Data transmission method and device, electronic equipment and readable storage medium

Abstract

The invention discloses a data transmission method and device, electronic equipment and a readable storage medium, and belongs to the technical field of communication. The data transmission method comprises the following steps: a first device receives a data reading instruction from a second device, wherein the data reading instruction is used for requesting to obtain sensitive data in a security chip of the first device; the first device obtains sensitive data stored in the security chip according to the data reading instruction, and encrypts the sensitive data by using a first combined key to obtain encrypted sensitive data; the first device sends the encrypted sensitive data to the second device; wherein the first combined key is generated based on a first key and a second key, the first key is generated based on a public service key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and specifically relates to a data transmission method, device, electronic device and readable storage medium. Background Art

[0002] With the development of electronic device technology, more and more personal sensitive data are stored on electronic devices. The storage and transmission of this data are crucial to protecting user privacy.

[0003] In the related art, when electronic devices transmit data, they usually send or receive data through the network, that is, data transmission between electronic devices is mainly carried out through the network, and data transmission depends on the network environment. However, due to the complexity of the network environment, there may be certain security issues. Therefore, when the security of the network environment is difficult to fully guarantee, sensitive data can easily become the target of hackers or lawless elements during transmission, which may cause sensitive data to be illegally intercepted or stolen, resulting in poor security of data transmission. Therefore, how to ensure the security of data transmission between devices is an urgent problem to be solved. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a data transmission method, device, electronic device and readable storage medium, which can improve the security of data transmission.

[0005] In a first aspect, an embodiment of the present application provides a data transmission method, the method comprising: a first device receives a data read instruction from a second device, the data read instruction being used to request to obtain sensitive data in a security chip of the first device; the first device obtains the sensitive data stored in the security chip according to the data read instruction, and encrypts the sensitive data using a first combination key to obtain the encrypted sensitive data; the first device sends the encrypted sensitive data to the second device; wherein the first combination key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0006] In a second aspect, an embodiment of the present application provides a data transmission method, the method comprising: a second device sends a data read instruction to a first device, the data read instruction is used to request to obtain sensitive data in a security chip of the first device; the second device receives the encrypted sensitive data sent by the first device; wherein the sensitive data is encrypted by a first combined key, the first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0007] In a third aspect, an embodiment of the present application provides a data transmission device, which includes: a receiving module, a processing module and a sending module, wherein: the receiving module is used to receive a data reading instruction from a second device, the data reading instruction is used to request to obtain sensitive data in a security chip of a first device; the processing module is used to obtain the sensitive data stored in the security chip according to the data reading instruction, and encrypt the sensitive data using a first combination key to obtain the encrypted sensitive data; the sending module is used to send the encrypted sensitive data to the second device; wherein the first combination key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0008] In a fourth aspect, an embodiment of the present application provides a data transmission device, which includes: a sending module and a receiving module, wherein: the sending module is used to send a data reading instruction to a first device, and the data reading instruction is used to request to obtain sensitive data in a security chip of the first device; the receiving module is used to receive encrypted sensitive data sent by the first device; wherein the sensitive data is encrypted by a first combined key, the first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0009] In a fifth aspect, an embodiment of the present application provides an electronic device, comprising a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method described in the first aspect or the second aspect are implemented.

[0010] In a sixth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method described in the first aspect or the second aspect are implemented.

[0011] In the seventh aspect, an embodiment of the present application provides a chip, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the method described in the first aspect or the method described in the second aspect.

[0012] In an eighth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the method described in the first aspect or the second aspect.

[0013] In an embodiment of the present application, a first device receives a data read instruction from a second device, the data read instruction is used to request to obtain sensitive data in a security chip of the first device, the first device obtains the sensitive data stored in the security chip according to the data read instruction, and encrypts the sensitive data using a first combination key, and then sends the encrypted sensitive data to the second device, wherein the first combination key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device. Through this method, when the first device sends sensitive data stored in the security chip to the second device, the sensitive data is encrypted by a combination key generated by multiple keys (i.e., the first key and the second key), which can improve the security of sensitive data transmission. Furthermore, since the first key and the second key are different types of keys generated based on different key information, respectively, a combination key with higher security can be generated by different types of keys, thereby further ensuring the security of sensitive data transmission. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 A schematic diagram of a system architecture provided for an embodiment of the present application;

[0015] Figure 2 One of the flowcharts of the data transmission method provided in the embodiment of the present application;

[0016] Figure 3 A second schematic diagram of another data transmission method provided in an embodiment of the present application;

[0017] Figure 4 A schematic diagram of the interactive process of data transmission between devices provided in an embodiment of the present application;

[0018] Figure 5 The third flowchart of the data transmission method provided in the embodiment of the present application;

[0019] Figure 6 One of the structural schematic diagrams of the data transmission device provided in the embodiment of the present application;

[0020] Figure 7 A second structural diagram of the data transmission device provided in an embodiment of the present application;

[0021] Figure 8 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application;

[0022] Fig. 9 A schematic diagram of the hardware structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0023] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0024] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0025] The terms "at least one (item)", "at least one of" and the like in the specification and claims of the present application refer to any one, any two or a combination of more than two of the objects included therein. For example, at least one (item) of a, b, and c can be represented by: "a", "b", "c", "a and b", "a and c", "b and c" and "a, b and c", where a, b, and c can be single or multiple. Similarly, "at least two (items)" refers to two or more, and its meaning is similar to that of "at least one (item)".

[0026] The following is an introduction to the nouns or terms involved in this application:

[0027] Security chip: A security element (SE) is an independent chip designed to securely store and process sensitive data. It usually has its own core, memory encryption engine, etc., to protect sensitive information such as digital keys, payment information, user authentication information, etc. from unauthorized access or tampering.

[0028] Key: A key is a parameter that is input into an algorithm that converts plaintext to ciphertext or ciphertext to plaintext, and is used to encrypt and decrypt data. Currently, keys generally include symmetric keys and asymmetric keys. Symmetric keys use the same key for encryption and decryption, which is fast and suitable for encrypting large amounts of data, but difficult to manage keys. Asymmetric keys use a pair of keys, one public key for encryption and one private key for decryption, or vice versa, the public key can be made public, but the private key must be kept secret.

[0029] Trusted Environment: Trusted Execution Environment (TEE) is used to provide a higher security level operating environment for sensitive applications on electronic devices. TEE has its own execution space, which is separated from Rich OS and provides a higher security level.

[0030] The data transmission method provided in the embodiment of the present application can be applied to the scenario of data transmission between devices.

[0031] In related technologies, when users replace terminal devices, they usually use traditional online data transmission methods to upload relevant data on the old device to the cloud server, and then import the data from the cloud server to the new device. In today's digital age, the secure transmission of sensitive data is crucial. The current method of uploading data to the server first and then sending the data from the cloud server to the new device through the network is limited by the security of the network to which the device is connected. In the case of low network security, sensitive data is at risk of being attacked, stolen or tampered with during transmission, resulting in poor data transmission security.

[0032] In an embodiment of the present application, when a user replaces a terminal device, the old device can obtain the sensitive data to be transmitted from its own security chip when receiving a data read instruction from the new device, and encrypt the sensitive data through a combined key derived from two different types of keys, namely, a first key and a second key, and then send the encrypted sensitive data to the new device. In this way, the old device can perform data transmission operations according to the data read instruction of the new device, that is, quickly trigger data transmission through instruction interaction between devices and directly transmit data between devices without forwarding data through a cloud server, which can improve the convenience of data transmission; on the other hand, since the first key and the second key are different types of keys generated based on different key information, a more secure combined key can be generated through different types of keys, thereby further ensuring the security of sensitive data transmission. It should be noted that the old device is the above-mentioned first device, and the new device is the above-mentioned second device.

[0033] Figure 1 A schematic diagram of the system architecture provided in the embodiment of the present application, such as Figure 1The system shown may include a control module 11, a data reading module 12, a transmission channel establishment module 13, a data transmission module 14, a data encryption / decryption module 15, a service data processing module 16, and a service activation / invalidation module 17. The control module is used to determine whether the device is a data sending device or a receiving device, and determine the data flow and participating modules of the device in the entire data transmission process. The data reading module is used to obtain the stored sensitive data through the internal shared interface unique to the security SE. The transmission channel establishment module is used to verify the trusted state of the device through the certificate chain, and calculate the negotiated key through an asymmetric key negotiation algorithm. The data transmission module is responsible for the flow of data between various modules and cross-end transmission of data to ensure the stability of data transmission. The data encryption / decryption module is responsible for the encryption and decryption of the transmitted data. The service data processing module is responsible for assembling the data into the format required for encryption after reading it from the storage module; receiving the decrypted data, parsing the data, and storing it in the security chip. The service activation or invalidation module is responsible for the wake-up and sleep of the entire offline transmission system.

