A resource scheduling method for a cryptographic service platform

Abstract

The present invention relates to the technical field of cryptographic resource scheduling, and in particular to a cryptographic service platform resource scheduling method, which comprises the following steps: firstly, the cryptographic service demand is parsed, and the cryptographic service demand is converted into the expectation of the cryptographic service application for the cryptographic resources required to complete the cryptographic job, and combined with the current running state of the cryptographic device, whether the cryptographic service demand can be met is evaluated; if the demand is met, a cryptographic job scheduling strategy is generated, the expected load distance of the cryptographic device is calculated, and the cryptographic job is scheduled to the specific cryptographic device; if the demand is not met, a cryptographic device configuration strategy is generated, and the specified cryptographic device is reconstructed, and after the reconstruction is completed, the resource attributes of the cryptographic device are updated to generate a new cryptographic job scheduling strategy; by proposing cryptographic job scheduling strategies suitable for different demands and combining cryptographic resource reconstruction strategies, differentiated configuration and scheduling of cryptographic resources are realized, and dynamically extensible cryptographic service resources are provided to any user and device accessing the service system.

Description

Technical Field

[0001] The present invention relates to the technical field of cryptographic resource scheduling, and in particular to a cryptographic service platform resource scheduling method. Background Art

[0002] Cryptography is the foundation for building a power network security protection system. In order to solve the problem of secure and efficient cryptographic operations for massive concurrent services, it is urgent to study cryptographic resource collaborative dynamic scheduling technology to achieve dynamic allocation of cryptographic resources according to business traffic and on-demand adjustment.

[0003] Cryptographic resources are mainly carried by cryptographic devices, including physical cryptographic devices and virtual cryptographic devices. In actual application systems, cryptographic services are provided to application systems mainly by establishing a cryptographic resource pool that collects various cryptographic devices. Due to different suppliers and different equipment models, the computing capabilities of cryptographic devices vary, and the service requests for cryptographic calculations required by application systems also have uncertain characteristics, which may cause a sharp increase or decrease in business volume, all of which will affect the reasonable allocation of cryptographic resources. Existing resource scheduling algorithms pay little attention to the impact of cryptographic resource indicators, while cryptographic service scheduling needs to be based on cryptographic resource indicators, taking into account a variety of influencing factors such as network bandwidth, system load, and memory usage. In addition, it is necessary to dynamically adjust the scheduling strategy according to changes in cryptographic service requirements to ensure the efficiency and reliability of cryptographic services. Summary of the invention

[0004] The purpose of the present invention is to overcome the deficiencies of the prior art and to provide a cryptographic service platform resource scheduling method to solve the above problems.

[0005] The object of the present invention is achieved by: a cryptographic service platform resource scheduling method, comprising the following steps:

[0006] S1: First, parse the cryptographic service requirements and convert them into the cryptographic service application's expectations of the cryptographic resources required to complete the cryptographic tasks. Combined with the current operating status of the cryptographic device, evaluate whether the cryptographic service requirements can be met.

[0007] S2: If the requirements are met, a cryptographic job scheduling strategy is generated, the expected load distance of the cryptographic device is calculated, and the cryptographic job is scheduled to a specific cryptographic device;

[0008] S3: If the requirements are not met, a cryptographic device configuration policy is generated, and the specified cryptographic device is reconstructed. After the reconstruction is completed, the cryptographic device resource attributes are updated and a new cryptographic job scheduling policy is generated;

[0009] S4: The parameters of the cryptographic service requirement include the cryptographic service requirement identifier, the cryptographic service type, the cryptographic service validity period, the cryptographic service maximum rate, the cryptographic service minimum rate, the cryptographic algorithm identifier, the cryptographic algorithm parameters and the operating mode.

[0010] Preferably, define E m is the expected demand for the mth cryptographic service resource, which represents the average of the maximum rate and the minimum rate of the cryptographic service. This expectation can reduce the possibility of full load or overload of the cryptographic equipment and improve the reliability of the cryptographic service. Define S mn is the cryptographic operation saturation of the nth cryptographic service resource in the mth cryptographic device, xmn is the rate of the nth cryptographic service resource in the current mth cryptographic device, and X mnbest is the theoretical maximum rate of the nth cryptographic service resource in the current mth cryptographic device, then S mn It can be expressed as:

[0011]

[0012] Definition n is the membership function, when a n =1, the task requirement contains this resource. n =0, the task requirement does not include this resource;

[0013] Defining dist m is the expected load distance of the cryptographic device, expressed as:

[0014] dist m =∑a n (1-S mn )

[0015] If dist m ≥0, it means that the mth cryptographic device meets the cryptographic service requirements, and the cryptographic job can be scheduled to the cryptographic device for cryptographic algorithm calculation; if dist m <0, it means that the mth cryptographic device cannot meet the cryptographic service requirements.

