Key updating method and device for guaranteeing service continuity and service system

Abstract

The invention provides a key updating method and device for guaranteeing service continuity and a service system. The method comprises the following steps: controlling a first dense management node to receive a key updating request and send the key updating request to a second dense management node; controlling the second secret management node to update a second sub-key of the secret key and the target identification information, and sending the password issuing instruction to the first secret management node; controlling the first secret management node to update a second sub-key, a first sub-key and a third sub-key of the secret key according to the password issuing instruction, and sending a first secret key activation instruction to the second secret management node; controlling the second dense management node to update a first sub-key, a third sub-key and target identification information of the key according to the first key activation instruction, and sending first feedback information to the first dense management node; and controlling the first secret management node to issue the updated secret key to the service node to complete secret key updating. According to the method, the problem of transaction failure caused by inconsistent keys of different nodes due to network fluctuation in a key updating process in the prior art is solved.

Description

Technical Field

[0001] The present invention relates to the technical field of key management, and in particular to a key updating method, device, computer-readable storage medium and business system for ensuring business continuity. Background Art

[0002] With the gradual development of the financial industry, financial information systems have very high requirements for business continuity. Cryptography technology is an important key technology to support the security of financial information systems. It is the core capability to ensure the confidentiality of financial transaction data, data integrity, identity authenticity, non-repudiation of behavior and other security functions. Among them, the regular update of key data is a necessary condition for realizing the security capabilities of cryptography technology. In the key update interaction scenario between the head office and the branch, the key update may fail due to network fluctuations or long network delays. As a result, the key will be inconsistent during the synchronization process of key updates at each node, resulting in transaction failures, which will affect the business continuity of financial transactions.

[0003] In summary, the password updating method in the prior art has the problem of transaction failure due to inconsistent passwords when the network fluctuates or the network delay is long. Summary of the invention

[0004] The main purpose of the present application is to provide a key update method, device, computer-readable storage medium and business system for ensuring business continuity, so as to at least solve the problem in the prior art that network fluctuations during the key update process cause inconsistency of keys of different nodes, resulting in transaction failure.

[0005] In order to achieve the above-mentioned purpose, according to one aspect of the present application, a key update method for ensuring business continuity is provided, the key update method is used to control the business system to update the key, the business system includes a first key management node and a second key management node, the first key management node is used to manage the key of the service node, and the second key management node is used to manage the key of the first key management node, the method includes: controlling the first key management node to receive the key update request of the service node and send it to the second key management node, the key update request is used to indicate the periodic update of the key stored in the business system, the key includes a first subkey, a second subkey, a third subkey and target identification information, the target identification information is used to characterize whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, it is determined that the transaction business verification has passed; when the second key management node receives the key update request, controlling the second The key management node generates and updates the second subkey and the target identification information of the key in sequence, and generates a password issuing instruction based on the updated key and sends it to the first key management node; when the first key management node receives the password issuing instruction, the first key management node is controlled to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction, and generates a first key activation instruction based on the updated key and sends it to the second key management node; when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information and sends it to the first key management node, the first feedback information is used to indicate that the second subkey is successfully activated; when the first key management node receives the first feedback information, the first key management node is controlled to issue the updated key to the service node to complete the key update.

[0006] Optionally, after controlling the second key management node to generate and sequentially update the second subkey and the target identification information of the key, the method further includes: controlling the second key management node to generate a first key synchronization instruction according to the updated key and sending it to other second key management nodes, wherein the first key synchronization instruction is used to instruct other second key management nodes to sequentially update the second subkey and the target identification information of the key.

[0007] Optionally, after controlling the second key management node to generate a first key synchronization instruction according to the updated key and sending it to other second key management nodes, the method also includes: when other second key management nodes receive the first key synchronization instruction, controlling other second key management nodes to sequentially update the second subkey and the target identification information of the key according to the first key synchronization instruction, and generating second feedback information and sending it to the second key management node, the second feedback information being used to characterize that key synchronization of other second key management nodes is successful.

[0008] Optionally, after controlling the first key management node to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuance instruction, the method also includes: controlling the first key management node to generate a second key synchronization instruction according to the updated key and sending it to other first key management nodes, the second key synchronization instruction is used to instruct other first key management nodes to update the second subkey, the first subkey and the third subkey of the key in sequence.

[0009] Optionally, after controlling the first key management node to generate a second key synchronization instruction according to the updated key and sending it to other first key management nodes, the method further includes: when other first key management nodes receive the second key synchronization instruction, controlling other first key management nodes to update the second sub-key, the first sub-key and the third sub-key of the key in sequence according to the second key synchronization instruction, and generating third feedback information and sending it to the first key management node, the third feedback information being used to characterize that key synchronization of other first key management nodes is successful.

[0010] Optionally, after controlling the second key management node to sequentially update the first subkey, the third subkey and the target identification information of the key according to the first key activation instruction, the method further includes: controlling the second key management node to generate a second key activation instruction according to the updated key and sending it to other second key management nodes, and the second key activation execution is used to instruct other second key management nodes to sequentially update the first subkey, the third subkey and the target identification information of the key.

[0011] Optionally, after controlling the second key management node to generate a second key activation instruction according to the updated key and sending it to other second key management nodes, the method also includes: when other second key management nodes receive the second key activation instruction, controlling other second key management nodes to update the first subkey, the third subkey and the target identification information of the key in sequence according to the second key activation instruction, and generating a fourth feedback instruction and sending it to the second key management node, the fourth feedback instruction being used to indicate that the key activation of the second key management node is successful.

[0012] According to another aspect of the present application, a key updating device for ensuring business continuity is provided, the key updating device is used to control a business system to perform key updating, the business system includes a first key management node and a second key management node, the first key management node is used to manage the key of the service node, and the second key management node is used to manage the key of the first key management node, the device includes: a first control unit, used to control the first key management node to receive a key update request from the service node and send it to the second key management node, the key update request is used to indicate periodic updating of the key stored in the business system, the key includes a first subkey, a second subkey, a third subkey and target identification information, the target identification information is used to characterize whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, it is determined that the transaction business verification has passed; a second control unit, used to control the second key management node to generate and sequentially update the key when the second key management node receives the key update request updating the second subkey and the target identification information of the key, and generating a password issuing instruction according to the updated key and sending it to the first key management node; a third control unit, for controlling the first key management node to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuing instruction when the first key management node receives the password issuing instruction, and generating a first key activation instruction according to the updated key and sending it to the second key management node; a fourth control unit, for controlling the second key management node to sequentially update the first subkey, the third subkey and the target identification information of the key according to the first key activation instruction when the second key management node receives the first key activation instruction, and generating first feedback information and sending it to the first key management node, the first feedback information being used to indicate that the second subkey has been successfully activated; a fifth control unit, for controlling the first key management node to issue the updated key to the service node to complete the key update when the first key management node receives the first feedback information.