[0034] The execution subject of the data transmission method provided in the embodiment of the present application may be a data transmission device, and the data transmission device may be an electronic device, or a functional module or functional entity in an electronic device. The data transmission method provided in the embodiment of the present application is described below by taking the execution of the data transmission method by an electronic device as an example. It should be noted that the above-mentioned electronic device is the first device and the second device in the following embodiments.

[0035] The data transmission method provided in the embodiment of the present application is described in detail below through specific embodiments and their application scenarios in conjunction with the accompanying drawings.

[0036] Figure 2 A flow chart of a data transmission method provided in an embodiment of the present application is shown in FIG. Figure 2 As shown, the data transmission method may include the following steps 201 to 203:

[0037] Step 201: A first device receives a data read instruction from a second device.

[0038] The data reading instruction is used to request to obtain sensitive data in the security chip of the first device.

[0039] In some embodiments of the present application, the data read instruction may be an encrypted data read instruction. Exemplarily, after receiving the data read instruction, the first device may first decrypt the data read instruction.

[0040] It should be noted that by encrypting data reading instructions, it can be ensured that only devices holding the correct decryption key can interpret the instruction content, thereby effectively preventing unauthorized devices or users from accessing sensitive data, and then more accurately identifying and processing legitimate data reading requests, thereby improving the overall stability and reliability of the system.

[0041] It should be noted that the above data read instruction may also be referred to as a data read request.

[0042] In some embodiments of the present application, the first device may include but is not limited to: a terminal device, a tablet computer, a laptop computer, a desktop computer and other devices.

[0043] In some embodiments of the present application, the second device may include but is not limited to: a terminal device, a tablet computer, a laptop computer, a computer and other devices.

[0044] Exemplarily, the first device may be a terminal device, and the second device may be a terminal device; or, the first device may be a terminal device, and the second device may be a computer.

[0045] In some embodiments of the present application, the first device may be a device that sends data, that is, a data sender; and the second device may be a device that receives data, that is, a data receiver.

[0046] It should be noted that the first device may be referred to as an old device, and the second device may be referred to as a new device; or the first device may be referred to as a source device, and the second device may be referred to as a target device.

[0047] In some embodiments of the present application, the first device receives a data read instruction from the second device when performing data transmission between the first device and the second device.

[0048] In some embodiments of the present application, a security chip is embedded in the first device, and the security chip is loaded with a security unit access program, which supports direct access to data stored in security chips embedded in other devices through NFC or other short-range transmission protocols.

[0049] It should be noted that the above-mentioned security unit access program may be an eSE Reader application or an eSE Reader program.

[0050] It should be noted that the eSE Reader application or program is used to securely access sensitive information in the embedded security unit (eSE), such as payment credentials, identity authentication data, etc. The first device can conveniently manage this data through the eSE Reader application or program electronic device, such as performing operations such as reading, writing, and updating, thereby meeting the needs of various application scenarios.

[0051] In some embodiments of the present application, the security chip may include a security element (SE) or an embedded security element (eSE).

[0052] It should be noted that SE or eSE is a highly secure unit in electronic devices that can protect the data stored in it from malware attacks. The eSE Reader application or program improves overall security by following strict access control rules to ensure that only applications with corresponding permissions can access the data in eSE.

[0053] It should be noted that the explanation of the security chip can be found in the above description and will not be repeated here.

[0054] In some embodiments of the present application, the first device may store sensitive information in a security chip. Since the security chip has hardware encryption and permission management features, only authenticated and authorized devices or applications can access the stored sensitive information, thereby ensuring the security of the sensitive information.

[0055] In some embodiments of the present application, the above-mentioned sensitive data may include but is not limited to at least one of the following: personal information, business information, location information, social information, etc.

[0056] Exemplarily, personal information includes, but is not limited to, at least one of the following: name, gender, date of birth, identification number, contact information, and other identity information; medical records, medication records, physical examination reports, biometric information, and other health information; bank account information, payment methods, transaction records, credit records, credit information, and other financial information; page visit records, search records, and other historical record information.

[0057] Exemplarily, business information includes, but is not limited to, at least one of the following: business secrets, contract documents, etc.

[0058] Exemplarily, the location information includes but is not limited to at least one of the following: GPS positioning data, movement trajectory, etc.

[0059] By way of example, social information includes but is not limited to social media login accounts, chat records, address books, etc.

[0060] In the embodiments of the present application, the data transmission method provided in the embodiments of the present application can be applied to various data transmission scenarios such as data migration between devices, data synchronization, file transfer, real-time communication, etc.

[0061] The following introduces various data transmission scenarios to which the embodiments of the present application are applicable.

[0062] Data migration: Data migration refers to the process of migrating existing data from one data storage or processing system to another, including migrating data from the local storage of a device to the storage of another device. For example, when a user replaces a terminal device, it is usually necessary to migrate the data in the old terminal device to the new terminal device.

[0063] Data synchronization: Data synchronization is the process of keeping data updated in real time or near real time between two or more devices or systems.

[0064] File transfer: File transfer refers to the process of transferring a file or part of it from one device to another. For example, transferring photos from a terminal to a computer.

[0065] Real-time communication: Real-time communication refers to the instant transmission and exchange of data, including the real-time transmission of media such as text, pictures or videos, as well as various real-time communication technologies such as voice communication, video calls, real-time multi-person conferences, etc.

[0066] Step 202: The first device obtains sensitive data stored in the security chip according to the data reading instruction, and encrypts the sensitive data using the first combined key.

[0067] Among them, the above-mentioned first combined key is generated based on the first key and the second key, the above-mentioned first key is generated based on the public business key of the second device and the private management key of the first device, and the above-mentioned second key is generated based on the temporary public key of the second device and the temporary private key of the first device.

[0068] In some embodiments of the present application, the first device may read sensitive data stored in the security chip of the device through an internal shared interface of the security chip.

[0069] In some embodiments of the present application, the internal shared interface is used for other units of the first device to communicate with the security chip, for example, for the main processor of the first device to communicate with the security chip to implement data reading and writing operations.

[0070] In the embodiment of the present application, by using the internal shared interface of the security chip to read sensitive data, the physical isolation characteristics of the security chip can be fully utilized to ensure the security of the data during the reading process. In addition, through the internal interface of the security chip, the data access process can be simplified and the data reading speed can be accelerated, thereby improving the performance of the overall device.

[0071] In some embodiments of the present application, the above-mentioned data reading instruction may include information such as the storage directory, data type, etc. of the sensitive data that the second device needs to obtain. The first device can read the sensitive data of the corresponding storage directory or data type from the security chip according to the data reading instruction and send it to the second device.

[0072] In some embodiments of the present application, the public business key of the second device refers to a key used to encrypt business data or perform other business-related encryption operations.

[0073] In some embodiments of the present application, the private management key of the first device refers to a key used to manage or maintain the security of the encryption system itself.

[0074] It should be noted that the public business key can be expressed as PK.Transact.ECKA, and the private management key can be expressed as SK.Manage.ECKA.

[0075] In some embodiments of the present application, the temporary public key of the second device refers to the public key part of the temporary key pair, which is used to encrypt data.

[0076] In some embodiments of the present application, the temporary private key of the first device refers to the private key part of the temporary key pair, which is used to decrypt data encrypted by the corresponding temporary public key.

[0077] It should be noted that the temporary public key of the second device can be expressed as ePK.New.ECKA, and the temporary private key of the first device can be expressed as eSK.Old.ECKA.

[0078] It should be noted that the business key refers to the key used to encrypt and decrypt business data to ensure the confidentiality, integrity and availability of business data during transmission and storage; the management key is the key used to encrypt, decrypt, store or manage other keys; the public key refers to a set of keys that form a ciphertext by combining the ciphertext and the encryption key through irreversible mathematical operations, which is usually used to encrypt data to ensure the security of data during transmission; the private key corresponds to the public key and is used to decrypt data encrypted by the public key; the temporary key is a time-limited key that will automatically expire or be replaced after a certain period of time. This feature makes the temporary key more secure than the long-term valid key.