[0016] Preferably, the steps of the on-demand cryptographic job scheduling strategy are as follows:

[0017] S1: parse the cryptographic service request, calculate the demand expectation of the cryptographic service request, and go to S2;

[0018] S2: Obtain the cryptographic computing resource utilization rate and network bandwidth resource utilization rate of each cryptographic device, calculate the service capability evaluation coefficient of each cryptographic device and sort them, put the corresponding cryptographic device index values ​​into the cryptographic device candidate queue in turn, and go to S3;

[0019] S3: Determine whether there are any selectable cryptographic devices in the cryptographic device candidate queue. If not, go to S4. Otherwise, calculate the expected load distance of the currently selected cryptographic device. If the expected load distance is greater than or equal to 0, add the cryptographic job in the cryptographic service request to the cryptographic job queue of the current cryptographic device, and go to S5. If the expected load distance value is less than 0, the current cryptographic device cannot meet the cryptographic service requirements, remove the device from the cryptographic device candidate queue, and go to S3.

[0020] S4: Generate a cryptographic device configuration policy, reconstruct cryptographic resources for the specified cryptographic device, and after the reconstruction is completed, update the cryptographic resource configuration of the cryptographic device and go to S2;

[0021] S5: Generate a cryptographic job scheduling strategy and go to S1.

[0022] Preferably, the cryptographic job scheduling strategy is configured with a verification scenario and a verification environment corresponding to the cryptographic application scheme; based on the verification scenario and the verification environment, a simulated cryptographic application corresponding to the cryptographic application scheme is created; the simulated cryptographic application is verified to obtain a cryptographic application verification result corresponding to the cryptographic application scheme; based on the cryptographic application verification result, a scheme evaluation operation is performed on the cryptographic application scheme to obtain a scheme evaluation result of the cryptographic application scheme.

[0023] Preferably, based on the scheme description of the cryptographic job scheduling strategy, the scenario verification information and environment verification information corresponding to the cryptographic application scheme are determined; the scenario verification information includes at least one of verification conditions, necessary verification steps and passing criteria; based on the scenario verification information, the verification scenario corresponding to the cryptographic application scheme is configured; based on the environment verification information, the verification environment corresponding to the cryptographic application scheme is configured.

[0024] Preferably, configuring the verification environment corresponding to the cryptographic application scheme according to the environment verification information includes: creating a verification server according to the environment verification information; the verification server is used to carry and execute cryptographic application test cases generated based on the cryptographic application scheme;

[0025] Based on the verification server, determine the server configuration information of the verification server; according to the server configuration information, determine the SDK configuration information corresponding to the simulated password application to be created, and send the SDK configuration information to the verification server, so that the verification server performs the corresponding verification server SDK configuration based on the SDK configuration information to obtain the verification server configuration result; according to the environment verification information, create a password device; the password device is used to carry the simulated password application;

[0026] Based on the cryptographic device, determine the cryptographic device configuration information of the cryptographic device, and send the cryptographic device configuration information to the cryptographic device, so that the cryptographic device performs the corresponding cryptographic device configuration based on the cryptographic device configuration information to obtain a cryptographic device configuration result; the cryptographic device configuration information includes the software media and configuration files required to create the simulated cryptographic application; receive the verification server configuration result sent by the verification server and the cryptographic device configuration result sent by the cryptographic device, and determine the verification environment corresponding to the cryptographic application scheme based on the verification server configuration result and the cryptographic device configuration result.

[0027] The present invention has the following beneficial effects: The present application proposes an efficient on-demand scheduling scheme for cryptographic service resources. By proposing cryptographic job scheduling strategies suitable for different needs and combining cryptographic resource reconstruction strategies, differentiated configuration and scheduling of cryptographic resources are achieved, and dynamically scalable cryptographic service resources are provided to any users and devices accessing the service system.

