A method and system for controlling the state of information transmission based on password credentials

Abstract

The embodiment of the application discloses a kind of information sending state control method and system based on password credential;The method divides the information to be sent into ordered sub-information and is encrypted respectively, and establishes single activation control information for each sub-information ciphertext and receiving object;First access request based on the first password credential is sent according to the receiving object to generate first password material;When receiving the second access request based on the second password credential during the processing result of first password material is confirmed, the corresponding activation state is updated to isolation state, to suspend the decryption activation of first password material and generate password material for the same sub-information ciphertext;According to the decryption result of first password material, determine the second sub-information ciphertext corresponding to the second access request, update the corresponding single activation control information, and generate second password material and determine information sending state according to it.The application can improve the accuracy of state control.

Description

Technical Field

[0001] This application relates to the field of information security technology, specifically to a method and system for controlling the status of information transmission based on cryptographic credentials. Background Technology

[0002] With the development of computer networks and information security technologies, encrypted information transmission is widely used in scenarios such as email, instant messaging, and file transfer. The sender can process the information to be sent using cryptography to obtain ciphertext, and then send the ciphertext to the recipient via the network. After authentication, the recipient can obtain the data required for decryption or request a cryptographic service to perform the corresponding cryptographic operation, thereby obtaining the plaintext information corresponding to the ciphertext.

[0003] However, currently, during the transmission of encrypted information, the information transmission status is typically updated based on access requests or business responses. Since various processes related to information access may be completed at different times, and some processing results cannot be confirmed in a timely manner, the access status recorded by the information transmission system may not accurately reflect the actual decryptable status of the encrypted information. This can lead to problems such as duplicate authorizations, expired access data continuing to be valid, or inaccurate information transmission status, affecting the reliability of access control during the transmission of encrypted information. Summary of the Invention

[0004] This application provides a method and system for controlling the information transmission status based on cryptographic credentials, which can improve the accuracy of encrypted information transmission status control and reduce the possibility of inconsistency between the information transmission status and the actual decryption status of the receiving object.

[0005] This application provides a method for controlling the information transmission status based on password credentials, characterized in that it includes:

[0006] The system acquires the information to be sent and the target recipient, and divides the information to be sent into multiple sub-information items arranged in a preset order and encrypts them separately to obtain ciphertext composed of the ciphertext of each sub-information item.

[0007] Each sub-information ciphertext is uniquely associated with the target receiving object, and the ciphertext is sent to the target receiving object.

[0008] The system receives a first access request for a first sub-information ciphertext sent by the target receiving object based on a first cryptographic credential, and generates first cryptographic material according to the first access request and the single activation control information corresponding to the first sub-information ciphertext.

[0009] During the period when the processing result corresponding to the first cryptographic material is pending confirmation, a second access request sent by the target receiving object based on the second cryptographic credential is received, and the activation status in the single activation control information corresponding to the first sub-information ciphertext is updated to the isolation status. The isolation status is used to suspend the decryption activation of the first cryptographic material and generate cryptographic material for the first sub-information ciphertext based on the second cryptographic credential. The first cryptographic credential and the second cryptographic credential correspond to different identity authentication paths.

[0010] Obtain the decryption result determination information corresponding to the first cryptographic material, and determine the second sub-information ciphertext corresponding to the second access request based on the decryption result determination information and the first sub-information ciphertext;

[0011] Based on the second cryptographic credential, decryption result determination information, and second sub-information ciphertext, the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext are updated. Based on the updated single activation control information corresponding to the second sub-information ciphertext, the second cryptographic material is generated and the information transmission status of the information to be sent is determined.

[0012] This application also provides an information transmission status control system based on cryptographic credentials, characterized in that it includes:

[0013] The information encryption module is used to acquire the information to be sent and the target receiving object, and to divide the information to be sent into multiple sub-information arranged in a preset order and encrypt them separately to obtain information ciphertext composed of the ciphertext of each sub-information;

[0014] The control information establishment module is used to establish a single activation control information that uniquely corresponds to each sub-information ciphertext and the target receiving object, and send the information ciphertext to the target receiving object.

[0015] The first cryptographic material generation module is used to receive a first access request for the first sub-information ciphertext sent by the target receiving object based on the first cryptographic credentials, and to generate the first cryptographic material according to the first access request and the single activation control information corresponding to the first sub-information ciphertext.

[0016] The isolation control module is used to receive a second access request sent by the target receiving object based on the second cryptographic credential during the period when the processing result corresponding to the first cryptographic material is pending confirmation, and to update the activation status in the single activation control information corresponding to the first sub-information ciphertext to the isolation status. The isolation status is used to suspend the decryption activation of the first cryptographic material and the generation of cryptographic material for the first sub-information ciphertext based on the second cryptographic credential. The first cryptographic credential and the second cryptographic credential correspond to different identity authentication paths.

[0017] The continuation determination module is used to obtain the decryption result determination information corresponding to the first cryptographic material, and determine the second sub-information ciphertext corresponding to the second access request based on the decryption result determination information and the first sub-information ciphertext;

[0018] The status control module is used to update the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext based on the second cryptographic credential, decryption result judgment information, and the second sub-information ciphertext, and to generate the second cryptographic material and determine the information transmission status of the information to be sent based on the updated single activation control information corresponding to the second sub-information ciphertext.

[0019] This application also provides an electronic device, including a processor and a memory, wherein the memory stores multiple instructions; the processor loads instructions from the memory to execute steps in any of the information transmission status control methods based on cryptographic credentials provided in this application.

[0020] This application also provides a computer-readable storage medium storing multiple instructions adapted for loading by a processor to execute steps in any of the information transmission status control methods based on cryptographic credentials provided in this application.

[0021] This application also provides a computer program product, including a computer program / instruction, which, when executed by a processor, implements the steps in any of the information transmission status control methods based on cryptographic credentials provided in this application.

[0022] In this application, the information to be sent is divided into multiple sub-information items arranged in a preset order and encrypted separately, so that the resulting ciphertext is composed of each sub-information ciphertext. A unique one-time activation control information is established for each sub-information ciphertext, corresponding to a specific target recipient. This one-time activation control information controls the generation process of the cryptographic material corresponding to each sub-information ciphertext. When the target recipient sends a first access request for the first sub-information ciphertext based on a first cryptographic credential, first cryptographic material is generated according to the first access request and the one-time activation control information corresponding to the first sub-information ciphertext. When the processing result of the first cryptographic material is pending confirmation, and the target recipient sends a second access request based on a second cryptographic credential, the activation status in the one-time activation control information corresponding to the first sub-information ciphertext is updated to an isolated status. This suspends the decryption activation of the first cryptographic material and the generation of cryptographic material for the first sub-information ciphertext based on the second cryptographic credential, preventing the different authentication paths corresponding to the first and second cryptographic credentials from continuing to perform mutually affecting cryptographic processing before the processing result of the first cryptographic material is confirmed. Based on this, the decryption result determination information corresponding to the first cryptographic material is obtained, and the second sub-information ciphertext corresponding to the second access request is determined according to the decryption result determination information and the first sub-information ciphertext, so that the processing object of the second access request is constrained by the decryption status corresponding to the first cryptographic material. Subsequently, according to the second cryptographic credential, the decryption result determination information and the second sub-information ciphertext, the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext are updated, and the second cryptographic material is generated and the information transmission status of the information to be sent is determined based on the updated single activation control information corresponding to the second sub-information ciphertext. Thus, the determination of the second sub-information ciphertext, the generation of the second cryptographic material, and the determination of the information transmission status are all related to the decryption result determination information corresponding to the first cryptographic material, which can improve the accuracy of encrypted information transmission status control and reduce the possibility of inconsistency between the information transmission status and the actual decryption status of the receiving object. Attached Figure Description

[0023] To more clearly illustrate the technical solutions in the embodiments of this application, the accompanying drawings used in the description of the embodiments will be briefly introduced below. Obviously, the accompanying drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.

[0024] Figure 1 This is a flowchart illustrating the information transmission status control method based on cryptographic credentials provided in an embodiment of this application.

[0025] Figure 2 This is a multi-subject interaction timing diagram of the information transmission status control process provided in the embodiments of this application;

[0026] Figure 3 This is a schematic diagram of the hardware composition and communication connection of the information transmission status control system provided in the embodiments of this application;

[0027] Figure 4 This is a schematic diagram of the structure of the information transmission status control system based on cryptographic credentials provided in the embodiments of this application. Detailed Implementation

[0028] The technical solutions of the embodiments of this application will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are only some embodiments of this application, and not all embodiments. Based on the embodiments of this application, all other embodiments obtained by those skilled in the art without creative effort are within the scope of protection of this application.

[0029] This application provides a method and system for controlling the information transmission status based on password credentials. The method can be executed by an information transmission status control system, which can be integrated into an electronic device. The electronic device can be a terminal, a server, or a server cluster. The terminal can be a mobile phone, tablet computer, laptop computer, personal computer, or dedicated information processing terminal; the server can be a single server or a server cluster consisting of multiple servers. In some embodiments, the information transmission status control system can also be distributed across multiple electronic devices, with the multiple electronic devices collaboratively implementing the method for controlling the information transmission status based on password credentials provided in this application.

[0030] In some embodiments, the information transmission status control system can communicate with a cryptographic device and invoke the cryptographic device to perform information encryption, cryptographic credential verification, cryptographic material generation, and related cryptographic operations. The cryptographic device can be a server cryptographic machine, a signature verification server, a cryptographic card, a hardware security module, or other devices with cryptographic operation capabilities. The cryptographic device can be integrated into the electronic device executing the information transmission status control method, or it can be connected to the electronic device as a standalone device via a communication interface. The target recipient can initiate an information access request through a terminal and complete the corresponding identity authentication using a smart cryptographic key, dynamic token, or other authentication carrier configured on or connected to the terminal.

[0031] In the embodiments of this application, the terms "module" or "unit" refer to a computer program, a part of a computer program, or a hardware functional component that has a predetermined function and works together with other related parts to achieve a predetermined goal. A module or unit can be implemented wholly or partially by software, hardware, or a combination of software and hardware. One or more processors, memories, or cryptographic components can be used to implement one or more modules or units, and each module or unit can also be part of an overall module or unit that includes the corresponding function of that module or unit.

[0032] For ease of understanding, in applications such as encrypted email, encrypted file transfer, or internal information exchange, the target recipient can request access to the corresponding encrypted information via a terminal. Due to factors such as network connection interruptions, request retries, changes in terminal status, or delays in password processing feedback, the business processing result of the information access request may differ from the actual completion of the corresponding password operation. For example, the information sending system may have received the access request, but the relevant password operation may not have been completed; or the relevant password operation may have been completed, but the corresponding result information may not have been returned in a timely manner. If the information sending status is still determined solely based on the access request or business response when the target recipient re-initiates the access request, situations may arise such as duplicate access permissions, previously generated access data remaining in effect, or inaccurate information sending status.