[0079] In some embodiments of the present application, when the first device is initialized, it can generate two sets of ECKA keys through the security chip access program, namely PK.Transact.ECKA, SK.Transact.ECKA, PK.Manage.ECKA, and SK.Manage.ECKA. Then, the first device can upload PK.Manage.ECKA and PK.Transact.ECKA to the server for certificate issuance. After the certificate issuance is completed, the corresponding certificates CERT.Transact.ECKA, CERT.Manage.ECKA and the corresponding CA, namely CA.Manage and CA.Transact, are updated to the security chip access program, so that key negotiation can be performed subsequently through the above-mentioned keys and certificate information.

[0080] Among them, CERT.Transact.ECKA is a digital certificate used for business (Transact) operations, which can contain public key information, certificate holder information (such as organization name, domain name, etc.), certificate validity period, issuer (i.e. CA) information, etc.; CERT.Manage.ECKA: used for management (Manage) operations, which can also contain public key information, certificate holder information, certificate validity period and issuer information, etc.; CA.Manage is used for the digital certificate of the certificate authority (CA) responsible for issuing certificates related to management operations; CA.Transact is used for issuing certificates related to business operations. After the certificates are issued, these certificates (CERT.Transact.ECKA, CERT.Manage.ECKA) and CA certificate information (CA.Manage, CA.Transact) need to be updated to the security chip access program for use in subsequent key negotiation and other security operations.

[0081] In the embodiment of the present application, the first device can encrypt the sensitive data to be transmitted by a combined key derived from the first key and the second key, and generate the final key (first combined key) by combining multiple keys (including a public business key, a private management key, a temporary public key, and a temporary private key), which increases the difficulty of cracking. Even if one of the keys is leaked, the attacker still needs to obtain other keys to decrypt the data, which effectively reduces the risk of illegal access to the data. In addition, by introducing temporary keys (temporary public keys and temporary private keys), the key system is made dynamic. Due to the timeliness of the temporary keys, the temporary keys will automatically expire or be replaced after a certain period of time, reducing the possibility of long-term attacks or abuse of the keys, thereby improving the security of the keys.

[0082] Step 203: The first device sends the encrypted sensitive data to the second device.

[0083] In some embodiments of the present application, after establishing a communication connection with the second device, the first device may send encrypted sensitive data to the second device based on the communication connection.

[0084] In some embodiments of the present application, the above-mentioned communication connection may include at least one of the following: Bluetooth connection, Near Field Communication (NFC) connection, Wireless Fidelity (WIFI), ZigBee Technology (ZigBee) connection, Universal Serial Bus (USB), etc.

[0085] It should be noted that the above-mentioned establishing a communication connection can be alternatively described as establishing a data transmission link or a data transmission path.

[0086] In the data transmission method provided by the embodiment of the present application, the first device receives a data read instruction from the second device, the data read instruction is used to request to obtain sensitive data in the security chip of the first device, the first device obtains the sensitive data stored in the security chip according to the data read instruction, and encrypts the sensitive data using the first combined key, and then sends the encrypted sensitive data to the second device, wherein the first combined key is generated based on the first key and the second key, the first key is generated based on the public business key of the second device and the private management key of the first device, and the second key is generated based on the temporary public key of the second device and the temporary private key of the first device. Through this method, when the first device sends the sensitive data stored in the security chip to the second device, the sensitive data is encrypted by the combined key generated by multiple keys (i.e., the first key and the second key), which can improve the security of sensitive data transmission. Furthermore, since the first key and the second key are different types of keys generated based on different key information, respectively, a more secure combined key can be generated by different types of keys, thereby further ensuring the security of sensitive data transmission.

[0087] In some embodiments of the present application, before the first device uses the first combined key to encrypt the sensitive data in the above step 202, the data transmission method provided in the embodiment of the present application may further include the following steps 204 to 206:

[0088] Step 204: The first device generates a first key according to the public service key of the second device and the private management key of the first device.

[0089] Step 205: The first device generates a second key according to the temporary public key of the second device and the temporary private key of the first device.

[0090] Step 206: The first device generates a first combined key according to the first key and the second key.

[0091] In some embodiments of the present application, the first device may generate the first combined key according to the first key and the second key by using a key derivation algorithm. Exemplarily, the key derivation algorithm may be a key dispersion algorithm.

[0092] Exemplarily, taking the first device as terminal A and the second device as terminal B, terminal A can obtain the public business key (PK.Transact.ECKA) of terminal B, and operate the public business key of terminal B and its own private management key (SK.Manage.ECKA) through a key dispersion algorithm to generate a first key ShSss, ShSss=Cal(SK.Manage.ECKA,PK.Transact.ECKA), and terminal A can obtain the temporary public key (ePK.New.ECKA) of terminal B, and operate the temporary public key of terminal B and its own temporary private key (eSK.Old.ECKA) through a key dispersion algorithm to generate a second key ShSee, ShSee=Cal(ePK.New.ECKA, eSK.Old.ECKA). Then, device A can combine or operate the first key ShSss and the second key ShSee to generate a combined key.

[0093] In some embodiments of the present application, the above step 204 may include the following steps 204a to 204c:

[0094] Step 204a: The first device receives the first service certificate sent by the second device, and performs signature verification on the first service certificate according to the first CA verification information.

[0095] Step 204b: When the signature verification is successful, the first device obtains the public service key of the second device from the first service certificate.

[0096] Step 204c: The first device generates a first key based on the public service key of the second device and the private management key of the first device.

[0097] In some embodiments of the present application, the first service certificate may be a service certificate, namely, CERT.Transact.ECKA.

[0098] In some embodiments of the present application, the first CA verification information may be a business CA, namely CA.Transact.

[0099] In some embodiments of the present application, the first device may use the first CA verification information to perform signature verification on the business certificate of the second device to ensure that the business certificate of the second device is issued by a trusted CA and that the certificate content has not been tampered with during transmission.

[0100] In some embodiments of the present application, when the first device successfully verifies the first business certificate of the second device, the first device can extract the public business key of the second device from the first business certificate to derive an encryption key using the extracted public business key.

[0101] For example, taking the first device as device A and the second device as device B, after device B sends the CERT.Transact.ECKA certificate to device A, device A uses CA.Transact to perform signature verification on the CERT.Transact.ECKA of device B. If the certificate verification is successful, device A extracts the business public key PK.Transact.ECKA from the business certificate, and based on the business public key PK.Transact.ECKA of device B and its own management private key SK.Manage.ECKA, calculates the first key through the key dispersion algorithm.

[0102] In some embodiments of the present application, the above step 205 may include the following steps 205a and 205b:

[0103] Step 205a: The first device receives the temporary public key sent by the second device.

[0104] Step 205b: The first device generates a second key according to the temporary public key of the second device and the temporary private key of the first device.

[0105] In some embodiments of the present application, the first device may generate a temporary private key based on a key generation algorithm. Exemplarily, the key generation algorithm may be a random number generation algorithm or a key derivation function.

[0106] Exemplarily, after device B generates a temporary public key through a key generation algorithm, it sends the temporary public key to device A. Device A performs calculations based on the temporary public key of device B and its own temporary private key generated by the key generation algorithm to generate a second key.

[0107] Exemplarily, in combination with the above example, device A extracts the business public key PK.Transact.ECKA from the business certificate, and based on the business public key PK.Transact.ECKA of device B and its own management private key SK.Manage.ECKA, calculates the first key through a key dispersion algorithm, and, when the second key is generated by performing calculations based on the temporary public key of device B and its own temporary private key, device A can derive a combined key based on the first key and the second key.

[0108] In some embodiments of the present application, the above step 202 can be implemented by the following step 202a.

[0109] Step 202a: The first device reads the sensitive data stored in the security chip through the internal shared interface, and encrypts the read sensitive data using the first combined key through the security unit access program to obtain the encrypted sensitive data.

[0110] In some embodiments of the present application, the internal shared interface is an interface in the first device for interacting with the security chip.