[0028] In order to verify the effectiveness of the cryptographic job scheduling strategy, the simulated cryptographic application is verified and the scheme is evaluated based on the verification results. The compliance and correctness of the cryptographic application scheme can be verified while the effectiveness of the cryptographic application scheme is verified, which improves the accuracy and reliability of the verification and evaluation of the cryptographic application scheme, thereby ensuring the integrity, scientificity, completeness and feasibility of the cryptographic application scheme. It can provide data support for the steady advancement of the construction of information system cryptographic projects and reduce the possibility of unnecessary expenditures due to the low feasibility of cryptographic application schemes. BRIEF DESCRIPTION OF THE DRAWINGS

[0029] In order to more clearly illustrate the specific implementation of the present invention or the technical solution in the prior art, the drawings required for describing the specific implementation or the prior art will be briefly introduced below. Obviously, the drawings described below are only one implementation of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0030] Figure 1 This is a schematic diagram of the steps of the cryptographic service platform resource scheduling method of the present invention;

[0031] Figure 2 A schematic diagram of a cryptographic job scheduling strategy flow for an on-demand service of the present invention;

[0032] Figure 3 A schematic diagram of a flow chart for verifying the validity of the cryptographic job scheduling strategy of the present invention; DETAILED DESCRIPTION

[0033] In order to make the technical means, creative features, objectives and effects achieved by the present invention easy to understand, the technical scheme in the specific implementation mode of the present invention is clearly and completely described below to further illustrate the present invention. Obviously, the specific implementation mode described is only a part of the implementation mode of the present invention, rather than all styles.

[0034] The following is combined with Figure 1-3 The present invention is described in further detail.

[0035] Embodiment 1:

[0036] A cryptographic service platform resource scheduling method comprises the following steps:

[0037] S1: First, parse the cryptographic service requirements and convert them into the cryptographic service application's expectations of the cryptographic resources required to complete the cryptographic tasks. Combined with the current operating status of the cryptographic device, evaluate whether the cryptographic service requirements can be met.

[0038] S2: If the requirements are met, a cryptographic job scheduling strategy is generated, the expected load distance of the cryptographic device is calculated, and the cryptographic job is scheduled to a specific cryptographic device;

[0039] S3: If the requirements are not met, a cryptographic device configuration policy is generated, and the specified cryptographic device is reconstructed. After the reconstruction is completed, the cryptographic device resource attributes are updated and a new cryptographic job scheduling policy is generated;

[0040] S4: The parameters of the cryptographic service requirement include the cryptographic service requirement identifier, the cryptographic service type, the cryptographic service validity period, the cryptographic service maximum rate, the cryptographic service minimum rate, the cryptographic algorithm identifier, the cryptographic algorithm parameters and the operating mode.

[0041] The specific parameters are described as follows:

[0042] Cryptographic Services Request Identifier: A unique identifier for the cryptographic services request.

[0043] Cryptographic service type: The specific service type of the cryptographic service request, which can be one or a combination of services such as encryption, decryption, signing, signature verification, and hashing.

[0044] Password service validity period: The password service time of the password service request, which can be expressed as the start time and end time, or the start time and duration.

[0045] Maximum rate of cryptographic services: The maximum requirement for cryptographic service requests, including maximum encryption speed (bit / s or byte / s), maximum decryption speed (bit / s or byte / s), maximum signing speed (times / second), maximum signature verification speed (times / second), and maximum hashing speed (bit / s or byte / s).

[0046] Minimum cryptographic service rate: The minimum requirement for cryptographic service requests, including minimum encryption speed (bit / s or byte / s), minimum decryption speed (bit / s or byte / s), minimum signing speed (times / second), minimum signature verification speed (times / second), and minimum hashing speed (bit / s or byte / s).

[0047] Cryptographic algorithm identifier: The type of algorithm used in the cryptographic service request.

[0048] Cryptographic algorithm parameters: The parameter information of the cryptographic algorithm includes the signature algorithm curve parameters and key length, the hash algorithm block length, the key length and block length of the block cipher algorithm, etc.

[0049] Working mode: the mode used by the cryptographic algorithm. For example, the commercial SM4 algorithm includes five modes: electronic codebook mode (ECB), cipher block chaining mode (CBC), cipher feedback mode (CFB), output feedback mode (OFB) and counter mode (CTR).