[0013] According to another aspect of the present application, a computer-readable storage medium is provided, wherein the computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute any one of the methods described.

[0014] According to another aspect of the present application, a business system is provided, comprising: one or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and are configured to be executed by the one or more processors, and the one or more programs include means for executing any one of the methods described.

[0015] Applying the technical solution of the present application, in the above-mentioned key update method for ensuring business continuity, first, the above-mentioned first key management node is controlled to receive the key update request of the above-mentioned service node and send it to the above-mentioned second key management node, the above-mentioned key update request is used to indicate the periodic update of the key stored in the above-mentioned business system, the above-mentioned key includes a first subkey, a second subkey, a third subkey and a target identification information, the above-mentioned target identification information is used to characterize whether the above-mentioned second subkey is effective, and when any one of the above-mentioned first subkey, the above-mentioned second subkey and the above-mentioned third subkey satisfies the transaction business verification of the above-mentioned first key management node by the above-mentioned second key management node, it is determined that the above-mentioned transaction business verification has passed; then, when the above-mentioned second key management node receives the above-mentioned key update request, the above-mentioned second key management node is controlled to generate and sequentially update the above-mentioned second subkey and the above-mentioned target identification information of the above-mentioned key, and issue an instruction based on the updated key generation password and send it to the first key management node; thereafter, when the first key management node receives the password issuing instruction, the first key management node is controlled to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node; thereafter, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates a first feedback information and sends it to the first key management node, and the first feedback information is used to indicate that the second subkey is successfully activated; finally, when the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update. The present application sets a multimodal key, including an active key, a new key and an old key, and an identification information flag for characterizing whether the new key is activated. During the password update process, the new key, active key and old key stored in different nodes are updated in sequence based on the information interaction between the first key management node and the second key management node. A verification mechanism is set based on the order of key update, that is, if any subkey in the key is verified, the disclosure is allowed. This ensures that during the key update process, at least one subkey is the same between the first key management node, the second key management node and the service node to complete the verification, thereby ensuring the key consistency of business transactions. This method solves the problem in the prior art that network fluctuations during the key update process cause inconsistency in keys of different nodes, resulting in transaction failures. BRIEF DESCRIPTION OF THE DRAWINGS

[0016] Figure 1A hardware structure block diagram of a mobile terminal according to a key updating method for ensuring service continuity provided in an embodiment of the present application is shown;

[0017] Figure 2 A schematic diagram of a process of a key updating method for ensuring business continuity provided according to an embodiment of the present application is shown;

[0018] Figure 3 A schematic diagram of an interaction process between nodes of a business system provided according to an embodiment of the present application is shown;

[0019] Figure 4 A structural block diagram of a key updating device for ensuring service continuity provided according to an embodiment of the present application is shown.

[0020] The above drawings include the following reference numerals:

[0021] 102, processor; 104, memory; 106, transmission device; 108, input and output devices. DETAILED DESCRIPTION

[0022] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present application will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0023] In order to enable those skilled in the art to better understand the solution of the present application, the technical solution in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in this field without creative work should fall within the scope of protection of the present application.

[0024] It should be noted that the terms "first", "second", etc. in the specification and claims of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequential order. It should be understood that the data used in this way can be interchanged where appropriate, so that the embodiments of the present application described here. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0025] As introduced in the background technology, the password updating method in the prior art has the problem of password inconsistency leading to transaction failure when the network fluctuates or the network delay is long. In order to solve the problem in the prior art that network fluctuations during the key update process cause inconsistency of keys of different nodes leading to transaction failure, the embodiments of the present application provide a key update method, device, computer-readable storage medium and business system for ensuring business continuity.

[0026] The technical solutions in the embodiments of the present invention will be described clearly and completely below in conjunction with the accompanying drawings in the embodiments of the present invention.

[0027] The method embodiments provided in the embodiments of the present application can be executed in a mobile terminal, a computer terminal or a similar computing device. Taking running on a mobile terminal as an example, Figure 1 FIG. 1 is a hardware structure block diagram of a mobile terminal of a key updating method for ensuring service continuity according to an embodiment of the present invention. Figure 1 As shown, the mobile terminal may include one or more ( Figure 1 Only one is shown in the figure) a processor 102 (the processor 102 may include but is not limited to a processing device such as a microprocessor MCU or a programmable logic device FPGA) and a memory 104 for storing data, wherein the mobile terminal may also include a transmission device 106 and an input / output device 108 for communication functions. It can be understood by those skilled in the art that Figure 1 The structure shown is only for illustration and does not limit the structure of the mobile terminal. Figure 1 More or fewer components as shown, or with Figure 1 Different configurations are shown.

[0028] The memory 104 can be used to store computer programs, for example, software programs and modules of application software, such as the computer program corresponding to the display method of device information in the embodiment of the present invention. The processor 102 executes various functional applications and data processing by running the computer program stored in the memory 104, that is, the above method is implemented. The memory 104 may include a high-speed random access memory, and may also include a non-volatile memory, such as one or more magnetic storage devices, flash memory, or other non-volatile solid-state memory. In some examples, the memory 104 may further include a memory remotely arranged relative to the processor 102, and these remote memories can be connected to the mobile terminal via a network. Examples of the above-mentioned network include but are not limited to the Internet, an intranet, a local area network, a mobile communication network, and a combination thereof. The transmission device 106 is used to receive or send data via a network. The above-mentioned specific examples of the network may include a wireless network provided by a communication provider of the mobile terminal. In one example, the transmission device 106 includes a network adapter (Network Interface Controller, referred to as NIC), which can be connected to other network devices through a base station so as to communicate with the Internet. In one example, the transmission device 106 may be a radio frequency (RF) module, which is used to communicate with the Internet wirelessly.

