present invention provides a key dynamic update method, the key dynamic update method comprising: detecting an event-triggered triggering mode; generating a trigger signal when the triggering mode is a preset event triggering mode; and updating keys in parallel according to the triggering signal. The present invention introduces an event triggering mechanism, which automatically triggers key update when a specific event occurs; and adopts a multi-key parallel update mechanism, that is, during the key update process, multiple keys are used simultaneously for encryption and decryption operations to achieve a smooth key update process and avoid interruption and data unavailability problems; multi-key parallel update also increases the security of key update, and even if a key is leaked, it will not cause the security of the entire system to be compromised. BRIEF DESCRIPTION OF THE DRAWINGS

[0040] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the invention and, together with the description, serve to explain the principles of the invention.

[0041] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative labor.

[0042] Figure 1 A schematic diagram of a process flow provided for a first embodiment of a method for dynamically updating a key according to the present invention;

[0043] Figure 2 A schematic diagram of a flow chart of a second embodiment of a method for dynamically updating a key according to the present invention;

[0044] Figure 3 A first flow chart of a method for dynamically updating a key according to a third embodiment of the present invention;

[0045] Figure 4A second flow chart of the third embodiment of the method for dynamically updating a key according to the present invention;

[0046] Figure 5 A third flow chart of a method for dynamically updating a key according to a third embodiment of the present invention;

[0047] Figure 6 This is a schematic diagram of the module structure of a key dynamic update device according to an embodiment of the present invention;

[0048] Figure 7 The present invention is a schematic diagram of a key dynamic update device structure in a hardware operating environment involved in a key dynamic update method in an embodiment of the present invention.

[0049] The purpose, features and advantages of the present invention will be further described with reference to the accompanying drawings in conjunction with the embodiments. DETAILED DESCRIPTION

[0050] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present invention and are not used to limit the present invention.

[0051] In order to better understand the technical solution of the present invention, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0052] The main solution of the embodiment of the present invention is: detecting the triggering mode of event triggering; generating a trigger signal when the triggering mode is a preset event triggering mode; and updating the key in parallel according to the triggering signal.

[0053] Some medical devices that use encryption measures have some defects in key updates. For example, the key update process may require interrupting system operation, resulting in data unavailability or service interruption. In addition, the frequency and method of key updates may be fixed and cannot be adaptively adjusted according to system status and needs.

[0054] The present invention introduces an event trigger mechanism, which automatically triggers key update when a specific event occurs; at the same time, a multi-key parallel update mechanism is adopted, that is, during the key update process, multiple keys are used simultaneously for encryption and decryption operations to achieve a smooth key update process and avoid interruptions and data unavailability problems; the multi-key parallel update also increases the security of the key update, and even if a key is leaked, the security of the entire system will not be compromised.

[0055] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or a key dynamic update device capable of realizing the above functions, etc. The following takes the key dynamic update device as an example to illustrate this embodiment and the following embodiments.

[0056] Based on this, the embodiment of the present invention provides a key dynamic update method, referring to Figure 1 , Figure 1 A flowchart of a first embodiment of a method for dynamically updating a key according to the present invention is provided.

[0057] In this embodiment, the key dynamic update method includes steps S10 to S30:

[0058] Step S10: Detect the triggering mode of the event triggering.

[0059] It should be understood that these events may be time-triggered, operation-number-triggered, specific-condition-triggered, or security-policy-triggered, etc. By means of event-triggered methods, the timing and frequency of key updates may be flexibly controlled.

[0060] It should be noted that time-triggered update means that the key is automatically updated after a predetermined time interval to reduce the risk of the key being cracked due to long-term use; this method is suitable for scenarios with high security requirements, and security risks can be reduced by regularly changing the key.

[0061] It should be understood that the update triggered by the number of operations means that the key is automatically updated after being used a certain number of times; this method can dynamically adjust the update frequency based on risk assessment during the actual use of the key, and is suitable for scenarios where the key is used frequently and the security risk increases with the number of uses.

[0062] It should be noted that condition-triggered updates refer to key updates that are triggered when specific security conditions are met or potential security threats are detected; for example, when unauthorized key usage attempts or signs of system intrusion are detected, the system can immediately update the key to protect sensitive data.

[0063] It should be understood that security policy-triggered updates refer to automatic updates of keys based on preset security policies; these policies may include management of key lifecycles, hierarchical management of keys, and response measures when specific security incidents occur; in this way, the key management system can be more intelligent and automated, ensuring that the keys are always in the best security state.

[0064] Step S20: generating a trigger signal when the trigger mode is a preset event trigger mode.