[0050] Definition E m is the expected demand for the mth cryptographic service resource, which represents the average of the maximum rate and the minimum rate of the cryptographic service. This expectation can reduce the possibility of full load or overload of the cryptographic equipment and improve the reliability of the cryptographic service. Define S mn is the cryptographic operation saturation of the nth cryptographic service resource in the mth cryptographic device, xmn is the rate of the nth cryptographic service resource in the current mth cryptographic device, and X mnbest is the theoretical maximum rate of the nth cryptographic service resource in the current mth cryptographic device, then S mn It can be expressed as:

[0051]

[0052] Definition n is the membership function, when a n =1, the task requirement contains this resource. n =0, the task requirement does not include this resource;

[0053] Defining dist m is the expected load distance of the cryptographic device, expressed as:

[0054] dist m =∑an (1-S mn )

[0055] If dist m ≥0, it means that the mth cryptographic device meets the cryptographic service requirements, and the cryptographic job can be scheduled to the cryptographic device for cryptographic algorithm calculation; if dist m <0, it means that the mth cryptographic device cannot meet the cryptographic service requirements.

[0056] The steps of the on-demand password job scheduling strategy are as follows:

[0057] S1: parse the cryptographic service request, calculate the demand expectation of the cryptographic service request, and go to S2;

[0058] S2: Obtain the cryptographic computing resource utilization rate and network bandwidth resource utilization rate of each cryptographic device, calculate the service capability evaluation coefficient of each cryptographic device and sort them, put the corresponding cryptographic device index values ​​into the cryptographic device candidate queue in turn, and go to S3;

[0059] S3: Determine whether there are any selectable cryptographic devices in the cryptographic device candidate queue. If not, go to S4. Otherwise, calculate the expected load distance of the currently selected cryptographic device. If the expected load distance is greater than or equal to 0, add the cryptographic job in the cryptographic service request to the cryptographic job queue of the current cryptographic device, and go to S5. If the expected load distance value is less than 0, the current cryptographic device cannot meet the cryptographic service requirements, remove the device from the cryptographic device candidate queue, and go to S3.

[0060] S4: Generate a cryptographic device configuration policy, reconstruct cryptographic resources for the specified cryptographic device, and after the reconstruction is completed, update the cryptographic resource configuration of the cryptographic device and go to S2;

[0061] S5: Generate a cryptographic job scheduling strategy and go to S1.

[0062] The security of the cryptographic service scheduling system is based on the security of the cryptographic computing resource pool. First, the cryptographic service demand data and cryptographic job data do not contain any sensitive information such as keys, which ensures the security of business data communication. Secondly, when the cryptographic service scheduling system communicates with the cryptographic service application, it ensures the legitimacy of the cryptographic service application based on the identity authentication mechanism to prevent illegal or malicious applications from accessing the cryptographic service system. Finally, the demand analysis and cryptographic job scheduling of the cryptographic service scheduling system can communicate with the cryptographic service application through different data channels to achieve the separation of business data and request data, and higher data security.

[0063] This application proposes an efficient on-demand scheduling scheme for cryptographic service resources. By proposing cryptographic job scheduling strategies suitable for different needs and combining them with cryptographic resource reconstruction strategies, differentiated configuration and scheduling of cryptographic resources are achieved, and dynamically scalable cryptographic service resources are provided to any users and devices accessing the service system.

[0064] In order to verify the effectiveness of the cryptographic job scheduling strategy, the verification scenario and verification environment corresponding to the cryptographic application scheme are configured for the cryptographic job scheduling strategy; based on the verification scenario and the verification environment, a simulated cryptographic application corresponding to the cryptographic application scheme is created; the simulated cryptographic application is verified to obtain a cryptographic application verification result corresponding to the cryptographic application scheme; based on the cryptographic application verification result, a scheme evaluation operation is performed on the cryptographic application scheme to obtain a scheme evaluation result of the cryptographic application scheme.