[0111] It should be noted that the security unit access program, namely the above-mentioned SE Reader application, may have two sets of asymmetric keys (business key and management key) and two CA certificates (business certificate and management certificate) to encrypt sensitive data to be transmitted.

[0112] Exemplarily, in combination with the above embodiments, device A can derive a combined key based on the first key and the second key. After receiving the data transmission instruction from device B, device A can read sensitive data from the security chip through the internal shared interface, and encrypt the sensitive data using the combined key through the SE Reader application to obtain the encrypted sensitive data.

[0113] In an embodiment of the present application, the first device can use the first combined key to encrypt the data read from the security chip through the security unit access program. In this way, even if the data is intercepted during transmission, the attacker cannot directly obtain the original data because it has been encrypted, thereby reducing the risk of data leakage.

[0114] In some embodiments of the present application, the above step 203 can be implemented by the following step 203a.

[0115] Step 203a: The first device accesses the program through the security unit, and based on the communication connection between the first device and the second device, sends the encrypted sensitive data to the second device.

[0116] The communication connection is a Bluetooth connection or a Near Field Communication (NFC) connection.

[0117] In some embodiments of the present application, a communication connection is established between the first device and the second device.

[0118] Exemplarily, in combination with the above example, taking the communication connection as a Bluetooth connection as an example, device A reads sensitive data from the security chip through the internal shared interface, and encrypts the sensitive data using the combined key through the SE Reader application. After obtaining the encrypted sensitive data, the encrypted sensitive data can be sent to device B via Bluetooth based on the Bluetooth connection between device B.

[0119] In an embodiment of the present application, the first device can use short-range communication technologies such as Bluetooth or NFC to send sensitive data to the second device offline. Since the data transmission process does not require the help of the Internet, the sensitive data can be prevented from being stolen during transmission over the network. On the other hand, since offline transmission is not affected by network bandwidth and stability, fast data transmission can be achieved, thereby improving data transmission efficiency.

[0120] In some embodiments of the present application, after the above step 203, the data transmission method provided in the embodiment of the present application may further include the following steps 207 and 208:

[0121] Step 207: The first device sends a transmission end instruction to the second device.

[0122] Step 208: Upon receiving the data deletion instruction sent by the second device, the first device deletes the sensitive data stored in the security chip.

[0123] The transmission end instruction is used to indicate the end of the transmission of sensitive data with the second device, and the data deletion instruction is used to indicate the deletion of sensitive data stored in the first device.

[0124] In some embodiments of the present application, the first device may send a transmission end instruction to the second device to indicate the end of the transmission when the transmission of sensitive data requested by the second device is completed.

[0125] Exemplarily, in combination with the above example, after device A completes the transmission of encrypted sensitive data based on the Bluetooth connection between device B, it sends a transmission end instruction to device B. After device B receives the transmission end instruction, it sends a data deletion instruction to device A. After receiving the data deletion instruction, device A deletes the sensitive data stored in the security chip.

[0126] In an embodiment of the present application, by adding an instant deletion mechanism, after the transmission of sensitive data is completed, the first device will delete the sensitive data stored in the security chip, so that the sensitive data is deleted immediately after the transmission is completed, reducing unnecessary data retention in the device or system and reducing the risk of privacy leakage; on the other hand, through the signaling interaction between the first device and the second device B, the sensitive data can be deleted immediately after the transmission is completed, without the need to manually trigger the deletion of the data in the first device after the transmission is completed, thereby improving the efficiency of the operation process.

[0127] Figure 3 A schematic diagram of another data transmission method provided in an embodiment of the present application, such as Figure 3 As shown, the data transmission method may include the following steps 301 and 302:

[0128] Step 301: The second device sends a data read instruction to the first device.

[0129] The data reading instruction is used to request to obtain sensitive data in the security chip of the first device.

[0130] Step 302: The second device receives the encrypted sensitive data sent by the first device.

[0131] Among them, the above-mentioned sensitive data is encrypted by a first combined key, and the above-mentioned first combined key is generated based on a first key and a second key. The first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0132] It should be noted that the explanation of this embodiment can refer to the relevant description of the above embodiment, which will not be repeated here.

[0133] In the data transmission method provided in the embodiment of the present application, the second device sends a data read instruction to the first device to request sensitive data, and then receives the data processed by a specific encryption method. Through this method, the sensitive data is encrypted using the first combination key, ensuring the security of the data during transmission. Even if the data is intercepted during transmission, without the correct key combination, it cannot be decrypted to obtain the real information, thereby effectively preventing data leakage; because the first combination key is composed of two independent keys (the first key and the second key), it provides double security protection, thereby increasing the difficulty of cracking the key and improving the security of data transmission.

[0134] In some embodiments of the present application, after the above step 302, the data transmission method provided by the embodiment of the present application may further include the following step 303:

[0135] Step 303: The second device uses the second combined key to decrypt the encrypted sensitive data to obtain decrypted sensitive data.

[0136] The second combined key is generated based on the third key and the fourth key. The third key is generated based on the public management key of the first device and the private business key of the second device. The fourth key is generated based on the temporary public key of the first device and the temporary private key of the second device.

[0137] In some embodiments of the present application, the public management key of the first device refers to a key used to encrypt management data or perform other encryption operations related to key management.

[0138] In some embodiments of the present application, the private service key of the second device refers to a private key used for encrypting a specific service in the second device.

[0139] It should be noted that the public management key can be expressed as PK.Manage.ECKA, and the private business key can be expressed as SK.Transact.ECKA.

[0140] In some embodiments of the present application, the temporary public key of the first device refers to a public key generated by the first device for a communication at a certain time or within a certain period of time.

[0141] In some embodiments of the present application, the temporary private key of the second device refers to a private key generated by the second device for a communication at a certain time or within a certain period of time.

[0142] It should be noted that the temporary public key of the first device can be expressed as ePK.Old.ECKA, and the temporary private key of the second device can be expressed as eSK.New.ECKA.

[0143] In some embodiments of the present application, the second combined key is the same as the first combined key.

[0144] It should be noted that the first device and the second device independently generate a key pair (public key and private key) using the ECKA algorithm, and calculate the same shared key by exchanging the public keys above. Among them, the second device uses Cal (PK.Manage.ECKA, SK.Transact.ECKA) to generate ShSss, that is, the management public key and the transaction private key are used, and Cal (eSK.New.ECKA, ePK.Old.ECKA) is used to generate ShSee, using the private key of the second device and the public key of the first device. The first device, on the contrary, uses Cal (SK.Manage.ECKA, PK.Transact.ECKA) to generate ShSss, and uses Cal (ePK.New.ECKA, eSK.Old.ECKA) to generate ShSee. Since PK.Manage.ECKA and SK.Manage.ECKA are the public-private key pairs in the first device, and SK.Transact.ECKA and PK.Transact.ECKA are the public-private key pairs in the second device, the ShSss of the first device and the second device calculated at the end are the same. Similarly, eSK.New.ECKA and ePK.New.ECKA are the public-private key pair in the second device, and ePK.Old.ECKA and eSK.Old.ECKA are the public-private key pair in the first device, so the ShSee calculated in the end for the first device and the second device is also the same.

[0145] Exemplarily, in combination with the above example, taking the first device as device A and the second device as device B, device A reads sensitive data from the security chip through the internal shared interface, and uses the combined key through the SE Reader application to encrypt the sensitive data to obtain the encrypted sensitive data, and then sends the encrypted sensitive data to device B via Bluetooth based on the Bluetooth connection between device B. Device B receives the encrypted sensitive data from device A and uses the second combined key to decrypt the encrypted sensitive data to obtain the decrypted sensitive data.

[0146] In some embodiments of the present application, before the above step 303, the data transmission method provided by the embodiment of the present application may further include the following steps 304 to 306:

[0147] Step 304: The second device generates a third key according to the public management key of the first device and the private service key of the second device.

[0148] Step 305: The second device generates a fourth key according to the temporary public key of the first device and the temporary private key of the second device.

[0149] Step 306: The second device generates the second combined key according to the third key and the fourth key.

[0150] In some embodiments of the present application, the first device may generate the second combined key according to the third key and the fourth key by using a key derivation algorithm. Exemplarily, the key derivation algorithm may be a key dispersion algorithm.