[0033] Based on this, this application suspends relevant cryptographic processing during the period when the processing result corresponding to the cryptographic material is pending confirmation, and determines the ciphertext of the sub-information corresponding to subsequent access based on the decryption result determination information corresponding to the cryptographic material, and updates the corresponding single activation control information, so that the generation of subsequent cryptographic materials and the determination of the information transmission status are constrained by the aforementioned decryption result determination information. Therefore, this application can improve the accuracy of encrypted information transmission status control and reduce the possibility of inconsistency between the information transmission status and the actual decryption status of the receiving object.

[0034] It is understood that specific embodiments of this application may involve data such as information to be sent, identity information of the target recipient, password credentials, access requests, and information sending status. When embodiments of this application are applied to specific products or technologies, the collection, storage, use, and processing of related data shall comply with applicable laws, regulations, and standards of relevant countries and regions, and appropriate data security protection measures shall be adopted.

[0035] The following sections provide detailed descriptions of each example. It should be noted that the sequence numbers of the following embodiments are not intended to limit the preferred order of the embodiments.

[0036] In this embodiment, a method for controlling the information transmission status based on password credentials is provided, such as... Figure 1As shown, the specific process of this information transmission status control method based on password credentials can be as follows:

[0037] S101. Obtain the information to be sent and the target receiving object, and divide the information to be sent into multiple sub-information arranged in a preset order and encrypt them respectively to obtain information ciphertext composed of the ciphertext of each sub-information.

[0038] The information to be sent refers to the information content that needs to be provided by the sender to the target recipient and encrypted before being sent. The information to be sent can include at least one of the following: text data, image data, audio data, video data, or file data. For example, the information to be sent can be an email containing a body and attachments, an instant messaging message containing text and images, or file data that needs to be transmitted over a network.

[0039] A target recipient is an object designated by the information sender that has the authority to receive or access the information to be sent. The information sending system can identify the target recipient through its identity identifier, which can be a user identifier, account identifier, or device identifier, etc. For example, a target recipient can be a user account corresponding to an email address, a user account corresponding to an instant messaging account, or a terminal device corresponding to a terminal device identifier, etc. There can be one or multiple target recipients.

[0040] A preset order refers to the order used to determine the arrangement of multiple sub-information items when dividing information to be sent. The preset order can be determined based on the data structure, content arrangement method, or preset data processing rules of the information to be sent, and is used to identify the relative position of each sub-information item within the information to be sent. For example, a preset order can be the arrangement order of multiple text paragraphs in the information to be sent, the arrangement order of multiple attachment data blocks according to byte offsets, or the arrangement order of multiple streaming data fragments according to their generation time.

[0041] Sub-information refers to the portion of information that can be encrypted separately, obtained by dividing the information to be sent according to a preset data partitioning method. Each sub-information has corresponding data content and a specific position within the information to be sent, and the order of adjacent sub-information can be determined according to a preset sequence. For example, sub-information can be a text paragraph in the information to be sent, a data block in an attachment file, or a data fragment in streaming data.

[0042] In some embodiments, the information to be sent can be divided according to a fixed data length, so that each sub-information has the same or similar data length; it can also be divided according to the content structure of the information to be sent, so that different sub-information corresponds to different content parts; or it can be divided according to data type, sensitivity level, or password processing requirements. For example, attachment files can be divided according to a preset number of bytes, text can be divided according to paragraphs, and audio and video data can be divided according to playback time intervals.

[0043] Sub-information ciphertext refers to ciphertext data obtained by encrypting corresponding sub-information. One sub-information ciphertext corresponds to one sub-information, preserving its position or sequence identifier within a preset order. When encrypting each sub-information separately, the same content key can be used, separately generated content keys can be used, or sub-keys derived from the base key and the identifiers of each sub-information can be used. For example, sub-information ciphertext can be text ciphertext corresponding to a text paragraph, data block ciphertext corresponding to an attachment data block, or data segment ciphertext corresponding to a streaming data segment.

[0044] Information ciphertext refers to a collection of ciphertext data composed of multiple ciphertexts of individual sub-messages within a message to be sent. Information ciphertext can be stored or transmitted as a data file, a data packet, or multiple related data objects, as long as the compositional relationship and preset order of the ciphertext sub-messages can be determined based on corresponding identifiers. For example, information ciphertext can be an encrypted message composed of multiple text ciphertexts, an encrypted file composed of multiple data block ciphertexts, or an encrypted data stream composed of multiple data segment ciphertexts.

[0045] In practice, the information transmission status control system can obtain the information to be transmitted and the target recipient from the information sender's terminal, information transmission task, or business system interface. Based on the data structure of the information to be transmitted and a preset data partitioning method, it divides the information into multiple sub-information items and assigns a sequence identifier to each sub-information item. Subsequently, each sub-information item can be encrypted using an encryption module or cryptographic device. The resulting ciphertext of each sub-information item is then organized according to its corresponding sequence identifier to form the encrypted information.

[0046] S102. Establish a unique one-time activation control information that corresponds to each sub-information ciphertext and the target receiving object, and send the ciphertext to the target receiving object.

[0047] In this context, single-activation control information refers to control data established for a single ciphertext and a target receiving object, used to control the target receiving object's ability to obtain the decryption capability corresponding to the ciphertext. Single-activation control information can be used to control the generation of cryptographic materials, the decryption activation of cryptographic materials, and the updating of the corresponding control status, ensuring that multiple access requests initiated against the same ciphertext and the same target receiving object are constrained by the same single-activation control information.

[0048] Single activation refers to configuring an activation qualification that can be effectively consumed once for a single message transmission to a target recipient. Single activation does not limit the target recipient to sending only one access request or generating only one set of cryptographic materials. In cases of request retries, changes in the authentication path, or incomplete decryption and activation of previous cryptographic materials, the corresponding access request can continue to be processed or new cryptographic materials can be generated, but the aforementioned access request and cryptographic materials are jointly bound by the same activation qualification. Once this activation qualification is consumed due to decryption activation or withdrawal, other requests initiated based on this single activation control information will no longer obtain valid decryption and activation results.

[0049] Each encrypted sub-message uniquely corresponds to a target receiving object, meaning that during a single information transmission process, any combination of encrypted sub-message and any target receiving object corresponds to only one single-activation control information in a valid control state. The information transmission status control system can determine the corresponding single-activation control information based on the identifier of the information to be transmitted, the identifier of the encrypted sub-message, and the identifier of the target receiving object. For example, the identifier of the information to be transmitted, the identifier of the encrypted sub-message, and the identifier of the target receiving object can be combined to form a control object index; a control information identifier can also be generated based on the aforementioned identifiers; or a unique index can be established in a database or cryptographic device using the aforementioned identifiers, etc.

[0050] A single activation control message may include at least one of the following: control message identifier, message to be sent identifier, sub-message ciphertext identifier, target recipient identifier, authentication path, status credentials, activation eligibility status, activation status, validity period, and cryptographic material generation record. Specifically, the control message identifier distinguishes different single activation control messages; the sub-message ciphertext identifier and the target recipient identifier determine the controlled object corresponding to the single activation control message; the authentication path indicates the authentication path currently permitted to generate cryptographic materials; the status credentials characterize the cryptographic control status corresponding to the single activation control message; the activation eligibility status indicates whether the activation eligibility has been consumed; and the activation status indicates the current processing stage.

[0051] For example, when the information to be sent includes a first sub-information ciphertext, a second sub-information ciphertext, and a third sub-information ciphertext, and the target recipient is user A, a first single activation control information corresponding to the first sub-information ciphertext and user A, a second single activation control information corresponding to the second sub-information ciphertext and user A, and a third single activation control information corresponding to the third sub-information ciphertext and user A can be established respectively.

[0052] For example, when the same encrypted sub-message needs to be sent to users A, B, and C, separate single-activation control information can be established for each sub-message, corresponding to user A, user B, and user C. The single-activation control information for different target recipients is independent of each other; a change in the activation eligibility status of one target recipient does not alter the activation eligibility status of other target recipients.

[0053] For example, when the information to be sent is an encrypted file containing multiple attached data blocks, a single activation control information can be established for each attached data block's corresponding sub-information ciphertext, uniquely corresponding to the target recipient; when the information to be sent is an encrypted message containing multiple text segments, a single activation control information can be established for each text segment's corresponding sub-information ciphertext; when the information to be sent is an encrypted data stream, a single activation control information can be established for each data segment's corresponding sub-information ciphertext, and so on.

[0054] Single-activation control information can be stored in the controlled storage area of ​​the information transmission status control system, or in a cryptographic device communicatively connected to the information transmission status control system. Alternatively, the information transmission status control system and the cryptographic device can respectively store the business control portion and the cryptographic control portion. When the single-activation control information consists of multiple parts, the correspondence between the parts can be established through control information identifiers.

[0055] After establishing the single-activation control information, the information transmission status control system sends the encrypted information to the target recipient. The encrypted information can be sent all at once, or in batches according to a preset order of the sub-encrypted information. It can also send the target recipient an access address or data index for retrieving the encrypted information. The single-activation control information can be stored in the information transmission status control system or the cryptographic device and does not need to be sent with the encrypted information. When the target recipient subsequently initiates an access request, the information transmission status control system retrieves the corresponding single-activation control information based on the sub-encrypted information identifier and the target recipient identifier.

[0056] S103. Receive the first access request for the first sub-information ciphertext sent by the target receiving object based on the first cryptographic credential, and generate the first cryptographic material according to the first access request and the single activation control information corresponding to the first sub-information ciphertext.

[0057] The first cryptographic credential refers to the cryptographic data provided or generated by the target recipient during the current access process, used to verify the target recipient's identity or access permissions. "First" indicates the cryptographic credential used in the current access process, without limiting the specific cryptographic algorithm or authentication method employed. For example, the first cryptographic credential can be a signature credential generated by a smart key, an authentication credential generated after successful dynamic password verification, or an authentication credential generated after successful device certificate verification.

[0058] The first sub-information ciphertext refers to the sub-information ciphertext that the current access process is targeting among a plurality of sub-information ciphertexts arranged in a preset order. "First" is used to indicate the sub-information ciphertext that is currently being processed, and does not indicate that the sub-information ciphertext is arranged at the beginning of the plurality of sub-information ciphertexts. In some embodiments, the first sub-information ciphertext can be any sub-information ciphertext other than the last sub-information ciphertext among the plurality of sub-information ciphertexts.

[0059] For example, when the encrypted message consists of ten sub-encrypted messages in sequence, if the current access process is targeting the first sub-encrypted message, the first sub-encrypted message will be used as the first sub-encrypted message; if the current access process is targeting the fifth sub-encrypted message, the fifth sub-encrypted message will be used as the first sub-encrypted message; if the current access process is targeting the ninth sub-encrypted message, the ninth sub-encrypted message will be used as the first sub-encrypted message, and so on.