[0029] In this embodiment, a key update method for ensuring business continuity is provided, which runs on a mobile terminal, a computer terminal or a similar computing device. It should be noted that the steps shown in the flowchart of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and although a logical order is shown in the flowchart, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0030] Figure 2 1 is a flow chart of a key updating method for ensuring service continuity according to an embodiment of the present application. Figure 2 As shown, the method comprises the following steps:

[0031] Step S201, controlling the first key management node to receive a key update request from the service node and sending the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, determining that the transaction business verification has passed;

[0032] Specifically, the present application provides a method for updating keys between the key management system of the head office and the key management system of the branch, wherein the tamper-proof verification code (MAC) is generated by the branch system and verified by the head office system. It is mainly achieved by setting multiple different parts in the key, i.e., multi-modal keys, and performing asynchronous updates during the update process to ensure that during the update process of each part, at least one part can be used for transaction verification, thereby achieving normal operation of the transaction.

[0033] In the specific implementation, a two-level node is taken as an example for explanation, wherein P is the branch key management node, i.e. the above-mentioned first key management node, and C is the head office key management node, i.e. the above-mentioned second key management node. The business system includes multiple of the above-mentioned first key management nodes and multiple of the above-mentioned second key management nodes. The following will take a single P node and a single C node as examples for explanation. In addition, the business system also includes a service system, which is the initiator of the key update application, i.e. the above-mentioned service node.

[0034] It can be understood that the present application sets multimodal keys, including active keys, new keys and old keys, and adopts a rotation method when verifying the key management node of the head office, using the active key, new key and old key in turn.

[0035] Before the service node initiates the key update request, each node and the corresponding multi-modal key are shown in Table 1.

[0036] Table 1

[0037]

[0038] Furthermore, if Figure 3 As shown in step 1 and step 2, the first key management node P1 is controlled to receive the key update request of the service node and send it to the second key management node. Before the key update request sent in step 2 is received by the C1 node, the key corresponding to each node is consistent with the initial state. P1 receives the key update request initiated by the service node and sends it to C1.

[0039] Step S202, when the second key management node receives the key update request, controls the second key management node to generate and sequentially update the second subkey of the key and the target identification information, and generates a password based on the updated key and sends it to the first key management node;

[0040] Specifically, Figure 3As shown in step 2 and step 5, C1 receives the key update request, controls the C1 node to generate a new key, and updates the new key of the C1 node according to the newly generated key, as well as flag, i.e., the target identification information, and then C1 generates the password issuance instruction and sends it to the P1 node. After step 2 is executed and before P1 receives the key update request, each node and the corresponding multimodal key are shown in Table 2.

[0041] Table 2

[0042]

[0043] It can be seen that the head office key management nodes C1 and C2 can be verified through the active key or the old key to ensure the key consistency of financial business transactions when network communication is abnormal.

[0044] Step S203, when the first key management node receives the password issuing instruction, the first key management node is controlled to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node;

[0045] Specifically, Figure 3 As shown in step 5 and step 8, P1 receives the above password issuance instruction and uses the updated new key pair to activate the new key, active key and old key of the P1 node. After step 5 is executed and before the C1 node receives the above first key activation instruction, each node and the corresponding multi-modal key are shown in Table 3.

[0046] Table 3

[0047]

[0048] It can be seen that the head office key management node C1 can verify the P1 node through the new key.

[0049] Step S204, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information to send to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully;

[0050] Specifically, Figure 3As shown in step 8 and step 10, C1 receives the first key activation instruction and updates the active key, old key and flag of the C1 node in sequence according to the first key activation instruction. After step 8 is executed and before the P1 node receives the first feedback information, each node and the corresponding multimodal key are as shown in Table 4 (the key synchronization process between C1 and C2 is not included, and the actual C1 and C2 keys are consistent at this time).

[0051] Table 4

[0052]

[0053] It can be seen that the head office key management node C1 can verify the node P1 by using any one of the active key, new key and old key.

[0054] Step S205: When the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update.

[0055] Specifically, Figure 3 As shown in step 11, the return message of the key update completed by P1 is sent to the above-mentioned service node. Since this process, the keys of all nodes in the business system remain consistent. After this step is executed, each node and the corresponding multimodal key are the same as the key updated in step 9.

[0056] Through this embodiment, first, the first key management node is controlled to receive the key update request of the service node and send it to the second key management node, the key update request is used to indicate the periodic update of the key stored in the business system, the key includes the first subkey, the second subkey, the third subkey and the target identification information, the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, it is determined that the transaction business verification is passed; then, when the second key management node receives the key update request, the second key management node is controlled to generate and sequentially update the second subkey and the target identification information of the key, and issue an instruction based on the updated key generation password to the first key management node; thereafter , when the first key management node receives the password issuing instruction, the first key management node is controlled to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node; thereafter, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information and sends it to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully; finally, when the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update. The present application sets a multimodal key, including an active key, a new key and an old key, and an identification information flag for characterizing whether the new key is activated. During the password update process, the new key, active key and old key stored in different nodes are updated in sequence based on the information interaction between the first key management node and the second key management node. A verification mechanism is set based on the order of key update, that is, if any subkey in the key is verified, the disclosure is allowed. This ensures that during the key update process, at least one subkey is the same between the first key management node, the second key management node and the service node to complete the verification, thereby ensuring the key consistency of business transactions. This method solves the problem in the prior art that network fluctuations during the key update process cause inconsistency in keys of different nodes, resulting in transaction failures.

[0057] In order to ensure that multiple head office key management nodes can verify the branch key management nodes, in an optional implementation, after controlling the second key management node to generate and sequentially update the second subkey of the key and the target identification information, the method further includes:

[0058] Step S301, controlling the second key management node to generate a first key synchronization instruction according to the updated key and sending it to other second key management nodes, wherein the first key synchronization instruction is used to instruct other second key management nodes to update the second subkey of the key and the target identification information in sequence.

[0059] Specifically, as shown in Table 3, after the key of P1 is updated in step 5, the head office key management node C2 cannot verify P1. Therefore, the present application sets the key synchronization of C2 through C1 before P1 updates the key, that is, the C1 node sends the above-mentioned first key synchronization instruction to the C2 node, such as Figure 3 As shown in step 3.