[0151] Exemplarily, taking the first device as terminal A and the second device as terminal B, terminal B can obtain the public management key (PK.Manage.ECKA) of terminal A, and operate the public management key of terminal A and its own private business key (SK.Transact.ECKA) through the key dispersion algorithm to generate the second key ShSss, ShSss=Cal(PK.Manage.ECKA,SK.Transact.ECKA), and terminal B can obtain the temporary public key (ePK.Old.ECKA) of terminal A, and operate the temporary public key of terminal A and its own temporary private key (eSK.New.ECKA) through the key dispersion algorithm to generate the fourth key ShSee, ShSee=Cal(ePK.Old.ECKA, eSK.New.ECKA). Then, device B can combine or operate the third key ShSss and the fourth key ShSee to generate a combined key.

[0152] In some embodiments of the present application, the above step 304 may include the following steps 304a to 304c:

[0153] Step 304a: The second device receives the first management certificate sent by the first device, and performs signature verification on the first management certificate according to the second certificate authority CA verification information.

[0154] Step 304b: When the signature verification is successful, the second device obtains the public management key of the first device from the first management certificate.

[0155] Step 304c: The second device generates a third key based on the public management key of the first device and the private service key of the second device.

[0156] In some embodiments of the present application, the first management certificate may be a management certificate, namely, CERT.Manage.ECKA.

[0157] In some embodiments of the present application, the second CA verification information may be a management CA, namely CA.Manage.

[0158] In some embodiments of the present application, the second device may use the second CA verification information to perform signature verification on the management certificate of the first device to ensure that the management certificate of the first device is issued by a trusted CA and that the certificate content has not been tampered with during transmission.

[0159] In some embodiments of the present application, when the second device successfully verifies the first management certificate of the first device, it can extract the public management key of the first device from the first management certificate to derive an encryption key using the extracted public management key.

[0160] For example, taking the first device as device A and the second device as device B, after device A sends the CERT.Manage.ECKA certificate to device B, device B uses CA.Manage to perform signature verification on the CERT.Manage.ECKA of device A. If the certificate verification is successful, device B extracts the management public key PK.Manage.ECKA from the management certificate, and based on the management public key PK.Manage.ECKA of device A and its own business private key SK.Transact.ECKA, calculates the third key through the key dispersion algorithm.

[0161] In some embodiments of the present application, the first device may generate a temporary private key based on a key generation algorithm, and generate a fourth key based on its own temporary private key and a temporary public key from the second device.

[0162] Exemplarily, after device A generates a temporary public key through a key generation algorithm, it sends the temporary public key to device B. Device B performs calculations based on the temporary public key of device A and its own temporary private key to generate a fourth key.

[0163] Exemplarily, in combination with the above example, when device B obtains the third key and the fourth key by calculating through the key dispersion algorithm, device B may derive a combined key based on the third key and the fourth key.

[0164] In some embodiments of the present application, the above step 303 can be implemented by the following step 303a.

[0165] Step 303a: The second device accesses the program through the security unit, and uses the second combined key to decrypt the encrypted sensitive data to obtain the decrypted sensitive data.

[0166] Exemplarily, in combination with the above example, after receiving the encrypted sensitive data from device A, device B decrypts the encrypted sensitive data using the second combined key through the SEReader application to obtain the decrypted sensitive data.

[0167] In some embodiments of the present application, the above step 301 can be implemented by the following step 301a.

[0168] Step 301a: The second device encrypts the data read instruction using the second combined key, and sends the data read instruction encrypted by the second combined key to the first device.

[0169] In some embodiments of the present application, when the second device requests to obtain sensitive data of the first device, the data reading instruction can be encrypted by the second combined key, thereby improving the security of the data reading instruction transmission.

[0170] Exemplarily, device B may encrypt the data reading instruction by using the second combined key, and send the encrypted data reading instruction to device A.

[0171] It should be noted that, after receiving the data read instruction from the second device, the first device can use the first combined key to decrypt the data read instruction, obtain the decrypted data read instruction, and perform the data transmission operation according to the data instruction.

[0172] In some embodiments of the present application, after the above step 303, the data transmission method provided by the embodiment of the present application may further include the following step 307:

[0173] Step 307: The second device stores the decrypted sensitive data in the security chip of the second device.

[0174] Exemplarily, in combination with the above example, after device B receives the encrypted sensitive data from device A, it decrypts the encrypted sensitive data using the second combined key through the SEReader application to obtain the decrypted sensitive data. Then, device B can store the decrypted sensitive data in its own security chip, thereby ensuring the security of the sensitive data.

[0175] In some embodiments of the present application, after the above step 302, the data transmission method provided by the embodiment of the present application may further include the following step 308:

[0176] Step 308: Upon receiving the transmission end instruction sent by the first device, the second device sends a data deletion instruction to the first device.

[0177] The transmission end instruction is used to indicate the end of the transmission of sensitive data with the second device, and the data deletion instruction is used to indicate the deletion of the sensitive data stored in the security chip of the first device.

[0178] Exemplarily, in combination with the above example, after device A completes the transmission of encrypted sensitive data based on the Bluetooth connection between device B, it sends a transmission end instruction to device B. After device B receives the transmission end instruction from device A, it sends a data deletion instruction to device A to instruct device A to delete the sensitive data in its security chip. After receiving the data deletion instruction, device A deletes the sensitive data stored in the security chip.

[0179] In an embodiment of the present application, by adding an instant deletion mechanism, after the transmission of sensitive data is completed, the first device will delete the sensitive data stored in the security chip, so that the sensitive data is deleted immediately after the transmission is completed, reducing unnecessary data retention in the device or system and reducing the risk of privacy leakage; on the other hand, through the signaling interaction between the first device and the second device B, the sensitive data can be deleted immediately after the transmission is completed, without the need to manually trigger the deletion of the data in the first device after the transmission is completed, thereby improving the efficiency of the operation process.

[0180] Figure 4 A schematic diagram of the interactive process of data transmission between devices provided in the embodiment of the present application, such as Figure 4 As shown, the interactive process of data transmission between the above devices may include the following steps 41 to 50:

[0181] Step 41: The new device initiates a data transmission request through a software development kit (SDK).

[0182] Step 42: The new device invokes the eSE Reader application (ie, ese READER Applet) through the trusted environment.

[0183] Step 43: After a series of processing by the eSE Reader application, the new device sends a request to the contactless front-end (CLF).

[0184] Step 44: The new device sends a data read instruction to the old device through the CLF.

[0185] Step 45: After receiving the data reading instruction from the new device, the old device sends the instruction to the eSE Reader application in the old device through CLF.

[0186] Step 46: After receiving the data read instruction through the eSE Reader application, the old device reads the sensitive data stored in the secure SE.

[0187] Step 47: The old device assembles and encrypts the sensitive data read from the secure SE and sends it to the CLF.

[0188] Step 48: The old device sends the encrypted sensitive data to the new device via the established secure channel via the CLF.

[0189] Step 49: After receiving the encrypted sensitive data, the old device sends the encrypted sensitive data to the eSE Reader application through the CLF.

[0190] Step 50: The new device decrypts and parses the received sensitive data through the eSE Reader, and stores the decrypted and parsed sensitive data in the security chip.

[0191] In combination with the above embodiments, Figure 5 A flowchart of a data transmission method provided in an embodiment of the present application is shown in FIG. Figure 5 A schematic diagram of a data transmission process when sensitive data is migrated between a first device and a second device is shown.

[0192] Exemplarily, the above data transmission method may include the following steps 51 to 57:

[0193] Step 51: The user logs in to the device and completes identity authentication.

[0194] Exemplarily, the user logs in to the same account on the new and old devices respectively, and the login is successful, completing the identity authentication.

[0195] Step 52: After the new device and the old device are placed in a communication position, the eSE Reader application on the new device is activated, and the eSE Reader applications in the two devices begin mutual trust authentication and communication key negotiation.

[0196] Exemplarily, the new device activates the eSE Reader program of the security chip of the new device through the secure environment, so that the new device can access the eSE Reader application on the old device through the short-distance transmission protocol.

[0197] The following explains the key negotiation process between the new device and the old device.