[0060] The first access request refers to a request sent by the target receiving object during the current access process, based on the first cryptographic credential, to access the first sub-information ciphertext. "First" indicates an access request currently being processed, and does not limit this access request to be the first access request sent by the target receiving object for the information to be sent. The first access request may include at least one of the following: an identifier for the information to be sent, an identifier for the first sub-information ciphertext, an identifier for the target receiving object, and the first cryptographic credential, so that the information transmission status control system can determine the first sub-information ciphertext and the target receiving object for the current access process.

[0061] For example, the first access request could be a request to view the current encrypted text paragraph, a request to access the current encrypted attachment data block, or a request to obtain the current encrypted data fragment.

[0062] In some embodiments, the first access request may directly carry the first password credential; in other embodiments, the first access request may carry a credential identifier of the first password credential, and the information transmission status control system obtains the first password credential based on the credential identifier; in still other embodiments, the first access request may also carry an authentication result identifier, and the information transmission status control system obtains the corresponding first password credential based on the authentication result identifier, etc.

[0063] The single-activation control information corresponding to the first sub-information ciphertext refers to the single-activation control information established in step S102 for the unique correspondence between the first sub-information ciphertext and the target receiving object. The information transmission status control system can obtain the single-activation control information that uniquely corresponds to the first sub-information ciphertext and the target receiving object in the current access process based on the first sub-information ciphertext identifier and the target receiving object identifier in the first access request.

[0064] For example, when the current access process requests user A to access the encrypted first text segment, it obtains the single activation control information corresponding to user A for the encrypted first text segment; when the current access process requests user B to access the encrypted fifth attachment data block, it obtains the single activation control information corresponding to user B for the encrypted fifth attachment data block; when the current access process requests terminal C to access the encrypted second data segment, it obtains the single activation control information corresponding to terminal C for the encrypted second data segment, etc.

[0065] The first cryptographic material refers to the cryptographic data generated during the current access process based on the single activation control information corresponding to the first access request and the first sub-information ciphertext, used to support the target receiving object in decrypting and activating the first sub-information ciphertext. "First" indicates that this cryptographic material corresponds to the first access request and the first sub-information ciphertext currently being processed, but does not indicate that this cryptographic material is the first cryptographic material generated for the information to be sent.

[0066] The first cryptographic material can be associated with the first sub-message ciphertext, the target recipient, and the first cryptographic credential. For example, the first cryptographic material can be an encapsulated content key, a cryptographic token used for decryption activation, or invocation information used to invoke the controlled key.

[0067] In practice, the information transmission status control system can obtain the first cryptographic credential, the first sub-information ciphertext identifier, and the target receiving object identifier from the first access request. It then verifies the first cryptographic credential and obtains the corresponding single-activation control information based on the first sub-information ciphertext identifier and the target receiving object identifier. When the first cryptographic credential is successfully verified and the corresponding single-activation control information allows for the generation of cryptographic materials, the information transmission status control system can invoke a cryptographic device or cryptographic operation module to generate the first cryptographic materials.

[0068] It should be noted that generating the first cryptographic material does not mean that the target recipient has completed the decryption of the first sub-message ciphertext. After the first cryptographic material is generated, it still needs to undergo corresponding decryption and activation processing to further determine whether the target recipient has developed the ability to decrypt the first sub-message ciphertext.

[0069] S104. During the period when the processing result corresponding to the first cryptographic material is pending confirmation, a second access request sent by the target receiving object based on the second cryptographic credential is received, and the activation status in the single activation control information corresponding to the first sub-information ciphertext is updated to the isolation status. The isolation status is used to suspend the decryption activation of the first cryptographic material and generate cryptographic material for the first sub-information ciphertext based on the second cryptographic credential. The first cryptographic credential and the second cryptographic credential correspond to different identity authentication paths.

[0070] The "processing result pending confirmation period" refers to the period after the first cryptographic material enters the subsequent processing stage, during which the execution result of the subsequent processing is not yet determined. The processing result pending confirmation period begins when the first cryptographic material enters the subsequent processing stage and ends when the execution result of the subsequent processing is determined.

[0071] Subsequent processing may include sending, receiving, or cryptographic processing of the first cryptographic material. For example, the first cryptographic material is being sent and the sending feedback has not yet been returned, the cryptographic processing corresponding to the first cryptographic material is being executed, or the processing result corresponding to the first cryptographic material has been generated but has not yet been returned; all of these can be determined as being in the period of pending confirmation of processing results.

[0072] The second cryptographic credential refers to the cryptographic data provided or generated by the target recipient when it initiates another access during the period when the processing result is pending confirmation. "Second" is used to indicate the cryptographic credential used for the second access and to distinguish it from the first cryptographic credential used when generating the first cryptographic material.

[0073] For example, when the first password credential is a signature credential generated by a smart password key, the second password credential can be an authentication credential generated after the dynamic password verification is successful; when the first password credential is an authentication credential generated after the dynamic password verification is successful, the second password credential can be an authentication credential generated after the device certificate verification is successful; when the first password credential is an authentication credential generated after the device certificate verification is successful, the second password credential can be a signature credential generated by a smart password key, etc.

[0074] An authentication path refers to the processing path that verifies the identity of the target recipient and generates or verifies the corresponding password credentials. The authentication path can be determined based on the authentication carrier, authentication device, or authentication processing method used for authentication.

[0075] For example, the authentication path can be an authentication path that uses a smart password key to generate a signature and is verified by a signature verification server, an authentication path that uses a dynamic token to generate a dynamic password and is verified by a dynamic token authentication system, or an authentication path that uses a device certificate to generate authentication information and is verified by a certificate authentication system.

[0076] The first and second password credentials correspond to different authentication paths, meaning that the authentication path used to generate or verify the first password credential is different from the authentication path used to generate or verify the second password credential.

[0077] During the access to encrypted information, the target recipient may change the authentication path due to changes in the availability of the authentication carrier, the terminal's operating status, or the access environment. A change in the authentication path does not indicate a change in the target recipient; rather, it means that the same target recipient is using a different authentication method to continue accessing the encrypted information.

[0078] For example, when a target recipient accesses an encrypted email using a smart password key, the connection between the smart password key and the terminal is interrupted, and the recipient switches to a dynamic password to continue accessing the email; when a target recipient accesses an encrypted attachment using a dynamic password, the authentication credentials corresponding to the dynamic password expire, and the recipient switches to a smart password key to continue accessing the email; when a target recipient accesses an encrypted file via a personal computer, the connection between the personal computer and the network is interrupted, and the recipient switches to a mobile terminal configured with a device certificate to continue accessing the file.

[0079] When changing the authentication path, the password processing initiated by the original authentication path may not have yet returned a clear result. Therefore, it is possible that the processing result corresponding to the first password material is still in an unconfirmed state, while the target recipient has already sent a second access request based on the second password credentials corresponding to another authentication path.

[0080] A second access request refers to an access request sent by the target recipient based on a second cryptographic credential while the processing result is pending confirmation. The second access request is used to request continued access to the encrypted information. The second access request may include at least one of the following: a message identifier to be sent, a target recipient identifier, and a second cryptographic credential.

[0081] For example, the second access request could be an encrypted email access request sent by the target recipient after switching to a dynamic password, an encrypted attachment access request sent by the target recipient after switching to a device certificate, or an encrypted data access request sent by the target recipient after switching to a smart password key.

[0082] The activation state refers to the status information in the single activation control information corresponding to the first sub-information ciphertext, used to control the generation and decryption activation of cryptographic materials. Based on the activation state, it can be determined whether to continue the generation or decryption activation of cryptographic materials for the first sub-information ciphertext.

[0083] The isolated state is one of the active states. When the active state in the single activation control information corresponding to the first sub-information ciphertext is the isolated state, the decryption activation of the first cryptographic material is suspended, and the generation of cryptographic material for the first sub-information ciphertext based on the second cryptographic credential is also suspended.

[0084] The isolation state does not indicate that the processing corresponding to the first cryptographic material has been successful or failed. Rather, it means that the cryptographic processing related to the first sub-information ciphertext will not continue until the processing result corresponding to the first cryptographic material is determined. For example, the decryption and activation of the first cryptographic material can be suspended, the generation of cryptographic material based on the second cryptographic credential can be suspended, and the corresponding cryptographic processing requests can be kept in a pending state.

[0085] The decryption and activation of the first cryptographic material refers to the process of performing corresponding cryptographic processing based on the first cryptographic material, enabling the first cryptographic material to be used to decrypt the ciphertext of the first sub-information. For example, the first cryptographic material can be used to obtain the decryption data corresponding to the ciphertext of the first sub-information, obtain the authority to access the controlled key, and invoke cryptographic devices to perform corresponding cryptographic operations.

[0086] In practice, upon receiving the second access request, the single activation control information corresponding to the first sub-information ciphertext can be obtained, and the activation status in this single activation control information can be updated to an isolated state. Before performing the decryption activation of the first cryptographic material or generating cryptographic material based on the second cryptographic credential, the activation status in the single activation control information corresponding to the first sub-information ciphertext is read. When an isolated state is read, the corresponding cryptographic processing is paused.

[0087] Therefore, before the processing result corresponding to the first cryptographic material is confirmed, the relevant cryptographic processing for the first sub-information ciphertext can be suspended for different identity authentication paths corresponding to the first and second cryptographic credentials.

[0088] S105. Obtain the decryption result determination information corresponding to the first cryptographic material, and determine the second sub-information ciphertext corresponding to the second access request based on the decryption result determination information and the first sub-information ciphertext.

[0089] The decryption result determination information refers to the information corresponding to the first cryptographic material, used to determine the decryption processing status involved in the first cryptographic material. The decryption result determination information can directly represent the decryption processing result of the first sub-information ciphertext, or it can be generated based on the plaintext information or plaintext verification information corresponding to the first sub-information ciphertext.

[0090] For example, the decryption result determination information can be the decryption processing result generated by the cryptographic device for the first cryptographic material, the plaintext generation confirmation information returned by the terminal used by the target receiving object, the plaintext verification information generated based on the decrypted plaintext, etc.

[0091] The decryption result determination information may include at least one of the following: the identifier of the first cryptographic material, the identifier of the first sub-information ciphertext, the identifier of the target receiving object, the decryption processing status, the decryption processing result, and the result generation time. By using the identifier of the first cryptographic material, the identifier of the first sub-information ciphertext, and the identifier of the target receiving object, the first cryptographic material, the first sub-information ciphertext, and the target receiving object corresponding to the decryption result determination information can be identified.