[0060] In order to complete key synchronization of other head office key management nodes, in an optional implementation, after controlling the second key management node to generate a first key synchronization instruction according to the updated key and sending it to the other second key management nodes, the method further includes:

[0061] Step S401, when the other second key management nodes receive the first key synchronization instruction, control the other second key management nodes to update the second subkey of the key and the target identification information in sequence according to the first key synchronization instruction, and generate second feedback information to send to the second key management nodes, and the second feedback information is used to indicate that the key synchronization of the other second key management nodes is successful.

[0062] Specifically, Figure 3 As shown in step 3 and step 4, C2 receives the first key synchronization instruction, updates the new key and flag according to the first key synchronization instruction, and feeds back the C1 node according to the synchronization result. After step 3 is executed, each node and the corresponding multi-modal key are shown in Table 5.

[0063] Table 5

[0064]

[0065] It can be seen that since the key of C2 node is consistent with that of C1 node, it can be guaranteed that after step 5 is executed, the head office key management node C2 can verify the P1 node through the new key. Both C1 and C2 nodes can verify the P2 node through the active key.

[0066] In order to ensure that the head office key management node can verify multiple branch key management nodes, in an optional implementation, after controlling the first key management node to issue instructions to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password, the method further includes:

[0067] Step S501, controlling the first key management node to generate a second key synchronization instruction according to the updated key and sending it to other first key management nodes, wherein the second key synchronization instruction is used to instruct other first key management nodes to update the second subkey, the first subkey and the third subkey of the key in sequence.

[0068] Specifically, as shown in Table 4, after the key of C1 is updated in step 8, the C1 node cannot authenticate the P2 node. Therefore, the present application sets the key synchronization of P2 through P1 before C1 updates the key, such as Figure 3 As shown in step 6.

[0069] In order to complete the key update of other branch key management nodes, in an optional implementation, after controlling the first key management node to generate a second key synchronization instruction according to the updated key and sending it to other first key management nodes, the method further includes:

[0070] Step S601, when the other first key management nodes receive the second key synchronization instruction, control the other first key management nodes to update the second subkey, the first subkey and the third subkey of the key in sequence according to the second key synchronization instruction, and generate third feedback information to send to the first key management node, and the third feedback information is used to indicate that the key synchronization of the other first key management nodes is successful.

[0071] Specifically, Figure 3 As shown in step 6 and step 7, P2 receives the second key synchronization instruction, updates the new key, active key and old key according to the second key synchronization instruction, and feeds back the C1 node according to the synchronization result. After step 6 is executed, each node and the corresponding multi-modal key are shown in Table 6.

[0072] Table 6

[0073]

[0074] It can be seen that since the key of P2 node is consistent with that of P1 node, it can be guaranteed that after step 6 is executed, the head office key management node C1 can verify P1 and P2 nodes with the new key. The key of C2 is consistent with that of C1, so C2 can also verify P1 and P2 nodes with the new key.

[0075] To ensure the consistency of the key, in an optional implementation manner, after controlling the second key management node to sequentially update the first subkey, the third subkey and the target identification information of the key according to the first key activation instruction, the method further includes:

[0076] Step S701, controlling the second key management node to generate a second key activation instruction according to the updated key and sending it to other second key management nodes, wherein the second key activation is executed to instruct other second key management nodes to update the first subkey, the third subkey and the target identification information of the key in sequence.

[0077] Specifically, in order to ensure the key consistency in the business system, after the C1 node updates the key according to the above-mentioned first key activation instruction, a second key activation instruction is generated according to the updated key and sent to C2 for synchronous activation.

[0078] In order to ensure the consistency of the key, in an optional implementation manner, after controlling the second key management node to generate a second key activation instruction according to the updated key and sending it to other second key management nodes, the method further includes:

[0079] Step S801, when the other second key management nodes receive the second key activation instruction, control the other second key management nodes to update the first subkey, the third subkey and the target identification information of the key in sequence according to the second key activation instruction, and generate a fourth feedback instruction to send to the second key management node, and the fourth feedback instruction is used to indicate that the key activation of the second key management node is successful.

[0080] Specifically, Figure 3 As shown in step 9, C2 receives the second key activation instruction and updates the active key, old key and flag according to the second key activation instruction. After step 9 is executed, each node and the corresponding multi-modal key are shown in Table 7.

[0081] Table 7

[0082]

[0083] It should be noted that the steps shown in the flowcharts of the accompanying drawings can be executed in a computer system such as a set of computer executable instructions, and that, although a logical order is shown in the flowcharts, in some cases, the steps shown or described can be executed in an order different from that shown here.

[0084] The embodiment of the present application also provides a key update device for ensuring business continuity. It should be noted that the key update device for ensuring business continuity in the embodiment of the present application can be used to execute the key update method for ensuring business continuity provided in the embodiment of the present application. The device is used to implement the above-mentioned embodiments and preferred implementation modes, and the descriptions that have been made will not be repeated. As used below, the term "module" can implement a combination of software and / or hardware for a predetermined function. Although the device described in the following embodiments is preferably implemented in software, the implementation of hardware, or a combination of software and hardware, is also possible and conceivable.

[0085] The following introduces a key updating device for ensuring business continuity provided by an embodiment of the present application.

[0086] Figure 4 1 is a structural block diagram of a key updating device for ensuring service continuity according to an embodiment of the present application. Figure 4 As shown, the device comprises:

[0087] The first control unit 10 is used to control the first key management node to receive the key update request of the service node and send it to the second key management node, wherein the key update request is used to instruct to periodically update the key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, it is determined that the transaction business verification has passed;

[0088] Specifically, the present application provides a method for updating keys between the key management system of the head office and the key management system of the branch, wherein the tamper-proof verification code (MAC) is generated by the branch system and verified by the head office system. It is mainly achieved by setting multiple different parts in the key, i.e., multi-modal keys, and performing asynchronous updates during the update process to ensure that during the update process of each part, at least one part can be used for transaction verification, thereby achieving normal operation of the transaction.

[0089] In the specific implementation, a two-level node is taken as an example for explanation, wherein P is the branch key management node, i.e. the above-mentioned first key management node, and C is the head office key management node, i.e. the above-mentioned second key management node. The business system includes multiple of the above-mentioned first key management nodes and multiple of the above-mentioned second key management nodes. The following will take a single P node and a single C node as examples for explanation. In addition, the business system also includes a service system, which is the initiator of the key update application, i.e. the above-mentioned service node.