[0065] It should be noted that the preset event triggering method is the above-mentioned time triggering, operation number triggering, specific condition triggering or security policy triggering, etc.; by designing the logic of the trigger, ensure that the system can correctly generate a trigger signal when the trigger conditions are met; this involves writing conditional judgment statements, setting the activation and disabling mechanism of the trigger, and defining the actions after the trigger, such as sending notifications, calling functions or writing to a database, etc.

[0066] Step S30: updating the key in parallel according to the trigger signal.

[0067] It should be noted that by adopting a mechanism of parallel updating of multiple keys, that is, during the key update process, multiple keys are used simultaneously for encryption and decryption operations; by gradually migrating data and applying new keys, a smooth key update process is achieved to avoid interruptions and data unavailability.

[0068] In this embodiment, the key dynamic update method includes: detecting the triggering mode of event triggering; generating a trigger signal when the triggering mode is a preset event triggering mode; and updating the key in parallel according to the triggering signal. The present invention introduces an event triggering mechanism, which automatically triggers the key update when a specific event occurs; and adopts a multi-key parallel update mechanism, that is, during the key update process, multiple keys are used for encryption and decryption operations at the same time to achieve a smooth key update process and avoid interruptions and data unavailability problems; multi-key parallel update also increases the security of key update, and even if a key is leaked, it will not cause the security of the entire system to be compromised.

[0069] Based on the first embodiment of the present invention, in the second embodiment of the present invention, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be described in detail later. Figure 2 , Figure 2 The flowchart of the second embodiment of the key dynamic update method of the present invention is provided. In step S30, the key dynamic update method further includes:

[0070] Step S301: Generate an initial new key corresponding to the key.

[0071] It should be understood that the initial new key corresponding to the key is generated using a key generation algorithm. The key generation algorithm is based on cryptographic principles and can ensure that the generated new key has sufficient randomness and security. There are many ways to generate new keys, including using a key pair generator (such as RSA, DSA, EC), a key update method based on a hash function, and the use of a key management service.

[0072] Step S302: gradually migrate data to the initial new key to obtain a target new key.

[0073] It should be noted that encrypting data with the initial new key involves processing a large amount of data, so it is necessary to ensure the efficiency and security of the encryption process; gradually migrate the encrypted data to the target new key; and achieve this by migrating data in batches to reduce risks during the migration process.

[0074] Step S303: Verify the target new key.

[0075] It should be understood that key verification and authentication mechanisms are introduced in the step of verifying the target new key to ensure the validity and correctness of the key update; during the key update process, digital signatures or hash algorithms are used to verify the legitimacy of the new key to prevent malicious key updates or tampering; key verification and authentication mechanisms increase the security and reliability of key updates.

[0076] It should be noted that digital signature is a verification method based on asymmetric encryption technology, which combines the process of private key encryption and decryption; in this process, the sender uses his own private key to sign the data, and the receiver uses the sender's public key to verify the validity of the signature; if the signature verification is successful, the receiver can confirm that the message was sent by the sender who owns the corresponding private key and that the message has not been tampered with during transmission.

[0077] It should be understood that the hash algorithm maps data of arbitrary length into a hash value of fixed length, which is usually highly unique and irreversible. In digital signatures, the hash function is used to generate a summary of the data, which is then encrypted with the sender's private key to form a digital signature. When verifying the signature, the receiver recalculates the hash value of the data and compares it with the decrypted signature summary. If the two are consistent, the verification passes, indicating that the data has not been tampered with.

[0078] Step S304: When the target new key is verified, the key is updated.

[0079] It should be noted that before a new key is accepted and used, it needs to go through a series of verification steps to ensure its integrity and security; this may include comparing the key's hash value, using digital signatures and other methods to verify the legitimacy of the key.

[0080] The step S303 further includes:

[0081] Step S305: Obtain the public key and private key required for verification.

[0082] It should be understood that generating a pair of public and private keys is accomplished by using an encryption algorithm such as RSA or elliptic curve cryptography (ECC); in the RSA algorithm, the private key contains two parameters d and n, and the public key contains parameters e and n; these parameters are generated by selecting two large prime numbers p and q, calculating their product n, and then calculating the Euler function φ(n) and an integer d satisfying e*d modφ(n)=1. Step S306: digitally sign the target new key according to the private key.

[0083] It should be noted that the hash value of the target new key is signed using the private key; the hash value of the new key is calculated, and the parameters d and n of the private key are used to encrypt the hash value to generate a signature.

[0084] Step S307: Verify the digital signature according to the public key.

