Open password application method based on CPU password module

Abstract

The invention discloses an open password application method based on a CPU password module, and the method comprises the steps: submitting a password application developed by an application developer to an application management center for signature authentication, and obtaining a signature authentication file; the password application and the signature authentication file are deployed to any terminal device which contains a CPU password module conforming to the standard specification of an application management center; after the password application runs, calling a CPU password module interface in the terminal equipment to obtain a signature authentication file; carrying out verification processing on the obtained signature authentication file by utilizing a CPU password module; and if the verification is passed, the CPU password module is used for providing a corresponding password service. Through the development password application system constructed by the standard-following CPU password module and the public application management center, an application developer can conveniently carry out application development, and the application can be used on all devices through application authentication, so that the popularization of password application is greatly accelerated.

Description

Technical Field

[0001] The present invention relates to the technical field of cryptographic application services, and in particular to an open cryptographic application method based on a CPU cryptographic module. Background Art

[0002] Current cryptographic modules are usually dedicated devices that are relatively closed and have non-standard application interfaces, which are not conducive to their widespread application. Therefore, a more open and universal cryptographic application system is needed.

[0003] Therefore, the applicant has found a solution to the above-mentioned problem through beneficial exploration and research, and the technical solution to be introduced below is produced in this context. Summary of the invention

[0004] The technical problem to be solved by the present invention is: to provide a method for improving the open cryptographic application based on the CPU cryptographic module in view of the deficiencies of the prior art, so as to quickly improve the popularity of cryptographic applications.

[0005] The technical problem to be solved by the present invention can be achieved by adopting the following technical solutions:

[0006] An open password application method based on a CPU password module, comprising:

[0007] Submit the cryptographic application developed by the application developer to the application management center for signature authentication and obtain the signature authentication file;

[0008] Deploy the cryptographic application and signature authentication files to any terminal device that contains a CPU cryptographic module that complies with the standards and specifications of the application management center;

[0009] When the cryptographic application is running, the CPU cryptographic module interface in the terminal device is called so that the CPU cryptographic module obtains the signature authentication file corresponding to the cryptographic application;

[0010] Use the CPU password module to verify the acquired signature authentication file;

[0011] If the verification is successful, the CPU password module will be used to provide corresponding password services.

[0012] In a preferred embodiment of the present invention, submitting the cryptographic application developed by the application developer to the application management center for signature authentication and obtaining the signature authentication file includes:

[0013] Application developers develop key applications according to the cryptographic interface specifications published by the Application Management Center;

[0014] The application developer sends an application registration request to the application management center;

[0015] The application management center authenticates the application registration request and opens an account for the application developer based on the authentication result;

[0016] Application developers submit their developed cryptographic applications to the Application Management Center through their accounts and apply to the Application Management Center for authentication of the cryptographic applications. The application information includes application type, application purpose, scope of cryptographic interfaces used, and application level information.

[0017] The application management center detects the application information of the cryptographic application, and after passing the detection, uses the private key of the application management center to sign the cryptographic application and generate a signature authentication file, which includes the cryptographic application feature information, application authentication scope information and the private key signature of the application management center;

[0018] The application developer obtains the signature authentication file corresponding to the password application, and the password application authentication is successful.

[0019] In a preferred embodiment of the present invention, the verification process of the acquired signature authentication file by using the CPU password module includes:

[0020] Use the built-in trusted public key of the CPU cryptographic module to verify the acquired signature authentication file to determine whether the signature authentication file is issued by the trusted application management center;

[0021] When the signature authentication file is verified, the characteristic information of the cryptographic application is obtained, and the obtained characteristic information is compared with the characteristic information of the cryptographic application in the signature authentication file for consistency;

[0022] When the consistency comparison is passed, the calling interface function of the cryptographic application is obtained, and the obtained calling interface function is verified for consistency with the application authentication scope information in the signature authentication file.

[0023] Due to the adoption of the above technical solution, the beneficial effect of the present invention is that: by following the standardized CPU cryptographic module and the development cryptographic application system constructed by the public application management center, application developers can conveniently develop applications, and can use them on all devices through application authentication, greatly accelerating the popularization of cryptographic applications. BRIEF DESCRIPTION OF THE DRAWINGS

[0024] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0025] Figure 1It is a structural diagram of the open cryptographic application system of the present invention.

[0026] Figure 2 The invention discloses a flow chart of an open password application method based on a CPU password module. DETAILED DESCRIPTION

[0027] In order to make the technical means, creative features, objectives and effects achieved by the present invention easy to understand, the present invention is further explained below with reference to specific diagrams.

[0028] See also Figure 1 , the figure shows a schematic diagram of the structure of the open cryptographic application system of the present invention, which includes an application developer 100, an application management center 200 and a CPU cryptographic module 300.

[0029] The application developer 100 develops a cryptographic application APP according to the application interface published by the application management center 200, and applies for application certification of the cryptographic application 400 developed by the application management center 200. The application management center 200 is responsible for publishing standard cryptographic application interface specifications, and has the application issuance function, which can sign the cryptographic application 400. The CPU cryptographic module 300 is deployed in the terminal device and has secure key management and cryptographic operation functions.