[0090] It can be understood that the present application sets multimodal keys, including active keys, new keys and old keys, and adopts a rotation method when verifying the key management node of the head office, using the active key, new key and old key in turn.

[0091] Before the service node initiates the key update request, each node and the corresponding multi-modal key are shown in Table 1.

[0092] Table 1

[0093]

[0094] Furthermore, if Figure 3 As shown in step 1 and step 2, the first key management node is controlled to receive the key update request of the service node and send it to the second key management node. Before the key update request sent in step 2 is received by the C1 node, the key corresponding to each node is consistent with the initial state. P1 receives the key update request initiated by the service node and sends it to C1.

[0095] The second control unit 20 is used to control the second key management node to generate and sequentially update the second subkey of the key and the target identification information when the second key management node receives the key update request, and to generate a password based on the updated key and send it to the first key management node;

[0096] Specifically, Figure 3 As shown in step 2 and step 5, C1 receives the key update request, controls the C1 node to generate a new key, and updates the new key of the C1 node according to the newly generated key, as well as flag, i.e., the target identification information, and then C1 generates the password issuance instruction and sends it to the P1 node. After step 2 is executed and before P1 receives the key update request, each node and the corresponding multimodal key are shown in Table 2.

[0097] Table 2

[0098]

[0099] It can be seen that the head office key management nodes C1 and C2 can be verified through the active key or the old key to ensure the key consistency of financial business transactions when network communication is abnormal.

[0100] The third control unit 30 is used for controlling the first key management node to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuance instruction when the first key management node receives the password issuance instruction, and generating a first key activation instruction according to the updated key and sending it to the second key management node;

[0101] Specifically, Figure 3 As shown in step 5 and step 8, P1 receives the above password issuance instruction and uses the updated new key pair to activate the new key, active key and old key of the P1 node. After step 5 is executed and before the C1 node receives the above first key activation instruction, each node and the corresponding multi-modal key are shown in Table 3.

[0102] Table 3

[0103]

[0104] It can be seen that the head office key management node C1 can verify the P1 node through the new key.

[0105] a fourth control unit 40, configured to control the second key management node to sequentially update the first subkey, the third subkey and the target identification information of the key according to the first key activation instruction when the second key management node receives the first key activation instruction, and generate first feedback information to send to the first key management node, wherein the first feedback information is used to indicate that the second subkey is successfully activated;

[0106] Specifically, Figure 3 As shown in step 8 and step 10, C1 receives the first key activation instruction and updates the active key, old key and flag of the C1 node in sequence according to the first key activation instruction. After step 8 is executed and before the P1 node receives the first feedback information, each node and the corresponding multimodal key are as shown in Table 4 (the key synchronization process between C1 and C2 is not included, and the actual C1 and C2 keys are consistent at this time).

[0107] Table 4

[0108]

[0109] It can be seen that the head office key management node C1 can verify the node P1 by using any one of the active key, new key and old key.

[0110] The fifth control unit 50 is used to control the first key management node to send the updated key to the service node to complete the key update when the first key management node receives the first feedback information.

[0111] Specifically, Figure 3As shown in step 11, the return message of the key update completed by P1 is sent to the above-mentioned service node. Since this process, the keys of all nodes in the business system remain consistent. After this step is executed, each node and the corresponding multimodal key are the same as the key updated in step 9.

[0112] Through this embodiment, the first control unit controls the above-mentioned first key management node to receive the key update request of the above-mentioned service node and send it to the above-mentioned second key management node, the above-mentioned key update request is used to indicate the periodic update of the key stored in the above-mentioned business system, the above-mentioned key includes a first subkey, a second subkey, a third subkey and a target identification information, the above-mentioned target identification information is used to characterize whether the above-mentioned second subkey is effective, and when any one of the above-mentioned first subkey, the above-mentioned second subkey and the above-mentioned third subkey satisfies the transaction business verification of the above-mentioned first key management node by the above-mentioned second key management node, it is determined that the above-mentioned transaction business verification is passed; when the above-mentioned second key management node receives the above-mentioned key update request, the second control unit controls the above-mentioned second key management node to generate and sequentially update the above-mentioned second subkey and the above-mentioned target identification information of the above-mentioned key, and generates a password based on the updated above-mentioned key and sends it to the above-mentioned first key management node; the third control unit The unit controls the first key management node to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction when the first key management node receives the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node; the fourth control unit controls the second key management node to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction when the second key management node receives the first key activation instruction, and generates first feedback information and sends it to the first key management node, and the first feedback information is used to indicate that the second subkey is activated successfully; the fifth control unit controls the first key management node to send the updated key to the service node to complete the key update when the first key management node receives the first feedback information. The present application sets a multimodal key, including an active key, a new key and an old key, and an identification information flag for characterizing whether the new key is activated. During the password update process, the new key, active key and old key stored in different nodes are updated in sequence based on the information interaction between the first key management node and the second key management node. A verification mechanism is set based on the order of key update, that is, if any subkey in the key is verified, the disclosure is allowed. This ensures that during the key update process, at least one subkey is the same between the first key management node, the second key management node and the service node to complete the verification, thereby ensuring the key consistency of business transactions. This method solves the problem in the prior art that network fluctuations during the key update process cause inconsistency in keys of different nodes, resulting in transaction failures.

[0113] In order to ensure that multiple head office key management nodes can verify branch key management nodes, in an optional implementation, the above device further includes:

[0114] The sixth control unit is used to control the second key management node to generate and sequentially update the second subkey of the key and the target identification information, and then control the second key management node to generate a first key synchronization instruction according to the updated key and send it to other second key management nodes, wherein the first key synchronization instruction is used to instruct other second key management nodes to sequentially update the second subkey of the key and the target identification information.

[0115] Specifically, as shown in Table 3, after the key of P1 is updated in step 5, the head office key management node C2 cannot verify P1. Therefore, the present application sets the key synchronization of C2 through C1 before P1 updates the key, that is, the C1 node sends the above-mentioned first key synchronization instruction to the C2 node, such as Figure 3 As shown in step 3.