[0092] In some embodiments, decryption result determination information corresponding to the first cryptographic material can be obtained from a cryptographic device; in other embodiments, decryption result determination information corresponding to the first cryptographic material can be obtained from a terminal used by the target receiving object; in other embodiments, decryption result determination information can also be generated based on the cryptographic processing record corresponding to the first cryptographic material, etc.

[0093] The second sub-information ciphertext refers to the sub-information ciphertext determined for the second access request based on the decryption result and the first sub-information ciphertext. "Second" indicates that this sub-information ciphertext is the processing object determined for the second access request, and does not indicate that this sub-information ciphertext is the second in a list of multiple sub-information ciphertexts.

[0094] In some embodiments, the second sub-information ciphertext can be the first sub-information ciphertext, or it can be the next sub-information ciphertext arranged in a preset order after the first sub-information ciphertext. When the second access request needs to continue processing the current sub-information ciphertext, the first sub-information ciphertext can be determined as the second sub-information ciphertext; when the second access request needs to continue processing from the current sub-information ciphertext, the next sub-information ciphertext after the first sub-information ciphertext can be determined as the second sub-information ciphertext. The specific determination method can be determined based on the decryption processing status represented by the decryption result determination information.

[0095] For example, when the information to be sent is an encrypted file, the ciphertext includes the first data block ciphertext to the tenth data block ciphertext arranged in a preset order. When the first sub-information ciphertext currently being processed is the fifth data block ciphertext, the fifth data block ciphertext can be further determined as the second sub-information ciphertext, or the sixth data block ciphertext can be determined as the second sub-information ciphertext.

[0096] For example, when the message to be sent is an encrypted email, and the ciphertext includes multiple ciphertext body paragraphs arranged in a preset order, if the first ciphertext of the currently processed sub-message is the second ciphertext body paragraph, the second ciphertext body paragraph can be further identified as the second sub-message, or the third ciphertext body paragraph can be identified as the second sub-message.

[0097] For example, when the information to be sent is an encrypted data stream, and the ciphertext includes multiple data segments arranged in a preset order, if the first sub-information ciphertext currently being processed is the ninth data segment ciphertext, the ninth data segment ciphertext can be further determined as the second sub-information ciphertext, or the tenth data segment ciphertext can be determined as the second sub-information ciphertext, and so on.

[0098] In practice, the corresponding decryption result determination information can be obtained based on the identifier of the first cryptographic material, and the arrangement position of the first sub-information ciphertext in the preset order can be determined based on the identifier of the first sub-information ciphertext. Subsequently, based on the decryption processing status represented by the decryption result determination information, it can be determined whether the second access request continues to process the first sub-information ciphertext or continues processing from the next sub-information ciphertext after the first sub-information ciphertext, and the second sub-information ciphertext can be determined accordingly.

[0099] By making the determination of the second sub-information ciphertext subject to the decryption result judgment information corresponding to the first cryptographic material, the second access request can continue to process the first sub-information ciphertext that still needs to be processed, or continue processing from after the first sub-information ciphertext, thus avoiding the second access request skipping the sub-information ciphertext that currently needs to be processed or repeatedly processing the sub-information ciphertext that has already completed the corresponding decryption processing.

[0100] In some embodiments, in order to make the ciphertext of the sub-information corresponding to the second access request compatible with the actual decryption capability formed by the first cryptographic material, the first sub-information ciphertext is a non-last-position sub-information ciphertext.

[0101] Based on the decryption result and the ciphertext of the first sub-information, the second sub-information ciphertext corresponding to the second access request is determined, including:

[0102] Based on the decryption results, determine the decryption capability based on the first cryptographic material.

[0103] When the decryption capability is not formed, the first sub-information ciphertext is determined as the second sub-information ciphertext;

[0104] When the decryption capability is determined to be formed, the next sub-information ciphertext arranged in a preset order after the first sub-information ciphertext will be determined as the second sub-information ciphertext.

[0105] Among them, non-last sub-information ciphertext refers to any sub-information ciphertext other than the last sub-information ciphertext among multiple sub-information ciphertexts arranged in a preset order.

[0106] The decryption capability formation result refers to the result determined based on the decryption result, used to indicate whether the target receiving object has obtained the decryption capability corresponding to the first sub-information ciphertext based on the first cryptographic material. The decryption capability formation result includes both formed and unformed capabilities.

[0107] The formation of decryption capability is considered complete when the target recipient has obtained valid cryptographic data, cryptographic operation permissions, or cryptographic processing results capable of decrypting the ciphertext of the first sub-information based on the first cryptographic material. The formation of decryption capability is not limited to the target recipient having viewed, copied, or saved the plaintext information corresponding to the ciphertext of the first sub-information. For example, the formation of decryption capability can be determined as the formation of decryption capability if the target recipient has obtained a valid content key, has obtained permission to access the controlled content key, or has obtained a valid decryption result corresponding to the ciphertext of the first sub-information.

[0108] A "decryption capability not yet formed" result means that it cannot be determined whether the target recipient has obtained the decryption capability corresponding to the first sub-information ciphertext based on the first cryptographic material. For example, if the decryption process of the first cryptographic material has not been completed, the decryption process of the first cryptographic material has failed, or a valid decryption result corresponding to the first sub-information ciphertext has not yet been obtained, the decryption capability formation result can be determined as "decryption capability not yet formed".

[0109] When the decryption capability is not formed, the target receiving object has not yet obtained the decryption capability corresponding to the first sub-information ciphertext. Therefore, the first sub-information ciphertext is still determined as the second sub-information ciphertext corresponding to the second access request, so that the second access request is still processed based on the first sub-information ciphertext.

[0110] When the decryption capability is formed, the target receiving object has already obtained the decryption capability corresponding to the first sub-information ciphertext. Therefore, the next sub-information ciphertext arranged after the first sub-information ciphertext is determined according to a preset order, and this next sub-information ciphertext is determined as the second sub-information ciphertext corresponding to the second access request, so that the second access request continues to be processed after the first sub-information ciphertext.

[0111] For example, if the first sub-information ciphertext is the fifth sub-information ciphertext and the decryption capability is not formed, the fifth sub-information ciphertext is identified as the second sub-information ciphertext; if the first sub-information ciphertext is the fifth sub-information ciphertext and the decryption capability is formed, the sixth sub-information ciphertext is identified as the second sub-information ciphertext; if the first sub-information ciphertext is the ninth sub-information ciphertext and the decryption capability is formed, the tenth sub-information ciphertext is identified as the second sub-information ciphertext, and so on.

[0112] This avoids the second access request skipping sub-information ciphertext that has not yet been decrypted, or repeatedly processing sub-information ciphertext that has already been decrypted, thus improving the accuracy of determining the access continuation position after the identity authentication path changes.

[0113] In some embodiments, to improve the accuracy of the determination of the decryption capability result, the decryption result determination information includes the material output result information corresponding to the first cryptographic material, the decryption activation processing result information, and the material valid status information;

[0114] Based on the decryption result determination information, the decryption capability formed based on the first cryptographic material is determined, including:

[0115] When the output result information indicates that the first cryptographic material has not been output, the decryption capability formation result is determined to be not formed;

[0116] When the material output result information indicates that the first cryptographic material has been output, and the decryption activation processing result information indicates that the decryption activation processing was successful, the decryption capability formation result is determined to be formed.

[0117] When the material output result information indicates that the first cryptographic material has been output, and the decryption activation processing result information indicates that the decryption activation processing has failed, the decryption capability formation result is determined to be not formed.

[0118] When the material output result information indicates that the first cryptographic material has been output, the decryption activation process result information neither indicates that the decryption activation process was successful nor failed, and the material validity status information indicates that the first cryptographic material has expired, the decryption capability formation result is determined to be not formed.

[0119] When the material output result information indicates that the first cryptographic material has been output, the decryption activation process result information neither indicates that the decryption activation process was successful nor failed, and the material validity status information indicates that the first cryptographic material has not expired, the isolation state is maintained until the decryption capability is determined.

[0120] The material output result information refers to information indicating whether the first cryptographic material has entered the subsequent processing stage from the cryptographic material generation process. The material output result information includes whether the first cryptographic material has been output and whether the first cryptographic material has not been output.

[0121] "First cryptographic material has been output" means that the first cryptographic material has been provided to the target recipient or the processing object used to perform subsequent decryption and activation. "First cryptographic material has not been output" means that the first cryptographic material has not yet been provided to the target recipient or the processing object used to perform subsequent decryption and activation.

[0122] For example, material output result information can be generated based on the output results returned by the cryptographic material output interface, the sending results corresponding to the first cryptographic material, and the receiving results corresponding to the first cryptographic material.

[0123] The decryption activation process result information refers to information used to indicate the result of performing decryption activation processing based on the first cryptographic material. The decryption activation process result information may indicate that the decryption activation process was successful, failed, or neither.

[0124] A successful decryption activation process means that the decryption activation process performed based on the first cryptographic material has been successfully completed. A failed decryption activation process means that the decryption activation process performed based on the first cryptographic material failed to complete successfully. A state that indicates neither success nor failure of the decryption activation process means that the decryption activation process has not yet yielded a definitive result.

[0125] For example, if the cryptographic device completes the verification of the first cryptographic material and returns a successful decryption activation result, it can be determined that the decryption activation process was successful; if the cryptographic device rejects the decryption activation request corresponding to the first cryptographic material, it can be determined that the decryption activation process failed; if the decryption activation request is being processed or the corresponding processing result has not yet been returned, it can be determined that the decryption activation process result information neither indicates that the decryption activation process was successful nor indicates that the decryption activation process failed.

[0126] Material validity status information refers to information indicating whether the first cryptographic material still possesses the valid conditions for continued decryption and activation. Material validity status information includes whether the first cryptographic material has expired and whether it has not expired.

[0127] The first cryptographic material has expired, meaning it no longer meets the valid conditions for decryption and activation. The first cryptographic material has not expired, meaning it can still be used to continue decryption and activation.

[0128] For example, if the first cryptographic material exceeds the preset validity period, the validity status corresponding to the first cryptographic material is updated, or the first cryptographic material is revoked, it can be determined that the first cryptographic material has expired; if the first cryptographic material is still within the preset validity period, the validity status corresponding to the first cryptographic material has not been updated, or the first cryptographic material has not been revoked, it can be determined that the first cryptographic material has not expired, etc.

[0129] Specifically, when the first cryptographic material has not been output, the target recipient has not yet obtained the first cryptographic material, so it can be determined that the decryption capability has not been formed. When the first cryptographic material has been output, it is also necessary to combine the decryption activation processing result information to determine the decryption capability formation result.

[0130] When the decryption activation process result information indicates that the decryption activation process was successful, it can be determined that the target receiving object has obtained the corresponding decryption capability based on the first cryptographic material. When the decryption activation process result information indicates that the decryption activation process failed, it can be determined that the target receiving object has not obtained the corresponding decryption capability based on the first cryptographic material.