[0198] ① The new device sends its CERT.Transact.ECKA to the eSE Reader application of the old device. The old device uses CA.Transact to verify the signature of CERT.Transact.ECKA and extract PK.Transact.ECKA;

[0199] ② The new device requests the eSE Reader application of the old device, obtains CERT.Manage.ECKA from the old device and verifies the signature. At the same time, it uses the CA.ManageCERT.Manage.ECKA stored in its own device to verify the signature and extract PK.Manage.ECKA;

[0200] ③ The eSE Reader application of the new device and the eSE Reader application of the old device respectively generate a set of temporary asymmetric keys: ePK / eSK.New.ECKA, ePK / eSK.Old.ECKA

[0201] ④The new device transmits ePK.New.ECKA to the old device and obtains the temporary public key ePK.Old.ECKA of the old device at the same time;

[0202] ⑤ The new device generates a set of keys ShSss and ShSee, where: ShSss = Cal(PK.Manage.ECKA, SK.Transact.ECKA), ShSee = Cal(eSK.New.ECKA, ePK.Old.ECKA); similarly, the old device generates a set of keys ShSss and ShSee, where: ShSss = Cal(SK.Manage.ECKA, PK.Transact.ECKA), ShSee = Cal(ePK.New.ECKA, eSK.Old.ECKA).

[0203] ⑥ The new device and the old device negotiate a set of keys based on their respective ShSss and ShSee, which are used for encryption and decryption of data in subsequent communications.

[0204] Step 53: The SE Reader application in the new device uses the negotiated key to encrypt the instruction to read data and sends it to the old device.

[0205] Exemplarily, the SE Reader application in the new device uses the negotiated key to encrypt the instruction for reading data, and then sends the encrypted instruction to the eSE Reader application in the old device.

[0206] Step 54: After receiving the instruction, the eSE Reader application of the old device accesses the sensitive data through the internal interface, encrypts the sensitive data, and sends the sensitive data to the new device through the transmission protocol.

[0207] Exemplarily, after receiving the instruction, the eSE Reader application of the old device reads the sensitive data to be accessed through the internal interface, assembles the data according to the pre-negotiated rules, and encrypts the assembled data using the negotiated key.

[0208] Step 55: The SE Reader application in the new device receives the sensitive data, decrypts the sensitive data and stores it in the security chip.

[0209] Exemplarily, after receiving the data, the SE Reader application in the new device uses the key negotiated in S120 to decrypt the data, parses the data according to the rules, and stores the parsed data in a designated location.

[0210] Step 56: After all sensitive data is acquired, the new device sends a command to delete the sensitive data in the old device.

[0211] Exemplarily, after all data transmission is completed, the old device notifies the new device through an instruction. After receiving the end instruction, the SEReader application in the new device sends a delete instruction to the old device to delete the sensitive data in the old device.

[0212] Step 57: Repeat the process from step 53 to transfer the sensitive data in the old device to the new device, thereby achieving the migration of sensitive data in the security SE.

[0213] In the embodiments of the present application, through the powerful encryption function of the security chip in the electronic device, the risk of network attacks can be avoided by transmitting sensitive data in an offline state, ensuring that the data is not stolen or tampered with during the transmission process, thereby improving the security of data transmission. On the other hand, offline transmission is not affected by network bandwidth and stability, and data transmission can be carried out even in an environment without a network, which increases the flexibility and convenience of use, avoids the impact of network failures, delays and other problems on data transmission, and ensures that data can be transmitted stably between devices, thereby improving data transmission efficiency.

[0214] The above-mentioned method embodiments, or various possible implementation methods in each method embodiment, can be executed separately, or, under the premise that there is no contradiction, can also be executed in combination with each other. The specific implementation can be determined according to actual usage requirements, and the embodiments of the present application do not limit this.

[0215] The data transmission method provided in the embodiment of the present application can be executed by a data transmission device. In the embodiment of the present application, the data transmission method executed by a data transmission device is taken as an example to illustrate the data transmission device provided in the embodiment of the present application.

[0216] Figure 6 A schematic diagram of the structure of a data transmission device provided in an embodiment of the present application is shown in FIG. Figure 6As shown, the data transmission device 600 may include: a receiving module 601, a processing module 602 and a sending module 603, wherein: the receiving module 601 is used to receive a data reading instruction from the second device, the data reading instruction is used to request to obtain sensitive data in the security chip of the first device; the processing module 602 is used to obtain the sensitive data stored in the security chip according to the data reading instruction, and encrypt the sensitive data using the first combination key to obtain the encrypted sensitive data; the sending module 603 is used to send the encrypted sensitive data to the second device; wherein the first combination key is generated based on the first key and the second key, the first key is generated based on the public business key of the second device and the private management key of the first device, and the second key is generated based on the temporary public key of the second device and the temporary private key of the first device.

[0217] In some embodiments of the present application, the processing module is also used to generate a first key based on a public business key of the second device and a private management key of the first device before using the first combined key to encrypt sensitive data; the processing module is also used to generate a second key based on a temporary public key of the second device and a temporary private key of the first device; the processing module is also used to generate a first combined key based on the first key and the second key.

[0218] In some embodiments of the present application, the receiving module is also used to receive the first business certificate sent by the second device; the processing module is specifically used to perform signature verification on the first business certificate according to the first certificate authorization CA verification information received by the receiving module; the processing module is also used to obtain the public business key of the second device from the first business certificate if the signature verification passes; the processing module is also used to generate the first key based on the public business key of the second device and the private management key of the first device.

[0219] In some embodiments of the present application, the receiving module is also used to receive a temporary public key sent by the second device; the processing module is specifically used to generate a second key based on the temporary public key of the second device received by the receiving module and the temporary private key of the first device.

[0220] In some embodiments of the present application, the processing module is specifically used to: read the sensitive data stored in the security chip through the internal shared interface, and encrypt the read sensitive data using the first combined key through the security unit access program to obtain the encrypted sensitive data.

[0221] In some embodiments of the present application, the sending module is specifically used to access the program through the security unit, and send encrypted sensitive data to the second device based on the communication connection between the first device and the second device; wherein the communication connection is a Bluetooth connection or a near-field communication NFC connection.

[0222] In some embodiments of the present application, the sending module is further used to send a transmission end instruction to the second device after sending the encrypted sensitive data to the second device; the processing module is further used to delete the sensitive data stored in the security chip upon receiving a data deletion instruction sent by the second device; wherein the transmission end instruction is used to indicate the end of the transmission of sensitive data with the second device, and the data deletion instruction is used to indicate the deletion of the sensitive data stored in the security chip of the first device.

[0223] The data transmission device provided in the embodiment of the present application receives a data reading instruction from a second device, and the data reading instruction is used to request to obtain sensitive data in the security chip of the first device. The first device obtains the sensitive data stored in the security chip according to the data reading instruction, and encrypts the sensitive data using the first combined key, and then sends the encrypted sensitive data to the second device, wherein the first combined key is generated based on the first key and the second key, the first key is generated based on the public business key of the second device and the private management key of the first device, and the second key is generated based on the temporary public key of the second device and the temporary private key of the first device. Through this method, when the data transmission device sends the sensitive data stored in the security chip to the second device, the sensitive data is encrypted by the combined key generated by multiple keys (i.e., the first key and the second key), which can improve the security of sensitive data transmission. Further, since the first key and the second key are different types of keys generated based on different key information, respectively, a more secure combined key can be generated by different types of keys, thereby further ensuring the security of sensitive data transmission.

[0224] Figure 7 A schematic diagram of the structure of a data transmission device provided in an embodiment of the present application is shown in FIG. Figure 7 As shown, the data transmission device 700 may include a sending module 701 and a receiving module 702, wherein: the sending module 701 is used to send a data reading instruction to the first device, and the data reading instruction is used to request to obtain sensitive data in the security chip of the first device; the receiving module 702 is used to receive encrypted sensitive data sent by the first device; wherein the sensitive data is encrypted by a first combined key, the first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0225] In some embodiments of the present application, the device also includes a processing module, which is used to decrypt the encrypted sensitive data using the second combined key to obtain decrypted sensitive data after the receiving module receives the encrypted sensitive data sent by the first device; wherein the second combined key is generated based on a third key and a fourth key, the third key is generated based on a public management key of the first device and a private business key of the second device; and the fourth key is generated based on a temporary public key of the first device and a temporary private key of the second device.

[0226] In some embodiments of the present application, the processing module is also used to generate a third key based on the public management key of the first device and the private business key of the second device before using the second combined key to decrypt the encrypted sensitive data; the processing module is also used to generate a fourth key based on the temporary public key of the first device and the temporary private key of the second device; the processing module is also used to generate a second combined key based on the third key and the fourth key.