[0116] In order to complete the key synchronization of other head office key management nodes, in an optional implementation manner, the above device further includes:

[0117] The seventh control unit is used to control the above-mentioned second key management node to generate a first key synchronization instruction according to the updated key and send it to other above-mentioned second key management nodes. When other above-mentioned second key management nodes receive the above-mentioned first key synchronization instruction, the seventh control unit is used to control other above-mentioned second key management nodes to update the above-mentioned second subkey and the above-mentioned target identification information of the above-mentioned key in sequence according to the above-mentioned first key synchronization instruction, and generate second feedback information and send it to the above-mentioned second key management nodes, and the above-mentioned second feedback information is used to indicate that the key synchronization of other above-mentioned second key management nodes is successful.

[0118] Specifically, Figure 3 As shown in step 3 and step 4, C2 receives the first key synchronization instruction, updates the new key and flag according to the first key synchronization instruction, and feeds back the C1 node according to the synchronization result. After step 3 is executed, each node and the corresponding multi-modal key are shown in Table 5.

[0119] Table 5

[0120]

[0121] It can be seen that since the key of C2 node is consistent with that of C1 node, it can be guaranteed that after step 5 is executed, the head office key management node C2 can verify the P1 node through the new key. Both C1 and C2 nodes can verify the P2 node through the active key.

[0122] In order to ensure that the main bank's key management nodes can verify multiple branch bank's key management nodes, in an optional implementation, the above device further includes:

[0123] an eighth control unit, for controlling the first key management node to generate a second key synchronization instruction according to the updated key and sending it to other first key management nodes after controlling the first key management node to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password-issued instruction, wherein the second key synchronization instruction is used to instruct other first key management nodes to sequentially update the second subkey, the first subkey and the third subkey of the key.

[0124] Specifically, as shown in Table 4, after the key of C1 is updated in step 8, the C1 node cannot authenticate the P2 node. Therefore, the present application sets the key synchronization of P2 through P1 before C1 updates the key, such as Figure 3 As shown in step 6.

[0125] In order to complete the key update of other branch key management nodes, in an optional implementation manner, the above device further includes:

[0126] The ninth control unit is used to control the above-mentioned first key management node to generate a second key synchronization instruction according to the updated key and send it to other above-mentioned first key management nodes. When other above-mentioned first key management nodes receive the above-mentioned second key synchronization instruction, the control unit controls other above-mentioned first key management nodes to update the above-mentioned second subkey, the above-mentioned first subkey and the above-mentioned third subkey of the above-mentioned key in sequence according to the above-mentioned second key synchronization instruction, and generates third feedback information and sends it to the above-mentioned first key management node, and the above-mentioned third feedback information is used to indicate that the key synchronization of other above-mentioned first key management nodes is successful.

[0127] Specifically, Figure 3 As shown in step 6 and step 7, P2 receives the second key synchronization instruction, updates the new key, active key and old key according to the second key synchronization instruction, and feeds back the C1 node according to the synchronization result. After step 6 is executed, each node and the corresponding multi-modal key are shown in Table 6.

[0128] Table 6

[0129]

[0130] It can be seen that since the key of P2 node is consistent with that of P1 node, it can be guaranteed that after step 6 is executed, the head office key management node C1 can verify P1 and P2 nodes with the new key. The key of C2 is consistent with that of C1, so C2 can also verify P1 and P2 nodes with the new key.

[0131] To ensure the consistency of the key, in an optional implementation manner, the above device further includes:

[0132] a tenth control unit, for controlling the second key management node to generate a second key activation instruction according to the updated key and sending it to other second key management nodes after controlling the second key management node to sequentially update the first subkey, the third subkey and the target identification information of the key according to the first key activation instruction, wherein the second key activation execution is used to instruct other second key management nodes to sequentially update the first subkey, the third subkey and the target identification information of the key.

[0133] Specifically, in order to ensure the key consistency in the business system, after the C1 node updates the key according to the above-mentioned first key activation instruction, a second key activation instruction is generated according to the updated key and sent to C2 for synchronous activation.

[0134] In order to ensure the consistency of the key, in an optional implementation manner, the above device further includes:

[0135] An eleventh control unit is used for controlling the second key management node to generate a second key activation instruction according to the updated key and sending it to other second key management nodes, and when other second key management nodes receive the second key activation instruction, controlling other second key management nodes to update the first subkey, the third subkey and the target identification information of the key in sequence according to the second key activation instruction, and generating a fourth feedback instruction and sending it to the second key management node, wherein the fourth feedback instruction is used to indicate that the key activation of the second key management node is successful.

[0136] Specifically, Figure 3 As shown in step 9, C2 receives the second key activation instruction and updates the active key, old key and flag according to the second key activation instruction. After step 9 is executed, each node and the corresponding multi-modal key are shown in Table 7.

[0137] Table 7

[0138]

[0139] The key updating device for ensuring business continuity includes a processor and a memory. The first control unit, the second control unit, the third control unit, the fourth control unit and the fifth control unit are all stored in the memory as program units, and the processor executes the program units stored in the memory to implement corresponding functions. The modules are all located in the same processor; or, the modules are located in different processors in any combination.

[0140] The processor includes a kernel, which calls the corresponding program unit from the memory. One or more kernels can be set, and the consistency of the password can be ensured by adjusting the kernel parameters.

[0141] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory, such as read-only memory (ROM) or flash RAM, and the memory includes at least one memory chip.

[0142] An embodiment of the present invention provides a computer-readable storage medium, wherein the computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute the key updating method for ensuring service continuity.

[0143] Specifically, the key update method to ensure business continuity includes:

[0144] Step S201, controlling the first key management node to receive a key update request from the service node and sending the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, determining that the transaction business verification has passed;

[0145] Step S202, when the second key management node receives the key update request, controls the second key management node to generate and sequentially update the second subkey of the key and the target identification information, and generates a password based on the updated key and sends it to the first key management node;

[0146] Step S203, when the first key management node receives the password issuing instruction, the first key management node is controlled to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node;

[0147] Step S204, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information to send to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully;

[0148] Step S205: When the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update.

[0149] An embodiment of the present invention provides a processor, and the processor is used to run a program, wherein the key update method for ensuring business continuity is executed when the program is running.

[0150] Specifically, the key update method to ensure business continuity includes:

[0151] Step S201, controlling the first key management node to receive a key update request from the service node and sending the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, determining that the transaction business verification has passed;

[0152] Step S202, when the second key management node receives the key update request, controls the second key management node to generate and sequentially update the second subkey of the key and the target identification information, and generates a password based on the updated key and sends it to the first key management node;

[0153] Step S203, when the first key management node receives the password issuing instruction, the first key management node is controlled to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node;

[0154] Step S204, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information to send to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully;

[0155] Step S205: When the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update.