[0131] When the decryption activation process result information has not yet indicated a clear result, it is further determined whether the first cryptographic material can still complete decryption activation based on the material validity status information. If the first cryptographic material has expired, it cannot continue to complete decryption activation, and therefore the result of decryption capability formation is determined to be not formed; if the first cryptographic material has not expired, it can still complete decryption activation, and therefore the isolation state continues to be maintained until information that can determine the result of decryption capability formation is obtained.

[0132] Therefore, it is possible to avoid directly judging the first cryptographic material whose processing result is not yet clear and which may still be decrypted and activated as having no decryption capability, thereby reducing the possibility that different identity authentication paths will form decryption capabilities for the same sub-information ciphertext.

[0133] S106. Based on the second cryptographic credential, decryption result determination information, and second sub-information ciphertext, update the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext, and generate the second cryptographic material and determine the information transmission status of the information to be sent based on the updated single activation control information corresponding to the second sub-information ciphertext.

[0134] Updating the single activation control information corresponding to the first sub-information ciphertext means updating the control data related to the decryption process of the first cryptographic material in the single activation control information based on the decryption result determination information.

[0135] Updating the single activation control information corresponding to the second sub-information ciphertext means updating the control data related to cipher verification, cipher material generation, and decryption activation in the single activation control information based on the second cryptographic credential and the second sub-information ciphertext, so that the updated single activation control information can be used to control the generation of the second cryptographic material.

[0136] When the first sub-information ciphertext is the same as the second sub-information ciphertext, the aforementioned two types of updates apply to the same single-activation control information. When the first sub-information ciphertext is different from the second sub-information ciphertext, the aforementioned two types of updates apply to the single-activation control information corresponding to the first sub-information ciphertext and the single-activation control information corresponding to the second sub-information ciphertext, respectively.

[0137] For example, when the second sub-information ciphertext is the same as the first sub-information ciphertext, the single activation control information that uniquely corresponds to the first sub-information ciphertext and the target receiving object can be updated based on the decryption result judgment information and the second cryptographic credential; when the second sub-information ciphertext is a sub-information ciphertext arranged after the first sub-information ciphertext, the single activation control information corresponding to the first sub-information ciphertext can be updated based on the decryption result judgment information, and the single activation control information corresponding to the second sub-information ciphertext can be updated based on the second cryptographic credential, etc.

[0138] The single activation control information corresponding to the updated second sub-information ciphertext refers to the single activation control information used to control the generation and decryption activation of the cryptographic materials corresponding to the second sub-information ciphertext after the second cryptographic credential, decryption result judgment information, and second sub-information ciphertext have been updated.

[0139] The updated single-activation control information corresponding to the second sub-information ciphertext may include at least one of the following: the identifier of the second sub-information ciphertext, the identifier of the target receiving object, control data corresponding to the second cryptographic credential, activation status, and cryptographic material generation conditions. Different specific update methods can be further described in subsequent embodiments.

[0140] The second cryptographic material refers to cryptographic data generated based on the single activation control information corresponding to the updated second sub-information ciphertext, used to support the target receiving object in decrypting and activating the second sub-information ciphertext. The term "second" indicates that the cryptographic material corresponds to the second access request and the second sub-information ciphertext, but does not indicate that the second cryptographic material is a second cryptographic material generated specifically for the information to be sent.

[0141] The second cryptographic material can be associated with the second sub-message ciphertext, the target recipient, and the second cryptographic credential. For example, the second cryptographic material can be an encapsulated content key, a cryptographic token used for decryption activation, or a call message used to invoke the controlled key.

[0142] In practice, the generation conditions for the second cryptographic material can be determined based on the single-activation control information corresponding to the updated second sub-information ciphertext. If the generation conditions are met, the cryptographic device or cryptographic operation module can be invoked to generate the second cryptographic material. Generating the second cryptographic material does not indicate that the target receiving object has completed the decryption of the second sub-information ciphertext; the second cryptographic material can still undergo corresponding decryption and activation processing.

[0143] Information transmission status refers to the status information used to indicate the transmission and access processing of information to be sent to the target receiving object. Information transmission status can be generated or updated based on the single activation control information corresponding to each sub-information ciphertext, the processing status of the corresponding cryptographic materials, and the already determined second sub-information ciphertext.

[0144] The information transmission status can include the overall processing status of the information to be sent, or the processing status of each individual ciphertext sub-information. For example, the information transmission status can indicate that the information to be sent is in a waiting-for-access state, some ciphertext sub-information is in an access processing state, or some ciphertext sub-information has completed its corresponding cryptographic processing.

[0145] In practice, the current processing stage of the second sub-information ciphertext can be determined based on the single-activation control information corresponding to the updated second sub-information ciphertext. Combined with the single-activation control information corresponding to the first sub-information ciphertext, the information transmission status of the information to be sent can be determined. The information transmission status can be associated with and stored in conjunction with the identifier of the information to be sent and the identifier of the target receiving object, respectively indicating the processing status of the information to be sent towards different target receiving objects.

[0146] By subjecting the generation of the second cryptographic material and the determination of the information transmission status to the single activation control information corresponding to the updated second sub-information ciphertext, the information transmission status can be made to correspond with the generation and decryption processing of the cryptographic material, thereby improving the accuracy of the encrypted information transmission status control.

[0147] like Figure 2 As shown, the sending terminal sends the information to be sent and the target receiving object to the information sending status control server. The information sending status control server calls the cryptographic device to encrypt each sub-information, establishes single-activation control information corresponding to each sub-information ciphertext, and sends the ciphertext to the receiving terminal. After the receiving terminal sends a first access request based on the first cryptographic credential, the information sending status control server verifies the first cryptographic credential through the authentication device and calls the cryptographic device to generate the first cryptographic material. When a second access request based on the second cryptographic credential is received during the period when the processing result corresponding to the first cryptographic material is pending confirmation, the information sending status control server updates the corresponding activation status to the isolated state and obtains the decryption result determination information corresponding to the first cryptographic material. When the decryption capability formation result is not formed, the first sub-information ciphertext is determined as the second sub-information ciphertext; when the decryption capability formation result is formed, the next sub-information ciphertext of the first sub-information ciphertext is determined as the second sub-information ciphertext. Subsequently, the information sending status control server calls the cryptographic device to generate the second cryptographic material according to the updated single-activation control information and sends the second cryptographic material to the receiving terminal.

[0148] In some embodiments, to prevent the first cryptographic material from continuing to correspond to the current single activation control state after the identity authentication path changes, the single activation control information corresponding to the first sub-information ciphertext includes the identity authentication path, status credential, activation eligibility status and activation status, and the first cryptographic material includes the first status credential.

[0149] When the second sub-information ciphertext is the same as the first sub-information ciphertext, the single-activation control information corresponding to both the first and second sub-information ciphertexts is updated based on the second cryptographic credential, the decryption result determination information, and the second sub-information ciphertext. This includes:

[0150] When the material output result information indicates that the first cryptographic material has been output and the decryption capability formation result is not formed, the first status credential is matched with the status credential in the single activation control information corresponding to the first sub-information ciphertext, and the identity authentication path corresponding to the first cryptographic credential is matched with the identity authentication path in the single activation control information corresponding to the first sub-information ciphertext.

[0151] When the first status credential matches the status credential in the single activation control information corresponding to the first sub-information ciphertext, the authentication path corresponding to the first password credential matches the authentication path in the single activation control information corresponding to the first sub-information ciphertext, and the activation qualification status in the single activation control information corresponding to the first sub-information ciphertext is in an unconsumed state, the authentication path in the single activation control information corresponding to the first sub-information ciphertext is updated to the authentication path corresponding to the second password credential.

[0152] The second state credential is generated based on the updated identity authentication path, the first state credential, and the activation eligibility status in the single activation control information corresponding to the first sub-information ciphertext. The state credential in the single activation control information corresponding to the first sub-information ciphertext is then updated to the second state credential, which is different from the first state credential.

[0153] After updating the identity authentication path and status credentials in the single activation control information corresponding to the first sub-information ciphertext, the activation status in the single activation control information corresponding to the first sub-information ciphertext is updated from the isolated status to the second path pending status.

[0154] Specifically, when the second sub-information ciphertext is the same as the first sub-information ciphertext, the corresponding single-activation control information for both is the same. The above processing updates the original single-activation control information, rather than re-establishing it.

[0155] The authentication path refers to the information in the single-activation control information corresponding to the first sub-information ciphertext that indicates the authentication processing method currently being used. For example, the authentication path can be an authentication path based on smart key (UKEY) signature verification, an authentication path based on dynamic password verification, or an authentication path based on device certificate verification, etc.

[0156] A status credential is cryptographic data used to characterize the control state of a single activation control message corresponding to the first sub-information ciphertext. A status credential can be generated based on at least one of the first sub-information ciphertext, the target recipient, the authentication path, and the activation eligibility status.

[0157] The first state credential refers to the state credential included in the first cryptographic material that corresponds to the state credential in the single activation control information corresponding to the first sub-information ciphertext when the first cryptographic material was generated.

[0158] The activation eligibility status refers to the status information in the single activation control information corresponding to the first sub-information ciphertext, indicating whether the single activation eligibility for the first sub-information ciphertext has been consumed. An unconsumed status indicates that the single activation eligibility has not yet been used to form decryption capability.

[0159] The activation state refers to the state information in the single activation control information corresponding to the first sub-information ciphertext, used to indicate the stage of cryptographic processing. For example, the activation state may include the isolation state, the second path pending state, and the activation completed state.

[0160] Matching refers to verifying the consistency of two pieces of information to be compared. Specifically, matching of state credentials is used to verify whether the first cryptographic material corresponds to the current control state of the first sub-information ciphertext; matching of authentication paths is used to verify whether the first cryptographic material was generated by the current authentication path.

[0161] The updated authentication path refers to the authentication path obtained by updating the authentication path corresponding to the first password credential in the single activation control information corresponding to the first sub-information ciphertext to the authentication path corresponding to the second password credential.

[0162] The second state credential refers to the state credential generated based on the updated authentication path, the first state credential, and the activation eligibility status in the single activation control information corresponding to the first sub-information ciphertext. After replacing the original state credential with the second state credential, the first state credential in the first cryptographic material no longer matches the state credential in the single activation control information.

[0163] The second path pending status refers to the active state that allows subsequent password processing to be performed based on the identity authentication path corresponding to the second password credential after the identity authentication path and status credentials have been updated.

[0164] For example, the first cryptographic credential is a smart key (UKEY) credential, and the second cryptographic credential is a dynamic password credential. When the first cryptographic material has been output but has not yet formed decryption capability, the authentication path corresponding to the first sub-information ciphertext can be updated from the authentication path corresponding to the smart key signature verification to the authentication path corresponding to the dynamic password verification, and a second status credential can be generated. This prevents the first cryptographic material from continuing to pass the status credential verification and allows the same sub-information ciphertext to continue to be processed based on the second cryptographic credential.