[0085] It should be understood that when verifying a signature, the recipient decrypts the signature using the parameters e and n in the public key to obtain a decrypted value; the recipient then recalculates the hash value for the target new key and compares it with the decrypted value; if the two are the same, the signature is considered valid, which verifies the integrity of the new key and the identity of the sender.

[0086] After step S30, the method further includes:

[0087] Step S308: Split the target new key into multiple new subkeys.

[0088] It should be noted that the Shamir's Secret Sharing (SSS) algorithm splits the target new key into multiple new subkeys; in this method, the key is divided into N shares and distributed to N participants, where any t or more shares can recover the original key, but less than t shares cannot be recovered.

[0089] Step S309: Obtain a first share number threshold for recovering the new subkey of the target new key.

[0090] It should be understood that the first share number threshold of the new subkey required to recover the target new key is a key parameter in the secret sharing scheme, which defines the minimum number of shares required to recover the key; in (t,N) threshold key sharing, t represents the minimum number of shares required.

[0091] Step S310: When the number of the collected new subkeys reaches the first share number threshold, the new subkeys are merged to form the complete target new key.

[0092] It should be noted that when the number of new sub-keys collected reaches the first share number threshold, the recovery process in the secret sharing algorithm can be used to merge these shares to reconstruct the complete target new key; in Shamir's secret sharing, the Lagrange interpolation method is used to recover the original polynomial from the collected shares to obtain the key.

[0093] In this embodiment, an initial new key corresponding to the key is generated, data is gradually migrated to the initial new key to obtain a target new key, the target new key is verified, the public key and private key required for verification are obtained, the target new key is digitally signed according to the private key, the digital signature is verified according to the public key, and when the digital signature verification is passed, the key is updated; by gradually migrating data and applying it to the new key, a smooth key update process is achieved to avoid interruptions and data unavailability. Parallel updating of multiple keys also increases the security of key updates. Even if a key is leaked, the security of the entire system will not be compromised; at the same time, the key is divided into multiple parts and distributed to different authorized entities; only when the keys of all parts are merged can the key be updated; this method increases the security and controllability of key updates and ensures the integrity and security of the key.

[0094] Based on the first embodiment and / or the second embodiment of the present invention, in the third embodiment of the present invention, the same or similar contents as those in the first and second embodiments can be referred to the above description, and will not be described in detail later. Figure 3 , Figure 3 This is a first flow chart of Embodiment 3 of the method for dynamically updating a key according to the present invention.

[0095] Before step S30, the method includes:

[0096] Step S311: Split the key into multiple subkeys;

[0097] Step S312: Obtain a second share number threshold of the subkey for recovering the key;

[0098] Step S313: When the number of the collected sub-keys reaches the second share number threshold, the sub-keys are merged to form the complete key.

[0099] It should be understood that before updating the key, it is necessary to ensure the integrity of the key, divide the key into multiple parts, and distribute them to different authorized entities; only when all parts of the key are merged can the key be updated; this method increases the security and controllability of the key update and ensures the integrity and security of the key.

[0100] Please refer to Figure 4 , Figure 4 The second flow diagram provided for the third embodiment of the key dynamic update method of the present invention, in step S30, further includes:

[0101] Step S314: Detect system status and user needs.

[0102] It should be understood that system status detection usually involves real-time monitoring of system performance indicators, such as CPU usage, memory usage, network traffic, etc., as well as checking the system security status, such as intrusion detection, abnormal behavior analysis, etc.; user demand detection involves analysis of user behavior patterns, such as access frequency, data processing requirements, etc., as well as identification of user security needs, such as requirements for data encryption, identity authentication, etc.

[0103] Step S315: Dynamically adjust the frequency and method of key update according to the system status and the user needs.

[0104] It should be noted that the dynamic adjustment of the key update frequency and method can be based on factors such as system security risk assessment, changes in user access patterns, and key usage frequency; for example, when the system load is high or security threats are detected, the key update frequency can be increased to improve security; and when the user access pattern is stable and the security risk is low, the update frequency can be appropriately reduced to reduce system resource consumption.

[0105] Step S316: updating the key in parallel according to the key update frequency and method and the trigger signal.

[0106] It should be understood that parallel key update refers to the process of updating multiple keys in the system at the same time; this usually involves the design of a key management system to support efficient key distribution and synchronization; the trigger signal can be a time reference (such as regular updates), a system event (such as user login, data transmission, etc.) or a security event (such as detection of unauthorized access); after receiving the trigger signal, the key management system coordinates the update process of multiple keys according to the preset update strategy and the user's key usage to ensure the timeliness and consistency of the update operation.