[0030] See also Figure 2 Combined with Figure 1 , the figure shows an open password application method based on CPU password module, including the following steps:

[0031] Step S10, submitting the cryptographic application 400 developed by the application developer 100 to the application management center 200 for signature authentication, and obtaining a signature authentication file;

[0032] Step S20, deploying the cryptographic application 400 and the signature authentication file to any terminal device that has a CPU cryptographic module 300 that complies with the standard specification of the application management center 200;

[0033] Step S30, when the cryptographic application is running, the CPU cryptographic module interface in the terminal device is called so that the CPU cryptographic module 300 obtains the signature authentication file corresponding to the cryptographic application 400;

[0034] Step S40, using the CPU password module 300 to verify the acquired signature authentication file;

[0035] Step S50: If the verification is successful, the CPU password module 300 is used to provide corresponding password services.

[0036] In step S10, the cryptographic application developed by the application developer is submitted to the application management center for signature authentication, and a signature authentication file is obtained, including the following steps:

[0037] Step S11, the application developer develops a key application according to the cryptographic interface specification published by the application management center;

[0038] Step S12, the application developer sends an application registration request to the application management center;

[0039] Step S13, the application management center authenticates the application registration request and opens an account for the application developer based on the authentication result;

[0040] Step S14, the application developer submits the cryptographic application developed by the application developer to the application management center through the account, and applies for the application management center to authenticate the cryptographic application. The application information includes application type, application purpose, scope of cryptographic interface used, and application level information;

[0041] Step S15, the application management center detects the application information of the cryptographic application, and after passing the detection, uses the private key of the application management center to sign the cryptographic application and generates a signature authentication file, which includes the cryptographic application feature information, application authentication scope information and the private key signature of the application management center;

[0042] Step S16: The application developer obtains the signature authentication file corresponding to the cryptographic application, and the cryptographic application authentication is successful.

[0043] In step S40, the CPU password module is used to verify the acquired signature authentication file, including the following steps:

[0044] Step S41, using the built-in trusted public key of the CPU cryptographic module to verify the acquired signature authentication file to determine whether the signature authentication file is issued by a trusted application management center;

[0045] Step S42, when the signature authentication file is verified, the characteristic information of the cryptographic application is obtained, and the obtained characteristic information is compared with the characteristic information of the cryptographic application in the signature authentication file for consistency;

[0046] Step S43, when the consistency comparison is passed, the calling interface function of the cryptographic application is obtained, and the obtained calling interface function is verified for consistency with the application authentication scope information in the signature authentication file.

[0047] The present invention develops a cryptographic application system by following a standardized CPU cryptographic module and building a public application management center. Application developers can conveniently develop applications, and the applications can be used on all devices after application authentication, which greatly accelerates the popularization of cryptographic applications.

[0048] The above shows and describes the basic principles and main features of the present invention and the advantages of the present invention. It should be understood by those skilled in the art that the present invention is not limited to the above embodiments. The above embodiments and descriptions are only for explaining the principles of the present invention. Without departing from the spirit and scope of the present invention, the present invention may have various changes and improvements, which fall within the scope of the present invention to be protected. The scope of protection of the present invention is defined by the attached claims and their equivalents.

Claims

1. An open password application method based on a CPU password module, characterized in that: include: Submit the cryptographic application developed by the application developer to the application management center for signature authentication and obtain the signature authentication file; Deploy the cryptographic application and signature authentication files to any terminal device that contains a CPU cryptographic module that complies with the standards and specifications of the application management center; When the cryptographic application is running, the CPU cryptographic module interface in the terminal device is called so that the CPU cryptographic module obtains the signature authentication file corresponding to the cryptographic application; Use the CPU password module to verify the acquired signature authentication file; If the verification is successful, the CPU password module will be used to provide corresponding password services.

2. The open password application method based on the CPU password module as claimed in claim 1, characterized in that: Submitting the cryptographic application developed by the application developer to the application management center for signature authentication and obtaining the signature authentication file includes: Application developers develop key applications according to the cryptographic interface specifications published by the Application Management Center; The application developer sends an application registration request to the application management center; The application management center authenticates the application registration request and opens an account for the application developer based on the authentication result; Application developers submit their developed cryptographic applications to the Application Management Center through their accounts and apply to the Application Management Center for authentication of the cryptographic applications. The application information includes application type, application purpose, scope of cryptographic interfaces used, and application level information. The application management center detects the application information of the cryptographic application, and after passing the detection, uses the private key of the application management center to sign the cryptographic application and generate a signature authentication file, which includes the cryptographic application feature information, application authentication scope information and the private key signature of the application management center; The application developer obtains the signature authentication file corresponding to the password application, and the password application authentication is successful.

3. The open password application method based on the CPU password module as claimed in claim 2, characterized in that: The CPU password module is used to verify the acquired signature authentication file, including: Use the built-in trusted public key of the CPU cryptographic module to verify the acquired signature authentication file to determine whether the signature authentication file is issued by the trusted application management center; When the signature authentication file is verified, the characteristic information of the cryptographic application is obtained, and the obtained characteristic information is compared with the characteristic information of the cryptographic application in the signature authentication file for consistency; When the consistency comparison is passed, the calling interface function of the cryptographic application is obtained, and the obtained calling interface function is verified for consistency with the application authentication scope information in the signature authentication file.

Images