[0165] In some embodiments, to prevent the first cryptographic material generated before the identity authentication path migration from completing decryption and activation after the state credentials are updated, the method further includes:

[0166] After the status credential in the single activation control information corresponding to the first sub-information ciphertext is updated to the second status credential, the target receiving object sends a decryption activation request based on the first cryptographic material. The decryption activation request carries the first status credential obtained from the first cryptographic material.

[0167] Match the first status credential carried in the decryption activation request with the status credential in the single activation control information corresponding to the first sub-information ciphertext;

[0168] If the first state credential does not match the state credential in the single activation control information corresponding to the first sub-information ciphertext, the decryption activation request is rejected.

[0169] The decryption activation request refers to a request sent by the target receiving object based on the first cryptographic material to request the decryption capability corresponding to the first sub-information ciphertext. The decryption activation request may include the identifier of the first cryptographic material, the identifier of the first sub-information ciphertext, the identifier of the target receiving object, and first status credentials, etc.

[0170] The first state credential obtained from the first cryptographic material refers to the state credential generated together with or bound to the first cryptographic material when the first cryptographic material was generated. This first state credential characterizes the control state of the single-activation control information corresponding to the first sub-information ciphertext when the first cryptographic material was generated.

[0171] After the status credential in the single-activation control information corresponding to the first sub-information ciphertext is updated to the second status credential, the first status credential in the first cryptographic material remains unchanged. Therefore, the first status credential does not match the updated status credential, indicating that the first cryptographic material no longer corresponds to the current control state of the first sub-information ciphertext.

[0172] Rejecting a decryption activation request means ceasing subsequent decryption activation processing based on the first cryptographic material and not providing the target recipient with the decryption capability corresponding to the first sub-information ciphertext. Rejection processing may include not performing key decapsulation, not generating decryption activation information, or returning a decryption activation failure result.

[0173] By verifying the first state credentials in the first cryptographic material during decryption activation, the continued use of the first cryptographic material generated before the identity authentication path migration can be prevented, reducing the possibility that different identity authentication paths may repeatedly form decryption capabilities for the same sub-information ciphertext.

[0174] In some embodiments, to enable the second cryptographic material to reflect the control state before and after the identity authentication path migration, the second cryptographic material is generated based on the single activation control information corresponding to the updated second sub-information ciphertext, including:

[0175] When the authentication path in the single activation control information corresponding to the second sub-information ciphertext is the authentication path corresponding to the second password credential, and the status credential in the single activation control information corresponding to the second sub-information ciphertext is the second status credential, a path migration credential is generated. The path migration credential includes path information before migration and path information after migration. The path information before migration includes the authentication path corresponding to the first password credential and the first status credential. The path information after migration includes the authentication path corresponding to the second password credential and the second status credential.

[0176] Add the path migration credentials to the single activation control information corresponding to the second sub-information ciphertext;

[0177] The second cryptographic material is generated based on the single activation control information corresponding to the second sub-information ciphertext with added path migration credentials.

[0178] The updated second sub-information ciphertext, specifically the single-activation control information, refers to the single-activation control information after the identity authentication path and status credentials have been updated. When the second sub-information ciphertext is the first sub-information ciphertext, this single-activation control information is the same single-activation control information that has undergone the aforementioned identity authentication path migration.

[0179] The authentication path in the single activation control information corresponding to the second sub-information ciphertext is the authentication path corresponding to the second password credential, which means that the authentication path in the single activation control information matches the authentication path used by the second password credential.

[0180] The status credential in the single activation control information corresponding to the second sub-information ciphertext is the second status credential, which means that the status credential in the single activation control information has been updated from the first status credential to the second status credential.

[0181] A path migration credential is cryptographic data used to represent the migration of activation control information from the authentication path corresponding to a first cryptographic credential to the authentication path corresponding to a second cryptographic credential. Path migration credentials can be generated in the form of digital signatures, message authentication codes, or cryptographic tokens.

[0182] Pre-migration path information refers to information used to characterize the control state of the identity authentication path before migration, including the identity authentication path corresponding to the first password credential and the first state credential.

[0183] Post-migration path information refers to information used to characterize the control status after the identity authentication path is migrated, including the identity authentication path corresponding to the second password credential and the second status credential.

[0184] Adding the path migration credential to the single activation control information corresponding to the second sub-information ciphertext means saving the path migration credential in the single activation control information or establishing a correspondence between the single activation control information and the path migration credential, so that the path migration credential participates in the generation control of the second cryptographic material.

[0185] The second cryptographic material refers to cryptographic data generated based on single-activation control information with added path migration credentials, used to enable the target recipient to obtain the decryption capability corresponding to the second sub-information ciphertext. The second cryptographic material can be a repackaged content key, a decryption activation token, or controlled key access information, etc.

[0186] By adding the path migration credentials to the single activation control information corresponding to the second sub-information ciphertext, the generation of the second cryptographic material can be subject to the joint constraints of the pre-migration path information and the post-migration path information, thus avoiding the generation of the second cryptographic material before the identity authentication path or status credentials have been migrated.

[0187] In some embodiments, in order to ensure that only one request can consume a single activation qualification for the decryption activation request and the withdrawal request for the same sub-information ciphertext, the target activation control information is the single activation control information corresponding to the second sub-information ciphertext. The target activation control information includes a status credential and an activation qualification status. The activation qualification status includes an unconsumed status, an activation consumption final status, and a withdrawal consumption final status.

[0188] The second cryptographic material is generated based on the single activation control information corresponding to the updated second sub-information ciphertext, and the information transmission status of the information to be sent is determined, including:

[0189] A second cryptographic material is generated based on the status credentials in the target activation control information, and the second cryptographic material is sent to the target receiving object.

[0190] The system receives a decryption activation request sent by the target receiving object based on the second cryptographic material, and receives a withdrawal request for the second sub-information ciphertext. The decryption activation request and the withdrawal request each carry a status credential to be verified, and each status credential to be verified is the same as the status credential on which the second cryptographic material was generated.

[0191] Based on the order in which the decryption activation request and the withdrawal request process the target activation control information, the request that is processed first is determined as the first target request, and the request that is processed later is determined as the second target request.

[0192] When the unverified status credentials carried by the first target request match the status credentials in the target activation control information, and the activation eligibility status is unconsumed, the first target request is processed according to the request type of the first target request to obtain the target processing result.

[0193] When the target processing result indicates that the first target request has been successfully processed, the target consumption final state is determined according to the request type of the first target request, wherein the decryption activation request corresponds to the activation consumption final state, and the withdrawal request corresponds to the withdrawal consumption final state.

[0194] When the target processing result indicates that the first target request has been successfully processed, before outputting the target processing result, a target state credential different from the unverified state credential carried by the first target request is generated, and the state credential and activation qualification status in the target activation control information are updated using the target state credential and the target consumption final state.

[0195] After the first target request is successfully processed and the status credentials and activation eligibility status are updated, the information sending status of the information to be sent is determined based on the target processing result, and the target processing result is output.

[0196] After the first target request is successfully processed, if the unverified status credentials carried by the second target request do not match the target status credentials, or if the activation eligibility status is not an unconsumed status, the second target request is rejected.

[0197] The target activation control information refers to the single activation control information corresponding to the second sub-information ciphertext and the target receiving object, used to control the generation, decryption activation, and revocation processing of the second cryptographic material. "Target" indicates that this single activation control information is a control object accessed by both the decryption activation request and the revocation request.

[0198] The unconsumed state indicates that the single activation qualification corresponding to the second sub-information ciphertext has not yet been decrypted and used by the activation request or withdrawal request.

[0199] The activation consumption final state indicates that the single activation qualification has been consumed by the decryption activation request. The withdrawal consumption final state indicates that the single activation qualification has been consumed by the withdrawal request. After entering either consumption final state, the single activation qualification will not be restored to an unconsumed state.

[0200] A pending verification status credential refers to a status credential carried in a decryption activation request or withdrawal request, used to verify whether the corresponding request corresponds to the current control status of the target activation control information. Each pending verification status credential originates from the status credential upon which the second cryptographic material was generated.

[0201] The processing order refers to the order in which the decryption activation request and the withdrawal request enter the target activation control information status verification and update processing, and is not limited to the order in which the two requests arrive at the communication interface.

[0202] The first target request and the second target request represent the request to be processed first and the request to be processed later, respectively, without limiting the specific request type. The first target request can be a decryption / activation request or a withdrawal request.

[0203] The target processing result refers to the result obtained from processing the first target request. When the first target request is a decryption / activation request, the target processing result can indicate whether the decryption / activation process was successful; when the first target request is a withdrawal request, the target processing result can indicate whether the withdrawal process was successful.

[0204] The target consumption final state refers to the activation eligibility state determined from the activation consumption final state and the withdrawal consumption final state based on the request type of the first target request.

[0205] The target state credential is a state credential generated after the first target request is successfully processed, used to characterize the control state after the target activation control information is updated. The target state credential differs from the unverified state credential carried in the first target request, so that requests generated based on the state credential before the update cannot continue to pass state verification.

[0206] Updating the status credentials and activation eligibility status before outputting the target processing result means first invalidating the previous status credentials and consuming the corresponding one-time activation eligibility, and then providing the target processing result to the corresponding requester. This can reduce the time interval during which the target processing result has been output while the one-time activation eligibility is still in an unconsumed state.

[0207] Rejecting a second target request means ceasing the decryption activation process or withdrawal process based on the second target request. Rejection processing may include terminating cryptographic operations, stopping the update of information transmission status, or returning a request invalidation message.

[0208] For example, if the decryption activation request passes the status verification first, the activation eligibility status is updated to the activation consumption final state, and subsequent withdrawal requests are rejected because they carry the status credentials from before the update. If the withdrawal request passes the status verification first, the activation eligibility status is updated to the withdrawal consumption final state, and subsequent decryption activation requests can no longer obtain the decryption capability corresponding to the second sub-information ciphertext. This reduces the possibility that the decryption activation processing result and the withdrawal processing result will take effect simultaneously.

[0209] In some embodiments, in order to determine the revocable range based on the actual decryption capability formed by each sub-information ciphertext, each sub-information ciphertext is decrypted and activated sequentially in a preset order. The single activation control information corresponding to each sub-information ciphertext includes activation eligibility status and activation status, and the information sending status includes revocation boundary information.

[0210] Determine the information transmission status of the message to be sent, including:

[0211] Receive a withdrawal request for the information to be sent, and obtain the decryption result determination information corresponding to the ciphertext of each sub-information;

[0212] Based on the decryption result judgment information, the decryption capability corresponding to each sub-information ciphertext is determined to form the result;

[0213] According to the preset order, the sub-information ciphertexts that are arranged consecutively from the first one and whose corresponding decryption capability formation results are all formed are identified as the confirmed decrypted sub-information ciphertext sequence, and the remaining sub-information ciphertexts are identified as the withdrawn sub-information ciphertext sequence.