[0156] An embodiment of the present invention provides a business system, the business system includes a processor, a memory, and a program stored in the memory and executable on the processor, and when the processor executes the program, at least the following steps are implemented:

[0157] Step S201, controlling the first key management node to receive a key update request from the service node and sending the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, determining that the transaction business verification has passed;

[0158] Step S202, when the second key management node receives the key update request, controls the second key management node to generate and sequentially update the second subkey of the key and the target identification information, and generates a password based on the updated key and sends it to the first key management node;

[0159] Step S203, when the first key management node receives the password issuing instruction, the first key management node is controlled to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node;

[0160] Step S204, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information to send to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully;

[0161] Step S205: When the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update.

[0162] The present application also provides a computer program product, which, when executed on a data processing device, is suitable for executing a program for initializing at least the following method steps:

[0163] Step S201, controlling the first key management node to receive a key update request from the service node and sending the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, determining that the transaction business verification has passed;

[0164] Step S202, when the second key management node receives the key update request, controls the second key management node to generate and sequentially update the second subkey of the key and the target identification information, and generates a password based on the updated key and sends it to the first key management node;

[0165] Step S203, when the first key management node receives the password issuing instruction, the first key management node is controlled to sequentially update the second subkey, the first subkey and the third subkey of the key according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node;

[0166] Step S204, when the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information to send to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully;

[0167] Step S205: When the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update.

[0168] Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general computing device, they can be concentrated on a single computing device, or distributed on a network composed of multiple computing devices, they can be implemented by a program code executable by a computing device, so that they can be stored in a storage device and executed by the computing device, and in some cases, the steps shown or described can be executed in a different order than here, or they can be made into individual integrated circuit modules, or multiple modules or steps therein can be made into a single integrated circuit module for implementation. Thus, the present invention is not limited to any specific combination of hardware and software.

[0169] Those skilled in the art will appreciate that the embodiments of the present application may be provided as methods, systems, or computer program products. Therefore, the present application may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment in combination with software and hardware. Moreover, the present application may adopt the form of a computer program product implemented in one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) that include computer-usable program code.

[0170] The present application is described with reference to the flowcharts and / or block diagrams of the methods, devices (systems), and computer program products according to the embodiments of the present application. It should be understood that each process and / or box in the flowchart and / or block diagram, as well as the combination of the processes and / or boxes in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.

[0171] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.

[0172] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.

[0173] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.

[0174] The memory may include non-permanent memory in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0175] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.

[0176] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.

[0177] From the above description, it can be seen that the above embodiments of the present application achieve the following technical effects:

[0178] 1) The key updating method for ensuring business continuity of the present application, first, controls the above-mentioned first key management node to receive the key updating request of the above-mentioned service node and sends it to the above-mentioned second key management node, the above-mentioned key updating request is used to indicate the periodic updating of the key stored in the above-mentioned business system, the above-mentioned key includes the first subkey, the second subkey, the third subkey and the target identification information, the above-mentioned target identification information is used to characterize whether the above-mentioned second subkey is effective, and when any one of the above-mentioned first subkey, the above-mentioned second subkey and the above-mentioned third subkey satisfies the transaction business verification of the above-mentioned first key management node by the above-mentioned second key management node, it is determined that the above-mentioned transaction business verification has passed; then, when the above-mentioned second key management node receives the above-mentioned key updating request, controls the above-mentioned second key management node to generate and sequentially update the above-mentioned second subkey and the above-mentioned target identification information of the above-mentioned key, and issues an instruction based on the updated key generation password and sends it to the above-mentioned first key management node. secret management node; thereafter, in the case that the first secret management node receives the password issuing instruction, the first secret management node is controlled to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second secret management node; thereafter, in the case that the second secret management node receives the first key activation instruction, the second secret management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates a first feedback information and sends it to the first secret management node, and the first feedback information is used to indicate that the second subkey is successfully activated; finally, in the case that the first secret management node receives the first feedback information, the first secret management node is controlled to send the updated key to the service node to complete the key update. The present application sets a multimodal key, including an active key, a new key and an old key, and an identification information flag for characterizing whether the new key is activated. During the password update process, the new key, active key and old key stored in different nodes are updated in sequence based on the information interaction between the first key management node and the second key management node. A verification mechanism is set based on the order of key update, that is, if any subkey in the key is verified, the disclosure is allowed. This ensures that during the key update process, at least one subkey is the same between the first key management node, the second key management node and the service node to complete the verification, thereby ensuring the key consistency of business transactions. This method solves the problem in the prior art that network fluctuations during the key update process cause inconsistency in keys of different nodes, resulting in transaction failures.

[0179] 2) The key updating device for ensuring business continuity of the present application, the first control unit controls the above-mentioned first key management node to receive the key update request of the above-mentioned service node and send it to the above-mentioned second key management node, the above-mentioned key update request is used to indicate the periodic update of the key stored in the above-mentioned business system, the above-mentioned key includes a first subkey, a second subkey, a third subkey and a target identification information, the above-mentioned target identification information is used to characterize whether the above-mentioned second subkey is effective, and when any one of the above-mentioned first subkey, the above-mentioned second subkey and the above-mentioned third subkey satisfies the transaction business verification of the above-mentioned first key management node by the above-mentioned second key management node, it is determined that the above-mentioned transaction business verification has passed; when the above-mentioned second key management node receives the above-mentioned key update request, the second control unit controls the above-mentioned second key management node to generate and sequentially update the above-mentioned second subkey and the above-mentioned target identification information of the above-mentioned key, and generates a password according to the updated above-mentioned key and sends it to the above-mentioned first key management node. management node; the third control unit controls the first key management node to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction when the first key management node receives the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node; the fourth control unit controls the second key management node to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction when the second key management node receives the first key activation instruction, and generates a first feedback information and sends it to the first key management node, where the first feedback information is used to indicate that the second subkey is activated successfully; the fifth control unit controls the first key management node to send the updated key to the service node to complete the key update when the first key management node receives the first feedback information. The present application sets a multimodal key, including an active key, a new key and an old key, and an identification information flag for characterizing whether the new key is activated. During the password update process, the new key, active key and old key stored in different nodes are updated in sequence based on the information interaction between the first key management node and the second key management node. A verification mechanism is set based on the order of key update, that is, if any subkey in the key is verified, the disclosure is allowed. This ensures that during the key update process, at least one subkey is the same between the first key management node, the second key management node and the service node to complete the verification, thereby ensuring the key consistency of business transactions. This method solves the problem in the prior art that network fluctuations during the key update process cause inconsistency in keys of different nodes, resulting in transaction failures.