[0227] In some embodiments of the present application, the receiving module is also used to receive the first management certificate sent by the first device; the processing module is specifically used to perform signature verification on the first management certificate received by the receiving module according to the second certificate authorization CA verification information; the processing module is specifically used to obtain the public management key of the first device from the first management certificate when the signature verification passes; the processing module is specifically used to generate a third key based on the public management key of the first device and the private business key of the second device.

[0228] In some embodiments of the present application, the processing module is specifically used to access the program through the security unit, use the second combined key to decrypt the encrypted sensitive data, and obtain the decrypted sensitive data.

[0229] In some embodiments of the present application, the sending module is specifically configured to encrypt the data read instruction using the second combined key, and send the data read instruction encrypted by the second combined key to the first device.

[0230] In some embodiments of the present application, the processing module is further used to decrypt the sensitive data encrypted by the first combined key using the second combined key, and after obtaining the decrypted sensitive data, store the decrypted sensitive data in the security chip of the second device.

[0231] In some embodiments of the present application, the sending module is also used to send a data deletion instruction to the first device when a transmission end instruction sent by the first device is received; wherein the transmission end instruction is used to indicate the end of the transmission of sensitive data with the second device, and the data deletion instruction is used to indicate the deletion of sensitive data stored in the security chip of the first device.

[0232] The data transmission device provided in the embodiment of the present application sends a data read instruction to the first device to request sensitive data, and then receives data processed by a specific encryption method. Through this method, the sensitive data is encrypted using the first combination key, thereby ensuring the security of the data during transmission. Even if the data is intercepted during transmission, it cannot be decrypted to obtain the real information without the correct key combination, thereby effectively preventing data leakage; because the first combination key is composed of two independent keys (the first key and the second key), it provides double security protection, thereby increasing the difficulty of cracking the key and improving the security of data transmission.

[0233] The data transmission device in the embodiment of the present application can be an electronic device, or a component in the electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal, or it can be other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc., and can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0234] The data transmission device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0235] The data transmission device provided in the embodiment of the present application can implement each process implemented in the above-mentioned data transmission method embodiment. To avoid repetition, it will not be repeated here.

[0236] Alternatively, if Figure 8As shown, an embodiment of the present application also provides an electronic device 800, including a processor 801 and a memory 802, wherein the memory 802 stores programs or instructions that can be executed on the processor 801, and when the program or instructions are executed by the processor 801, the various steps of the above-mentioned data transmission method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, they are not repeated here.

[0237] It should be noted that the electronic devices in the embodiments of the present application include the mobile electronic devices and non-mobile electronic devices mentioned above.

[0238] Fig. 9 A schematic diagram of the hardware structure of an electronic device to implement an embodiment of the present application.

[0239] The electronic device 100 includes but is not limited to components such as a radio frequency unit 101, a network module 102, an audio output unit 103, an input unit 104, a sensor 105, a display unit 106, a user input unit 107, an interface unit 108, a memory 109, and a processor 110.

[0240] Those skilled in the art will appreciate that the electronic device 100 may also include a power source (such as a battery) for supplying power to various components, and the power source may be logically connected to the processor 110 through a power management system, thereby implementing functions such as managing charging, discharging, and power consumption management through the power management system. Fig. 9 The electronic device structure shown in the figure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently, which will not be described in detail here.

[0241] In some embodiments, the radio frequency unit 101 is used to receive a data read instruction from a second device, and the data read instruction is used to request to obtain sensitive data in the security chip of the first device; the processor 110 is used to obtain the sensitive data stored in the security chip, and encrypt the sensitive data using a first combination key to obtain the encrypted sensitive data; the radio frequency unit 101 is used to send the encrypted sensitive data to the second device; wherein the first combination key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0242] In some embodiments of the present application, the processor 110 is further used to generate a first key based on a public business key of the second device and a private management key of the first device before using the first combined key to encrypt the sensitive data; the processor 110 is further used to generate a second key based on a temporary public key of the second device and a temporary private key of the first device; the processor 110 is further used to generate the first combined key based on the first key and the second key.

[0243] In some embodiments of the present application, the radio frequency unit 101 is also used to receive a first service certificate sent by the second device; the processor 110 is specifically used to perform signature verification on the first service certificate according to the first certificate authorization CA verification information received by the radio frequency unit 101; the processor 110 is also used to obtain the public service key of the second device from the first service certificate when the signature verification passes; the processor 110 is also used to generate the first key based on the public service key of the second device and the private management key of the first device.

[0244] In some embodiments of the present application, the radio frequency unit 101 is further used to receive a temporary public key sent by the second device; the processor 110 is specifically used to generate the second key according to the temporary public key of the second device received by the radio frequency unit 101 and the temporary private key of the first device.

[0245] In some embodiments of the present application, the processor 110 is specifically used to: read the sensitive data stored in the security chip through an internal shared interface, and encrypt the read sensitive data using a first combined key through a security unit access program to obtain encrypted sensitive data.

[0246] In some embodiments of the present application, the radio frequency unit 101 is specifically used to access the program through the security unit, and send the encrypted sensitive data to the second device based on the communication connection between the first device and the second device; wherein the communication connection is a Bluetooth connection or a near-field communication NFC connection.

[0247] In some embodiments of the present application, the radio frequency unit 101 is further used to send a transmission end instruction to the second device after sending the encrypted sensitive data to the second device; the processor 110 is further used to delete the sensitive data stored in the security chip upon receiving a data deletion instruction sent by the second device; wherein the transmission end instruction is used to indicate the end of the transmission of sensitive data with the second device, and the data deletion instruction is used to indicate the deletion of the sensitive data stored in the security chip of the first device.

[0248] The electronic device provided in the embodiment of the present application receives a data read instruction from a second device, the data read instruction is used to request to obtain sensitive data in the security chip of the first device, the first device obtains the sensitive data stored in the security chip according to the data read instruction, and encrypts the sensitive data using the first combined key, and then sends the encrypted sensitive data to the second device, wherein the first combined key is generated based on the first key and the second key, the first key is generated based on the public business key of the second device and the private management key of the first device, and the second key is generated based on the temporary public key of the second device and the temporary private key of the first device. Through this method, when the electronic device sends the sensitive data stored in the security chip to the second device, the sensitive data is encrypted by the combined key generated by multiple keys (i.e., the first key and the second key), which can improve the security of sensitive data transmission. Further, since the first key and the second key are different types of keys generated based on different key information, respectively, a more secure combined key can be generated by different types of keys, thereby further ensuring the security of sensitive data transmission.

[0249] In other embodiments, the radio frequency unit 101 is used to send a data read instruction to the first device, and the data read instruction is used to request to obtain sensitive data in the security chip of the first device; the radio frequency unit 101 is used to receive encrypted sensitive data sent by the first device; wherein the sensitive data is encrypted by a first combined key, the first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

[0250] In some embodiments of the present application, the device also includes a processor 110, and the processor 110 is used to decrypt the encrypted sensitive data using a second combined key to obtain decrypted sensitive data after the radio frequency unit 101 receives the encrypted sensitive data sent by the first device; wherein the second combined key is generated based on a third key and a fourth key, the third key is generated based on a public management key of the first device and a private business key of the second device; and the fourth key is generated based on a temporary public key of the first device and a temporary private key of the second device.

[0251] In some embodiments of the present application, the processor 110 is further used to generate a third key based on the public management key of the first device and the private business key of the second device before using the second combined key to decrypt the encrypted sensitive data; the processor 110 is further used to generate a fourth key based on the temporary public key of the first device and the temporary private key of the second device; the processor 110 is further used to generate the second combined key based on the third key and the fourth key.

[0252] In some embodiments of the present application, the radio frequency unit 101 is also used to receive a first management certificate sent by the first device; the processor 110 is specifically used to perform signature verification on the first management certificate received by the radio frequency unit 101 according to the second certificate authorization CA verification information; the processor 110 is specifically used to obtain the public management key of the first device from the first management certificate when the signature verification passes; the processor 110 is specifically used to generate the third key based on the public management key of the first device and the private business key of the second device.

[0253] In some embodiments of the present application, the processor 110 is specifically configured to access the program through the security unit, and use the second combined key to decrypt the encrypted sensitive data to obtain the decrypted sensitive data.