[0214] Update the activation status in the single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence to the revocation status, and update the corresponding activation eligibility status to the revocation consumption final state.

[0215] Generate a withdrawal boundary credential based on the target recipient, the confirmed decrypted sub-information ciphertext sequence, the withdrawn sub-information ciphertext sequence, and the updated single activation control information;

[0216] Based on the confirmed decrypted sub-message ciphertext sequence, the withdrawn sub-message ciphertext sequence, and the withdrawn boundary credentials, a withdrawn boundary information is generated, and the withdrawn boundary information is added to the information sending status of the message to be sent.

[0217] The process of decrypting and activating each sub-information ciphertext in a preset order means that, according to the order in which each sub-information ciphertext is arranged in the information ciphertext, it is determined whether or not the corresponding sub-information ciphertext is allowed to be decrypted and activated.

[0218] A withdrawal request is a request used to stop the target receiving object from continuing to obtain the decryption capability corresponding to the information to be sent. A withdrawal request may include the identifier of the information to be sent, the identifier of the target receiving object, the identity credentials of the party requesting the withdrawal, and the time of the withdrawal request.

[0219] A confirmed decrypted sub-information ciphertext sequence refers to a sequence consisting of consecutive sub-information ciphertexts starting from the first sub-information ciphertext, where the corresponding decryption capability is formed from all the sub-information ciphertexts already created. This sequence is used to represent the range of continuous information for which the target receiving object has acquired decryption capability.

[0220] A withdrawable sub-message ciphertext sequence refers to a sequence of sub-message ciphertexts other than those whose decryption capabilities have been confirmed. The withdrawable sub-message ciphertext sequence begins with the first sub-message ciphertext for which decryption capability has not yet been developed, and includes all sub-message ciphertexts following that first sub-message ciphertext.

[0221] For example, when the ciphertext consists of ten sub-ciphertexts in sequence, and the decryption capability corresponding to the first four sub-ciphertexts is formed, the first four sub-ciphertexts form a confirmed decryption sub-ciphertext sequence, and the fifth to tenth sub-ciphertexts form a withdrawn sub-ciphertext sequence.

[0222] When the decryption capability corresponding to the first sub-information ciphertext is not formed, the confirmed decryption sub-information ciphertext sequence can be empty, and all sub-information ciphertexts form the withdrawn sub-information ciphertext sequence. When the decryption capability corresponding to all sub-information ciphertexts is formed, the withdrawn sub-information ciphertext sequence can be empty.

[0223] The withdrawal status refers to the activation status of the single activation control information corresponding to the withdrawn sub-information ciphertext, which prohibits the continued generation or activation of cryptographic materials.

[0224] The "withdrawal consumption final state" refers to the state where the single activation qualification corresponding to the withdrawn sub-message ciphertext has been consumed by the withdrawal request. After entering the withdrawal consumption final state, the decryption capability of the corresponding sub-message ciphertext will no longer be provided to the target receiving object based on the single activation qualification.

[0225] A withdrawal boundary credential is cryptographic data used to prove the boundary between the confirmed decrypted sub-message ciphertext sequence and the withdrawn sub-message ciphertext sequence. A withdrawal boundary credential can be generated based on the identifier of the target recipient, the identifiers of each sub-message ciphertext in the two sequences, and the updated activation status and activation eligibility status, and can take the form of a digital signature, message authentication code, or encryption token.

[0226] Retraction boundary information refers to information used to characterize the portion of the message to be sent that has been confirmed to be decryptable and the portion that has been withdrawn. Retraction boundary information includes the ciphertext sequence of the confirmed decrypted sub-message, the ciphertext sequence of the withdrawn sub-message, and the withdrawal boundary credential.

[0227] Adding withdrawal boundary information to the information transmission status of the information to be sent means updating the information transmission status of the information to be sent using withdrawal boundary information, so that the information transmission status can respectively represent the ciphertext of the sub-information that the target receiving object has already obtained the decryption capability and the ciphertext of the sub-information that cannot continue to obtain the decryption capability after withdrawal.

[0228] By determining the withdrawal boundary based on the decryption capability of each sub-information ciphertext, it is possible to avoid incorrectly marking sub-information ciphertexts that have already been decrypted as withdrawn, and to prevent the target receiving object from continuing to obtain the decryption capability of each sub-information ciphertext after the withdrawal boundary.

[0229] In some embodiments, in order to prevent both the cryptographic materials generated before retraction and the cryptographic material generation requests after retraction from obtaining decryption capabilities, the single activation control information corresponding to each sub-information ciphertext in the retraction sub-information ciphertext sequence also includes status credentials.

[0230] Update the activation status in the single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence to the revocation status, and update the corresponding activation eligibility status to the revocation consumption final state, including:

[0231] Based on the withdrawal request and the single activation control information corresponding to each sub-information cipher in the withdrawal sub-information cipher sequence, generate withdrawal status credentials that are different from the status credentials before the update.

[0232] Update the status credentials in the single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence to the corresponding revocation status credentials, and update the corresponding activation status and activation eligibility status to the revocation status and revocation consumption final state, respectively.

[0233] Based on the target recipient, the confirmed decrypted sub-message ciphertext sequence, the revocation sub-message ciphertext sequence, and the updated single-activation control information, generate revocation boundary credentials, including:

[0234] From the updated single activation control information, obtain the withdrawal status credentials and withdrawal consumption final state corresponding to each sub-information ciphertext in the withdrawal sub-information ciphertext sequence;

[0235] Generate withdrawal boundary credentials based on the target receiving object, the confirmed decrypted sub-information ciphertext sequence, the withdrawn sub-information ciphertext sequence, each withdrawal status credential, and each withdrawal consumption final state;

[0236] The method also includes:

[0237] Receive a target request for the target retraction of the sub-information ciphertext in the retraction sub-information ciphertext sequence. The target request is a cryptographic material generation request or a decryption activation request sent based on the cryptographic material generated before retraction. The decryption activation request carries the status credential to be verified.

[0238] When the target request is a cryptographic material generation request, and the activation eligibility status corresponding to the target withdrawn sub-information ciphertext is in the withdrawal consumption final state, the cryptographic material generation request is rejected.

[0239] When the target request is a decryption activation request, and the status credential to be verified does not match the revocation status credential corresponding to the target revocation sub-information ciphertext, the decryption activation request is rejected.

[0240] If the target request is a decryption activation request, and the activation eligibility status corresponding to the target withdrawn sub-information ciphertext is in the withdrawal consumption final state, the decryption activation request is rejected.

[0241] The "state credential before update" refers to the state credential in the single activation control information corresponding to the corresponding sub-information ciphertext before the revocation process is executed. The cryptographic materials generated before revocation are generated based on this state credential or establish a corresponding relationship with it.

[0242] A revocation status credential is a status credential generated based on the revocation request and the single-activation control information corresponding to the target revocation sub-information ciphertext, used to characterize the control status after revocation. The revocation status credential differs from the previous status credential to prevent cryptographic materials generated before revocation from passing status credential verification.

[0243] Each withdrawal status credential corresponds to a sub-message in the sequence of withdrawn sub-message ciphertexts. Different sub-message ciphertexts can have different withdrawal status credentials to control the generation and decryption activation of the cryptographic materials corresponding to each sub-message ciphertext.

[0244] Generating withdrawal boundary credentials based on each withdrawal status credential and each withdrawal consumption final state means adding the withdrawal control state of each sub-information ciphertext in the withdrawal sub-information ciphertext sequence to the withdrawal boundary credential, so that the withdrawal boundary credential can represent that each sub-information ciphertext has completed the status credential update and activation qualification consumption.

[0245] The target retraction sub-message ciphertext refers to the sub-message ciphertext currently receiving the target request in the retraction sub-message ciphertext sequence. "Target" indicates that this sub-message ciphertext is the object of this request, and does not indicate its position in the retraction sub-message ciphertext sequence.

[0246] A target request refers to a cryptographic processing request sent to a target to withdraw encrypted sub-information, including a request to generate cryptographic materials or a request to decrypt and activate the information.

[0247] A cryptographic material generation request is a request to generate cryptographic materials corresponding to the target retracted sub-information ciphertext. If the activation eligibility status corresponding to the target retracted sub-information ciphertext is in the final retraction consumption state, cryptographic materials will no longer be generated based on this request.

[0248] Cryptographic material generated before revocation refers to cryptographic material generated before the single-activation control information corresponding to the target revocation sub-information ciphertext enters the revocation state. This cryptographic material carries or is associated with the state credentials before the update.

[0249] The pending verification status credential refers to the status credential obtained from the cryptographic material generated before retraction and carried in the decryption activation request. Since the status credential corresponding to the target retraction sub-information ciphertext has been updated to the retraction status credential, the pending verification status credential does not match the retraction status credential.

[0250] Rejecting a request to generate cryptographic material means that no new cryptographic material will be generated based on the single activation control information corresponding to the ciphertext of the withdrawn sub-information. Rejecting a request to activate decryption means that the corresponding decryption capability will no longer be provided to the target recipient based on the cryptographic material generated before withdrawal.

[0251] A mismatch in status credentials and an activation eligibility status indicating withdrawal of consumption can serve as two verification conditions for rejecting a decryption activation request. The former invalidates cryptographic materials generated before withdrawal, while the latter prevents the reuse of a consumed single activation eligibility after withdrawal.

[0252] By updating the status credentials, activation status, and activation eligibility status corresponding to the revoked sub-information ciphertext, it is possible to simultaneously prevent the generation of new cryptographic materials after revocation and the continued use of cryptographic materials generated before revocation, thereby ensuring that the revocation scope represented by the revocation boundary credentials remains consistent with the actual cryptographic control status.

[0253] In some embodiments, the message to be sent is an encrypted email including a large attachment, and the target recipient is the user who will receive the email. The attachment is divided into ten sub-messages in a preset order, and each sub-message is encrypted to form ten sub-message ciphertexts. Single activation control information is established for each sub-message ciphertext and the target recipient.

[0254] Assume the target recipient has already decrypted and activated the first four encrypted sub-messages and requests the fifth encrypted sub-message through the authentication path corresponding to the smart password key (UKEY). The system generates the first cryptographic material based on the single activation control information corresponding to the fifth encrypted sub-message. After the first cryptographic material is output, if the smart password key disconnects or the target recipient switches to a terminal using a dynamic password, and the processing result of the first cryptographic material has not yet been confirmed, the target recipient sends another access request through the authentication path corresponding to the dynamic password.

[0255] The system updates the single-activation control information corresponding to the fifth sub-information ciphertext to an isolated state, suspends the decryption activation of the first cryptographic material, and suspends the generation of new cryptographic material through the authentication path corresponding to the dynamic password. Subsequently, the system obtains the decryption result determination information corresponding to the first cryptographic material.