[0180] The above description is only the preferred embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included in the protection scope of the present application.

Claims

1. A key updating method for ensuring business continuity, characterized in that: The key update method is used to control a service system to update a key, the service system includes a first key management node and a second key management node, the first key management node is used to manage a key of a service node, and the second key management node is used to manage a key of the first key management node, the method includes: Controlling the first key management node to receive a key update request from the service node and send the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey, and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey, and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, determining that the transaction business verification has passed; When the second key management node receives the key update request, the second key management node is controlled to generate and sequentially update the second subkey and the target identification information of the key, and sends a command to the first key management node according to the updated key generation password; When the first key management node receives the password issuing instruction, the first key management node is controlled to update the second subkey, the first subkey and the third subkey of the key in sequence according to the password issuing instruction, and generates a first key activation instruction according to the updated key and sends it to the second key management node; When the second key management node receives the first key activation instruction, the second key management node is controlled to update the first subkey, the third subkey and the target identification information of the key in sequence according to the first key activation instruction, and generates first feedback information to send to the first key management node, where the first feedback information is used to indicate that the second subkey is successfully activated; When the first key management node receives the first feedback information, the first key management node is controlled to send the updated key to the service node to complete the key update.

2. The method according to claim 1, characterized in that After controlling the second key management node to generate and sequentially update the second subkey of the key and the target identification information, the method further includes: The second key management node is controlled to generate a first key synchronization instruction according to the updated key and send it to other second key management nodes, wherein the first key synchronization instruction is used to instruct other second key management nodes to update the second subkey of the key and the target identification information in sequence.

3. The method according to claim 2, characterized in that After controlling the second key management node to generate a first key synchronization instruction according to the updated key and sending the first key synchronization instruction to other second key management nodes, the method further includes: When other second key management nodes receive the first key synchronization instruction, they control the other second key management nodes to update the second subkey of the key and the target identification information in sequence according to the first key synchronization instruction, and generate second feedback information to send to the second key management nodes, where the second feedback information is used to indicate that the key synchronization of other second key management nodes is successful.

4. The method according to claim 1, characterized in that: After controlling the first key management node to issue an instruction according to the password to update the second subkey, the first subkey and the third subkey of the key in sequence, the method further includes: The first key management node is controlled to generate a second key synchronization instruction according to the updated key and send it to other first key management nodes, wherein the second key synchronization instruction is used to instruct other first key management nodes to update the second subkey, the first subkey and the third subkey of the key in sequence.

5. The method according to claim 4, characterized in that After controlling the first key management node to generate a second key synchronization instruction according to the updated key and sending the second key synchronization instruction to other first key management nodes, the method further includes: When other first key management nodes receive the second key synchronization instruction, they control the other first key management nodes to update the second subkey, the first subkey and the third subkey of the key in sequence according to the second key synchronization instruction, and generate third feedback information and send it to the first key management node, wherein the third feedback information is used to indicate that the key synchronization of other first key management nodes is successful.

6. The method according to claim 1, characterized in that After controlling the second key management node to sequentially update the first subkey, the third subkey, and the target identification information of the key according to the first key activation instruction, the method further includes: The second key management node is controlled to generate a second key activation instruction according to the updated key and send it to other second key management nodes, wherein the second key activation execution is used to instruct other second key management nodes to update the first subkey, the third subkey and the target identification information of the key in sequence.

7. The method according to claim 6, characterized in that After controlling the second key management node to generate a second key activation instruction according to the updated key and sending the second key activation instruction to other second key management nodes, the method further includes: When other second key management nodes receive the second key activation instruction, they control other second key management nodes to update the first subkey, the third subkey and the target identification information of the key in sequence according to the second key activation instruction, and generate a fourth feedback instruction to send to the second key management node, and the fourth feedback instruction is used to indicate that the key activation of the second key management node is successful.

8. A key updating device for ensuring business continuity, characterized in that: The key updating device is used to control the service system to update the key, the service system includes a first key management node and a second key management node, the first key management node is used to manage the key of the service node, and the second key management node is used to manage the key of the first key management node, the device includes: a first control unit, configured to control the first key management node to receive a key update request from the service node and send the request to the second key management node, wherein the key update request is used to instruct to periodically update a key stored in the business system, wherein the key includes a first subkey, a second subkey, a third subkey, and target identification information, wherein the target identification information is used to indicate whether the second subkey is effective, and when any one of the first subkey, the second subkey, and the third subkey satisfies the transaction business verification of the first key management node by the second key management node, it is determined that the transaction business verification has passed; A second control unit is configured to control the second key management node to generate and sequentially update the second subkey and the target identification information of the key when the second key management node receives the key update request, and issue a command to the first key management node based on the updated key generation password; a third control unit, configured to control the first key management node to sequentially update the second subkey, the first subkey, and the third subkey of the key according to the password issuing instruction when the first key management node receives the password issuing instruction, and generate a first key activation instruction according to the updated key and send it to the second key management node; a fourth control unit, configured to control the second key management node to sequentially update the first subkey, the third subkey, and the target identification information of the key according to the first key activation instruction when the second key management node receives the first key activation instruction, and generate first feedback information to send to the first key management node, wherein the first feedback information is used to indicate that the second subkey is successfully activated; A fifth control unit is configured to control the first key management node to send the updated key to the service node to complete the key update when the first key management node receives the first feedback information.

9. A computer-readable storage medium, characterized in that: The computer-readable storage medium includes a stored program, wherein when the program is executed, the device where the computer-readable storage medium is located is controlled to execute the method according to any one of claims 1 to 7.

10. A business system, characterized in that: include: One or more processors, a memory, and one or more programs, wherein the one or more programs are stored in the memory and are configured to be executed by the one or more processors, and the one or more programs include methods for executing any one of claims 1 to 7.

Images