[0065] Among them, configuring the verification scenario and verification environment for the cryptographic application solution can be understood as converting the cryptographic application solution described in natural language from the outside into a machine-readable format, analyzing the scenario and environment required to verify the cryptographic application solution, and performing scenario configuration and environment configuration. Optionally, the steps of configuring the verification scenario and verification environment can be implemented based on a certain configuration module, configuring the verification scenario can be implemented based on a certain scenario configuration module, configuring the verification environment can be implemented based on a certain environment configuration module, and the scenario configuration module and the environment configuration module can be sub-modules of the configuration module. Scenario configuration refers to the design of verification scenarios by analyzing verification conditions, necessary verification processes and passing standards based on the functional and performance descriptions of the cryptographic application solutions. Environment configuration refers to the determination of the environment required for verification based on the functional and performance descriptions of the cryptographic application solutions, the verification of simulated cryptographic applications and the evaluation of solutions based on the verification results. This can verify the effectiveness of the cryptographic application solutions while verifying the compliance and correctness of the cryptographic application solutions, thereby improving the accuracy and reliability of the verification and evaluation of the cryptographic application solutions, thereby ensuring the overall, scientific, complete and feasibility of the cryptographic application solutions, providing data support for the steady advancement of the construction of information system cryptographic projects, and reducing the possibility of unnecessary expenditures due to the low feasibility of cryptographic application solutions.

[0066] According to the scheme description of the cryptographic job scheduling strategy, the scenario verification information and environment verification information corresponding to the cryptographic application scheme are determined; the scenario verification information includes at least one of verification conditions, necessary verification steps and passing criteria; according to the scenario verification information, the verification scenario corresponding to the cryptographic application scheme is configured; according to the environment verification information, the verification environment corresponding to the cryptographic application scheme is configured.

[0067] According to the environment verification information, configuring the verification environment corresponding to the cryptographic application scheme includes: creating a verification server according to the environment verification information; the verification server is used to carry and execute the cryptographic application test cases generated based on the cryptographic application scheme; determining the server configuration information of the verification server based on the verification server; determining the SDK configuration information corresponding to the simulated cryptographic application to be created according to the server configuration information, and sending the SDK configuration information to the verification server so that the verification server executes the corresponding verification server SDK configuration based on the SDK configuration information to obtain the verification server configuration result; creating a cryptographic device according to the environment verification information; the cryptographic device is used to carry the simulated cryptographic application; determining the cryptographic device configuration information of the cryptographic device based on the cryptographic device, and sending the cryptographic device configuration information to the cryptographic device so that the cryptographic device executes the corresponding cryptographic device configuration based on the cryptographic device configuration information to obtain the cryptographic device configuration result; the cryptographic device configuration information includes the software medium and configuration file required to create the simulated cryptographic application; receiving the verification server configuration result sent by the verification server and the cryptographic device configuration result sent by the cryptographic device, and determining the verification environment corresponding to the cryptographic application scheme based on the verification server configuration result and the cryptographic device configuration result.

[0068] In summary, the scheme can create verification servers and cryptographic devices according to the environmental verification information, and further determine the bearer mode of the configuration verification environment; and complete the configuration of the verification server and the cryptographic device based on the determined server configuration information and cryptographic device configuration information, and then complete the configuration of the verification environment; improve the accuracy and reliability of the verification environment configuration for the cryptographic application scheme, and then improve the accuracy and reliability of the verification and evaluation of the cryptographic application scheme, thereby ensuring the integrity, scientificity, completeness and feasibility of the cryptographic application scheme, and can provide data support for the steady advancement of the construction of information system cryptographic engineering, and reduce the possibility of unnecessary expenditure due to the low feasibility of the cryptographic application scheme.

Claims

1. A cryptographic service platform resource scheduling method, characterized in that: The following steps are involved: S1: First, parse the cryptographic service requirements and convert them into the cryptographic service application's expectations of the cryptographic resources required to complete the cryptographic tasks. Combined with the current operating status of the cryptographic device, evaluate whether the cryptographic service requirements can be met. S2: If the requirements are met, a cryptographic job scheduling strategy is generated, the expected load distance of the cryptographic device is calculated, and the cryptographic job is scheduled to a specific cryptographic device; S3: If the requirements are not met, a cryptographic device configuration policy is generated, and the specified cryptographic device is reconstructed. After the reconstruction is completed, the cryptographic device resource attributes are updated and a new cryptographic job scheduling policy is generated; S4: The parameters of the cryptographic service requirement include the cryptographic service requirement identifier, the cryptographic service type, the cryptographic service validity period, the cryptographic service maximum rate, the cryptographic service minimum rate, the cryptographic algorithm identifier, the cryptographic algorithm parameters and the operating mode.

