Key management method, key encryption method, data encryption method and related equipment
By using the root key to generate and encrypt the target key in the processor's built-in password module, the problem of insufficient security of the encryption and decryption results in IPSec VPN technology is solved, and higher security and stability are achieved.
CN119728101AActive Publication Date: 2025-03-28HYGON INFORMATION TECH CO LTD
4 Cites 3 Cited by
Patent Information
- Application Number
- CN202411822734.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-12-11
- Publication Date
- 2025-03-28
- Estimated Expiration
- 2044-12-11
AI Technical Summary
Technical Problem
In IPSec VPN technology, the security of the execution results of the encryption and decryption program is difficult to guarantee, which affects the security of the VPN connection.
Method used
Encryption and storage of the target key is ensured by using the root key to generate the target key ciphertext in the processor's built-in cipher module and merging it into a proprietary memory.
Benefits of technology
Improve the security of the execution results of the encryption and decryption operation, ensure the security of the target key and application key, and enhance the overall security of VPN connections.
✦ Generated by Eureka AI based on patent content.
Abstract
The embodiment of the invention provides a key management method, a key encryption method, a data encryption method and related equipment, and the key management method is applied to a built-in cryptographic module of a processor, and comprises the steps: receiving a key management request used for requesting to manage a target key, and the key management request comprises key management demand information; the target key is at least used for encrypting an application key, and the application key is a key key for the virtual private network to realize data security transmission; generating a target key ciphertext corresponding to the target key by using the root key; storing the target key ciphertext and the target key identification information in a special memory; the storage content of the special memory is managed by the password module, and when the storage content is used, the storage content is loaded into the secure memory; and returning index information used for indexing the target key ciphertext and the storage position of the target key authentication information. According to the technical scheme provided by the embodiment of the invention, the security of the execution result of the encryption and decryption program can be improved.
Need to check novelty before this filing date? Find Prior Art