[0107] Please refer to Figure 5 , Figure 5 The third flow chart provided for the third embodiment of the key dynamic update method of the present invention further includes, in step S20:

[0108] Step S201: When the trigger mode is a preset event trigger mode, a time signal and a frequency signal are generated.

[0109] It should be noted that timing signals usually refer to instructions that the system needs to perform tasks at specific time points; these signals can be generated by timers or clock signals to ensure that the system's actions are synchronized with the predetermined schedule; frequency signals involve the generation of periodic events, which can be achieved through oscillators or digital frequency synthesizers; the design of frequency signals needs to be determined according to the requirements of the system to ensure that the trigger signal can be generated at the correct frequency.

[0110] Step S202: Acquire the trigger signal according to the time signal and the frequency signal.

[0111] It should be understood that based on the generated timing signal and frequency signal, the system's control logic will calculate the specific time of the trigger signal; this may involve a comprehensive analysis of the timing signal and the frequency signal, as well as possible time delays or phase adjustments to ensure that the trigger signal is activated at the correct time point.

[0112] In this embodiment, before updating the key, the key is divided into multiple sub-keys, and then a second share number threshold of the sub-key for recovering the key is obtained. When the number of the collected sub-keys reaches the second share number threshold, the sub-keys are merged to form a complete key; during the key update process, the system status and user needs are detected, and the frequency and method of key update are dynamically adjusted according to the system status and the user needs, and the key is updated in parallel according to the frequency and method of key update and the trigger signal; when the trigger method is a preset event trigger method, a time signal and a frequency signal are generated, and the trigger signal is obtained according to the time signal and the frequency signal; the method of the present invention has the characteristics of adaptive adjustment, and automatically adjusts the frequency and method of key update according to the system status and needs; for example, according to the system load, security events or user needs, the time interval and strategy of key update are dynamically adjusted to balance security and performance.

[0113] The above are only some embodiments of the present invention, and the scope of implementation of the present invention is not limited thereto. Any equivalent structure or equivalent process transformation made by using the contents of the present invention description and drawings, or directly or indirectly applied in other related technical fields, are also included in the protection scope of the present invention.

[0114] The present invention also provides a key dynamic update device, please refer to Figure 6 , the key dynamic updating device comprises:

[0115] A trigger detection module 10, used to detect the triggering mode of the event trigger;

[0116] A signal generating module 20, configured to generate a trigger signal when the trigger mode is a preset event trigger mode;

[0117] The key updating module 30 is used to update the keys in parallel according to the trigger signal.

[0118] Optionally, the key update module 30 is also used to generate an initial new key corresponding to the key; gradually migrate data to the initial new key to obtain a target new key; verify the target new key; when the target new key is verified, complete the update of the key.

[0119] Optionally, the key updating module 30 is further used to obtain a public key and a private key required for verification; digitally sign the target new key according to the private key; and verify the digital signature according to the public key.

[0120] Optionally, the key update module 30 is also used to split the key into multiple sub-keys; obtain a first share number threshold of the sub-key for recovering the key; when the number of the collected sub-keys reaches the first share number threshold, merge the sub-keys to form the complete key.

[0121] Optionally, the key update module 30 is also used to detect system status and user needs; dynamically adjust the frequency and method of key update according to the system status and the user needs; and update the key in parallel according to the frequency and method of key update and the trigger signal.

[0122] Optionally, the key update module 30 is also used to split the target new key into multiple new sub-keys; obtain a second share number threshold of the new sub-key for recovering the target new key; when the number of the collected new sub-keys reaches the second share number threshold, merge the new sub-keys to form the complete target new key.

[0123] Optionally, the power determination module 20 is further configured to generate a time signal and a frequency signal when the trigger mode is a preset event trigger mode; and obtain the trigger signal according to the time signal and the frequency signal.

[0124] The key dynamic update device provided by the present invention adopts the key dynamic update method in the above embodiment, which can solve the technical problems of service interruption and data unavailability during the key update process of medical equipment such as anesthesia depth monitors. Compared with the prior art, the beneficial effects of the key dynamic update device provided by the present invention are the same as the beneficial effects of the key dynamic update method provided by the above embodiment, and other technical features in the key dynamic update device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0125] The present invention provides a key dynamic update device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the key dynamic update method in the above-mentioned embodiment one.

[0126] Reference below Figure 7, which shows a schematic diagram of the structure of a key dynamic update device suitable for implementing the embodiment of the present invention. The key dynamic update device in the embodiment of the present invention may include but is not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 7 The key dynamic update device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present invention.