2. A cryptographic service platform resource scheduling method according to claim 1, characterized in that: Definition E m is the expected demand for the mth cryptographic service resource, which represents the average of the maximum rate and the minimum rate of the cryptographic service. This expectation can reduce the possibility of full load or overload of the cryptographic equipment and improve the reliability of the cryptographic service. Define S mn is the cryptographic operation saturation of the nth cryptographic service resource in the mth cryptographic device, xmn is the rate of the nth cryptographic service resource in the current mth cryptographic device, and X mnbest is the theoretical maximum rate of the nth cryptographic service resource in the current mth cryptographic device, then S mn It can be expressed as: Definition n is the membership function, when a n =1, the task requirement contains this resource. n =0, the task requirement does not include this resource; Defining dist m is the expected load distance of the cryptographic device, expressed as: dist m =∑a n (1-S mn ) If dist m ≥0, it means that the mth cryptographic device meets the cryptographic service requirements, and the cryptographic job can be scheduled to the cryptographic device for cryptographic algorithm calculation; if dist m <0, it means that the mth cryptographic device cannot meet the cryptographic service requirements.

3. A cryptographic service platform resource scheduling method according to claim 1, characterized in that: The steps of the on-demand service password job scheduling strategy are as follows: S1: parse the cryptographic service request, calculate the demand expectation of the cryptographic service request, and go to S2; S2: Obtain the cryptographic computing resource utilization rate and network bandwidth resource utilization rate of each cryptographic device, calculate the service capability evaluation coefficient of each cryptographic device and sort them, put the corresponding cryptographic device index values ​​into the cryptographic device candidate queue in turn, and go to S3; S3: Determine whether there are any selectable cryptographic devices in the cryptographic device candidate queue. If not, go to S4. Otherwise, calculate the expected load distance of the currently selected cryptographic device. If the expected load distance is greater than or equal to 0, add the cryptographic job in the cryptographic service request to the cryptographic job queue of the current cryptographic device, and go to S5. If the expected load distance value is less than 0, the current cryptographic device cannot meet the cryptographic service requirements, remove the device from the cryptographic device candidate queue, and go to S3. S4: Generate a cryptographic device configuration policy, reconstruct cryptographic resources for the specified cryptographic device, and after the reconstruction is completed, update the cryptographic resource configuration of the cryptographic device and go to S2; S5: Generate a cryptographic job scheduling strategy and go to S1.

4. A cryptographic service platform resource scheduling method according to claim 3, characterized in that: The cryptographic job scheduling strategy is configured with a verification scenario and a verification environment corresponding to the cryptographic application scheme; based on the verification scenario and the verification environment, a simulated cryptographic application corresponding to the cryptographic application scheme is created; Verifying the simulated cryptographic application to obtain a cryptographic application verification result corresponding to the cryptographic application scheme; Based on the cryptographic application verification result, a scheme evaluation operation is performed on the cryptographic application scheme to obtain a scheme evaluation result of the cryptographic application scheme.

5. A cryptographic service platform resource scheduling method according to claim 4, characterized in that: According to the scheme description of the cryptographic job scheduling strategy, the scenario verification information and environment verification information corresponding to the cryptographic application scheme are determined; the scenario verification information includes at least one of verification conditions, necessary verification steps and passing criteria; according to the scenario verification information, the verification scenario corresponding to the cryptographic application scheme is configured; according to the environment verification information, the verification environment corresponding to the cryptographic application scheme is configured.

6. A cryptographic service platform resource scheduling method according to claim 5, characterized in that: According to the environment verification information, configuring the verification environment corresponding to the cryptographic application scheme includes: creating a verification server according to the environment verification information; the verification server is used to carry and execute cryptographic application test cases generated based on the cryptographic application scheme; Based on the verification server, determine the server configuration information of the verification server; according to the server configuration information, determine the SDK configuration information corresponding to the simulated password application to be created, and send the SDK configuration information to the verification server, so that the verification server performs the corresponding verification server SDK configuration based on the SDK configuration information to obtain the verification server configuration result; according to the environment verification information, create a password device; the password device is used to carry the simulated password application; Based on the cryptographic device, determine the cryptographic device configuration information of the cryptographic device, and send the cryptographic device configuration information to the cryptographic device, so that the cryptographic device performs the corresponding cryptographic device configuration based on the cryptographic device configuration information to obtain a cryptographic device configuration result; the cryptographic device configuration information includes the software media and configuration files required to create the simulated cryptographic application; receive the verification server configuration result sent by the verification server and the cryptographic device configuration result sent by the cryptographic device, and determine the verification environment corresponding to the cryptographic application scheme based on the verification server configuration result and the cryptographic device configuration result.

Images