[0254] In some embodiments of the present application, the radio frequency unit 101 is specifically configured to encrypt the data read instruction using the second combined key, and send the data read instruction encrypted by the second combined key to the first device.

[0255] In some embodiments of the present application, the processor 110 is further used to decrypt the sensitive data encrypted by the first combined key using the second combined key, and after obtaining the decrypted sensitive data, store the decrypted sensitive data in the security chip of the second device.

[0256] In some embodiments of the present application, the radio frequency unit 101 is also used to send a data deletion instruction to the first device upon receiving a transmission end instruction sent by the first device; wherein the transmission end instruction is used to indicate the end of sensitive data transmission with the second device, and the data deletion instruction is used to indicate the deletion of the sensitive data stored in the security chip of the first device.

[0257] In the data transmission device provided in the embodiment of the present application, the electronic device sends a data read instruction to the first device to request sensitive data, and then receives data processed by a specific encryption method. Through this method, the sensitive data is encrypted using the first combination key, thereby ensuring the security of the data during transmission. Even if the data is intercepted during transmission, without the correct key combination, it cannot be decrypted to obtain the real information, thereby effectively preventing data leakage; because the first combination key is composed of two independent keys (the first key and the second key), it provides double security protection, thereby increasing the difficulty of cracking the key and improving the security of data transmission.

[0258] It should be understood that in the embodiment of the present application, the input unit 104 may include a graphics processor (Graphics Processing Unit, GPU) 1041 and a microphone 1042, and the graphics processor 1041 processes the image data of a static picture or video obtained by an image capture device (such as a camera) in a video capture mode or an image capture mode. The display unit 106 may include a display panel 1061, and the display panel 1061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 107 includes a touch panel 1071 and at least one of other input devices 1072. The touch panel 1071 is also called a touch screen. The touch panel 1071 may include two parts: a touch detection device and a touch controller. Other input devices 1072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0259] The memory 109 can be used to store software programs and various data. The memory 109 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory 109 may include a volatile memory or a non-volatile memory, or the memory 109 may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM) and a direct memory bus random access memory (DRRAM). The memory 109 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0260] The processor 110 may include one or more processing units; optionally, the processor 110 integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor 110.

[0261] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned data transmission method embodiment are implemented and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0262] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0263] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned data transmission method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0264] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0265] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned data transmission method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0266] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0267] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0268] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A data transmission method, characterized in that: The method comprises: The first device receives a data read instruction from the second device, where the data read instruction is used to request to obtain sensitive data in the security chip of the first device; The first device obtains the sensitive data stored in the security chip according to the data reading instruction, and encrypts the sensitive data using the first combined key to obtain the encrypted sensitive data; The first device sends the encrypted sensitive data to the second device; The first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

2. The method according to claim 1, characterized in that: Before encrypting the sensitive data using the first combined key, the method further includes: The first device generates a first key according to the public service key of the second device and the private management key of the first device; The first device generates a second key according to the temporary public key of the second device and the temporary private key of the first device; The first device generates the first combined key according to the first key and the second key.

3. The method according to claim 2, characterized in that The first device generates a first key according to the public service key of the second device and the private service key of the first device, including: The first device receives the first service certificate sent by the second device, and performs signature verification on the first service certificate according to the first certificate authorization CA verification information; When the signature verification is successful, the first device obtains the public service key of the second device from the first service certificate; The first device generates the first key based on a public service key of the second device and a private management key of the first device.

4. The method according to claim 2, characterized in that: The first device generates a second key according to the temporary public key of the second device and the temporary private key of the first device, including: The first device receives a temporary public key sent by the second device, where the temporary public key is a temporary public key generated by the second device and used for exchanging keys with the first device; The first device generates the second key using a key generation algorithm according to a temporary public key of the second device and a temporary private key of the first device, wherein the temporary private key is a temporary private key generated by the first device and corresponds to the temporary public key of the second device.

5. The method according to claim 1, characterized in that The first device acquires the sensitive data stored in the security chip according to the data reading instruction, and encrypts the sensitive data using the first combined key to obtain the encrypted sensitive data, including: The first device reads the sensitive data stored in the security chip through the internal shared interface, and encrypts the read sensitive data using the first combined key through the security unit access program to obtain the encrypted sensitive data.

6. The method according to claim 1, characterized in that The first device sending the encrypted sensitive data to the second device includes: The first device sends the encrypted sensitive data to the second device through a security unit access program based on a communication connection between the first device and the second device; The communication connection is a Bluetooth connection or a near field communication (NFC) connection.

7. The method according to claim 1, characterized in that After the first device sends the encrypted sensitive data to the second device, the method further includes: The first device sends a transmission end instruction to the second device; The first device deletes the sensitive data stored in the security chip when receiving the data deletion instruction sent by the second device; The transmission end instruction is used to indicate the end of the transmission of sensitive data with the second device, and the data deletion instruction is used to indicate the deletion of the sensitive data stored in the security chip of the first device.

8. A data transmission method, characterized in that: The method comprises: The second device sends a data read instruction to the first device, where the data read instruction is used to request to obtain sensitive data in the security chip of the first device; The second device receives the encrypted sensitive data sent by the first device; Among them, the sensitive data is encrypted by a first combined key, the first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

9. The method according to claim 8, characterized in that After the second device receives the encrypted sensitive data sent by the first device, the method further includes: The second device decrypts the encrypted sensitive data using the second combined key to obtain decrypted sensitive data; The second combined key is generated based on a third key and a fourth key, the third key is generated based on a public management key of the first device and a private business key of the second device; the fourth key is generated based on a temporary public key of the first device and a temporary private key of the second device.

10. The method according to claim 9, characterized in that Before the second device decrypts the encrypted sensitive data using the second combined key, the method further includes: The second device generates a third key according to the public management key of the first device and the private service key of the second device; The second device generates a fourth key according to the temporary public key of the first device and the temporary private key of the second device; The second device generates the second combined key according to the third key and the fourth key.

11. The method according to claim 10, characterized in that The second device generates a third key according to the public management key of the first device and the private service key of the second device, including: The second device receives the first management certificate sent by the first device, and performs signature verification on the first management certificate according to the second certificate authorization CA verification information; When the signature verification is passed, the second device obtains the public management key of the first device from the first management certificate; The second device generates the third key based on the public management key of the first device and the secret service key of the second device.

12. The method according to claim 9, characterized in that The second device uses the second combined key to decrypt the encrypted sensitive data to obtain decrypted sensitive data, including: The second device accesses the program through the security unit and uses the second combined key to decrypt the encrypted sensitive data to obtain the decrypted sensitive data.

13. The method according to claim 8, characterized in that The second device sends a data read instruction to the first device, including: The second device encrypts the data read instruction using the second combined key, and sends the data read instruction encrypted by the second combined key to the first device.

14. The method according to claim 9, characterized in that After the second device uses the second combined key to decrypt the sensitive data encrypted by the first combined key to obtain the decrypted sensitive data, the method further includes: The second device stores the decrypted sensitive data in a security chip of the second device.

15. A data transmission device, characterized in that: The device comprises: a receiving module, a processing module and a sending module, wherein: The receiving module is used to receive a data reading instruction from a second device, where the data reading instruction is used to request to obtain sensitive data in the security chip of the first device; The processing module is used to obtain the sensitive data stored in the security chip according to the data reading instruction, and encrypt the sensitive data using the first combined key to obtain the encrypted sensitive data; The sending module is used to send the encrypted sensitive data to the second device; The first combined key is generated based on a first key and a second key, the first key is generated based on a public business key of the second device and a private management key of the first device, and the second key is generated based on a temporary public key of the second device and a temporary private key of the first device.

16. An electronic device, characterized in that: It includes a processor and a memory, the memory stores a program or instruction that can be run on the processor, and when the program or instruction is executed by the processor, it implements the data transmission method as described in any one of claims 1 to 7 or implements the steps of the data transmission method as described in any one of claims 8 to 14.

17. A readable storage medium, characterized in that: The readable storage medium stores a program or an instruction, and when the program or the instruction is executed by the processor, the steps of the data transmission method according to any one of claims 1 to 7 or the steps of the data transmission method according to any one of claims 8 to 14 are implemented.

Images