[0127] like Figure 7 As shown, the key dynamic update device may include a processing device 1001 (such as a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for device operation are also stored. The processing device 1001, ROM1002 and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the key dynamic update device to communicate with other devices wirelessly or wired to exchange data. Although the key dynamic update device with various systems is shown in the figure, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or provided alternatively.

[0128] In particular, according to the embodiments disclosed in the present invention, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present invention include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program contains program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through a communication device, or installed from the storage device 1003, or installed from the ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present invention are executed.

[0129] The key dynamic update device provided by the present invention adopts the key dynamic update method in the above embodiment, which can solve the technical problems of service interruption and data unavailability during the key update process of medical equipment such as anesthesia depth monitors. Compared with the prior art, the beneficial effects of the key dynamic update device provided by the present invention are the same as the beneficial effects of the key dynamic update method provided by the above embodiment, and other technical features in the key dynamic update device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0130] It should be understood that the various parts disclosed in the present invention can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0131] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

[0132] The present invention provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, wherein the computer-readable program instructions are used to execute the key dynamic update method in the above-mentioned embodiment.

[0133] The computer-readable storage medium provided by the present invention may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any suitable medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.

[0134] The computer-readable storage medium may be included in the key dynamic update device; or may exist independently without being assembled into the key dynamic update device.

[0135] Computer program code for performing the operations of the present invention may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0136] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present invention. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0137] The modules involved in the embodiments of the present invention may be implemented by software or hardware, wherein the name of the module does not limit the unit itself in some cases.

[0138] The readable storage medium provided by the present invention is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned key dynamic update method, and can solve the technical problems of service interruption and data unavailability during the key update process of medical equipment such as anesthesia depth monitors. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present invention are the same as the beneficial effects of the key dynamic update method provided by the above-mentioned embodiment, and will not be repeated here.

[0139] The above descriptions are only some embodiments of the present invention, and are not intended to limit the patent scope of the present invention. All equivalent structural changes made using the contents of the present invention's specification and drawings under the technical concept of the present invention, or directly / indirectly applied in other related technical fields, are included in the patent protection scope of the present invention.

Claims

1. A key dynamic update method, characterized in that: The key dynamic update method comprises: Detection event triggering mode; When the trigger mode is a preset event trigger mode, a trigger signal is generated; The keys are updated in parallel according to the trigger signal.

2. The key dynamic update method according to claim 1, characterized in that: The updating of the key in parallel according to the trigger signal also includes: Generate an initial new key corresponding to the key; Gradually migrating data to the initial new key to obtain a target new key; verifying the target new key; When the target new key is verified, the key is updated.

3. The key dynamic update method according to claim 2, characterized in that: The step of verifying the target new key comprises: Get the public and private keys required for verification; Digitally signing the target new key according to the private key; The digital signature is verified based on the public key.

4. The key dynamic update method according to claim 2, characterized in that: After the step of updating the key in parallel according to the trigger signal, the method further includes: Splitting the target new key into a plurality of new subkeys; Obtain a first share number threshold of the new subkey for recovering the target new key; When the number of the collected new subkeys reaches the first share number threshold, the new subkeys are merged to form the complete target new key.

5. The key dynamic update method according to claim 1, characterized in that: Before the step of updating the key in parallel according to the trigger signal, the method includes: Splitting the key into a plurality of subkeys; Obtain a second share number threshold of the subkey for recovering the key; When the number of the collected subkeys reaches the second share number threshold, the subkeys are merged to form the complete key.

6. The key dynamic update method according to claim 1, characterized in that: When the trigger mode is a preset event trigger mode, a trigger signal is generated, and further includes: When the trigger mode is a preset event trigger mode, a time signal and a frequency signal are generated; The trigger signal is acquired according to the time signal and the frequency signal.

7. The key dynamic update method according to claim 1, characterized in that: The updating of the key in parallel according to the trigger signal also includes Detect system status and user needs; Dynamically adjust the frequency and method of key update according to the system status and the user needs; The keys are updated in parallel according to the key update frequency and method and the trigger signal.

8. A key dynamic update device, characterized in that: The device comprises: A trigger detection module is used to detect the trigger mode of event triggering; A signal generating module, used for generating a trigger signal when the trigger mode is a preset event trigger mode; The key updating module is used to update the key in parallel according to the trigger signal.

9. A key dynamic update device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the key dynamic update method according to any one of claims 1 to 7.

10. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the key dynamic update method according to any one of claims 1 to 7 are implemented.

Images