[0256] When the decryption result indicates that the first cryptographic material has not yet been decrypted, the fifth sub-information ciphertext is designated as the second sub-information ciphertext, and the authentication path corresponding to the fifth sub-information ciphertext is updated from the authentication path corresponding to smart key signature verification to the authentication path corresponding to dynamic password verification. Simultaneously, its status credentials are updated from the first status credentials to the second status credentials, preventing the first cryptographic material from passing status credential verification. After the update is completed, the system generates the second cryptographic material for the fifth sub-information ciphertext.

[0257] When the decryption result indicates that the first cryptographic material has been decrypted, the sixth sub-information ciphertext is designated as the second sub-information ciphertext, and the second cryptographic material is generated based on the single activation control information corresponding to the sixth sub-information ciphertext, so as to avoid forming decryption capability for the fifth sub-information ciphertext again.

[0258] Furthermore, if the decryption activation request corresponding to the second cryptographic material and the revocation request for the second sub-information ciphertext enter the target activation control information processing process sequentially, the request that passes the status credential verification first consumes the corresponding activation qualification and triggers the status credential update. Subsequent requests are rejected because they carry the status credential before the update or the activation qualification has already been consumed.

[0259] If the sending user withdraws the entire email, and the first four encrypted sub-messages are decryptable while the fifth to tenth encrypted sub-messages are not, then the first four encrypted sub-messages constitute a confirmed decryption sequence, and the fifth to tenth encrypted sub-messages constitute a withdrawn sequence. The system updates the status credentials, activation status, and activation eligibility status corresponding to the fifth to tenth encrypted sub-messages, and generates withdrawal boundary credentials to prevent the generation of new cryptographic materials or the use of cryptographic materials generated before the withdrawal.

[0260] like Figure 3As shown, in one exemplary hardware deployment, the sending terminal and the receiving terminal are connected to a secure access device via a communication network. The secure access device is connected to an information transmission status control server, which in turn is connected to an authentication device, a cryptographic device, and a storage device. The authentication device may include a dynamic token authentication device and a signature verification device. The cryptographic device is used to perform information encryption and cryptographic material generation. The storage device is used to store at least one of the following: information to be sent, encrypted information, single activation control information, and information transmission status. Figure 3 The hardware components and communication connection methods shown are for illustrative purposes only. Each device can be integrated or distributed according to actual deployment needs.

[0261] To better implement the above methods, this application also provides a password-based information transmission status control system. This password-based information transmission status control system can be integrated into an electronic device, such as a terminal or server. The terminal can be a mobile phone, tablet computer, smart Bluetooth device, laptop computer, or personal computer; the server can be a single server or a server cluster composed of multiple servers.

[0262] For example, in this embodiment, a method of the present application embodiment will be described in detail by taking an information transmission status control system based on password credentials specifically integrated into an electronic device.

[0263] For example, such as Figure 4 As shown, the information transmission status control system based on cryptographic credentials may include an information encryption module 401, a control information establishment module 402, a first cryptographic material generation module 403, an isolation control module 404, a connection determination module 405, and a status control module 406, as follows:

[0264] (a) Information encryption module 401.

[0265] The information encryption module 401 is used to acquire the information to be sent and the target receiving object, and to divide the information to be sent into multiple sub-information arranged in a preset order and encrypt them respectively, so as to obtain information ciphertext composed of the ciphertext of each sub-information.

[0266] (ii) Control information establishment module 402.

[0267] The control information establishment module 402 is used to establish a single activation control information that uniquely corresponds to each sub-information ciphertext and the target receiving object, and to send the information ciphertext to the target receiving object.

[0268] (III) First cryptographic material generation module 403.

[0269] The first cryptographic material generation module 403 is used to receive a first access request for the first sub-information ciphertext sent by the target receiving object based on the first cryptographic credentials, and generate the first cryptographic material according to the first access request and the single activation control information corresponding to the first sub-information ciphertext.

[0270] (iv) Isolation control module 404.

[0271] The isolation control module 404 is used to receive a second access request sent by the target receiving object based on the second cryptographic credential during the period when the processing result corresponding to the first cryptographic material is pending confirmation, and to update the activation status in the single activation control information corresponding to the first sub-information ciphertext to the isolation status. The isolation status is used to suspend the decryption activation of the first cryptographic material and the generation of cryptographic material for the first sub-information ciphertext based on the second cryptographic credential. The first cryptographic credential and the second cryptographic credential correspond to different identity authentication paths.

[0272] (v) Continuation determination module 405.

[0273] The continuation determination module 405 is used to obtain the decryption result determination information corresponding to the first cryptographic material, and determine the second sub-information ciphertext corresponding to the second access request based on the decryption result determination information and the first sub-information ciphertext.

[0274] (vi) Status control module 406.

[0275] The status control module 406 is used to update the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext based on the second cryptographic credential, decryption result judgment information and the second sub-information ciphertext, and to generate the second cryptographic material and determine the information transmission status of the information to be sent based on the updated single activation control information corresponding to the second sub-information ciphertext.

[0276] In practice, each of the above units can be implemented as an independent entity or can be arbitrarily combined to be implemented as the same or several entities. For the specific implementation of each of the above units, please refer to the previous method embodiments, which will not be repeated here.

[0277] Therefore, the embodiments of this application can improve the accuracy of encrypted information transmission status control and reduce the possibility of inconsistency between the information transmission status and the actual decryption status of the receiving object.

[0278] Those skilled in the art will understand that all or part of the steps in the various methods of the above embodiments can be performed by instructions, or by instructions controlling related hardware. These instructions can be stored in a computer-readable storage medium and loaded and executed by a processor.

[0279] Therefore, embodiments of this application provide a computer-readable storage medium storing a plurality of instructions that can be loaded by a processor to execute steps in any of the information transmission status control methods based on cryptographic credentials provided in embodiments of this application.

[0280] The storage medium may include: read-only memory (ROM), random access memory (RAM), disk or optical disk, etc.

[0281] Since the instructions stored in the storage medium can execute the steps in any of the information transmission status control methods based on password credentials provided in the embodiments of this application, the beneficial effects that any of the information transmission status control methods based on password credentials provided in the embodiments of this application can achieve can be realized. For details, please refer to the previous embodiments, which will not be repeated here.

[0282] According to one aspect of this application, a computer program product or computer program is provided, comprising a computer program / instructions stored in a computer-readable storage medium. A processor of an electronic device reads the computer program / instructions from the computer-readable storage medium and executes the computer program / instructions, causing the electronic device to perform the method provided in the above-described embodiment regarding the information transmission status control method based on cryptographic credentials.

[0283] The above provides a detailed description of the information transmission status control method and system based on cryptographic credentials provided in the embodiments of this application. Specific examples have been used to illustrate the principles and implementation methods of this application. The description of the above embodiments is only for the purpose of helping to understand the method and core ideas of this application. At the same time, for those skilled in the art, there will be changes in the specific implementation methods and application scope based on the ideas of this application. Therefore, the content of this specification should not be construed as a limitation of this application.

Claims

1. A method for controlling the information transmission status based on password credentials, characterized in that, include: The system acquires the information to be sent and the target receiving object, and divides the information to be sent into multiple sub-information arranged in a preset order and encrypts them respectively to obtain information ciphertext composed of the ciphertext of each sub-information; Each of the sub-information ciphertexts is uniquely associated with the target receiving object, and the ciphertext is sent to the target receiving object. The system receives a first access request for a first sub-information ciphertext sent by the target receiving object based on a first cryptographic credential, and generates a first cryptographic material based on the first access request and the single activation control information corresponding to the first sub-information ciphertext, wherein the first sub-information ciphertext is a non-last-position sub-information ciphertext. During the period when the processing result corresponding to the first cryptographic material is pending confirmation, a second access request sent by the target receiving object based on the second cryptographic credential is received, and the activation status in the single activation control information corresponding to the first sub-information ciphertext is updated to the isolation status. The isolation status is used to suspend the decryption activation of the first cryptographic material and generate cryptographic material for the first sub-information ciphertext based on the second cryptographic credential. The first cryptographic credential and the second cryptographic credential correspond to different identity authentication paths. Obtaining the decryption result determination information corresponding to the first cryptographic material, and determining the second sub-information ciphertext corresponding to the second access request based on the decryption result determination information and the first sub-information ciphertext, including: Based on the decryption result determination information, the decryption capability formation result based on the first cryptographic material is determined; When the decryption capability is not formed, the first sub-information ciphertext is determined as the second sub-information ciphertext; When the decryption capability is formed, the next sub-information ciphertext arranged in the preset order after the first sub-information ciphertext will be determined as the second sub-information ciphertext. Based on the second cryptographic credential, the decryption result determination information, and the second sub-information ciphertext, the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext are updated, and the second cryptographic material is generated based on the updated single activation control information corresponding to the second sub-information ciphertext, and the information transmission status of the information to be sent is determined.

2. The method as described in claim 1, characterized in that, The decryption result determination information includes the material output result information, decryption activation processing result information, and material valid status information corresponding to the first cryptographic material; The step of determining the decryption capability formation result based on the first cryptographic material according to the decryption result determination information includes: When the material output result information indicates that the first cryptographic material has not been output, it is determined that the decryption capability formation result is not formed; When the material output result information indicates that the first cryptographic material has been output, and the decryption activation processing result information indicates that the decryption activation processing was successful, the decryption capability formation result is determined to be formed. When the material output result information indicates that the first cryptographic material has been output, and the decryption activation processing result information indicates that the decryption activation processing has failed, the decryption capability formation result is determined to be not formed; When the material output result information indicates that the first cryptographic material has been output, the decryption activation processing result information neither indicates that the decryption activation processing was successful nor failed, and the material validity status information indicates that the first cryptographic material has expired, the decryption capability formation result is determined to be not formed. When the material output result information indicates that the first cryptographic material has been output, the decryption activation process result information neither indicates that the decryption activation process was successful nor failed, and the material validity status information indicates that the first cryptographic material has not expired, the isolation state is maintained until the decryption capability is determined to be formed.

3. The method as described in claim 2, characterized in that, The single activation control information corresponding to the first sub-information ciphertext includes the identity authentication path, status credentials, activation eligibility status, and activation status, and the first cryptographic material includes the first status credentials. When the second sub-information ciphertext is the first sub-information ciphertext, the step of updating the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext based on the second cryptographic credential, the decryption result determination information, and the second sub-information ciphertext includes: When the material output result information indicates that the first cryptographic material has been output and the decryption capability formation result is not formed, the first status credential is matched with the status credential in the single activation control information corresponding to the first sub-information ciphertext, and the identity authentication path corresponding to the first cryptographic credential is matched with the identity authentication path in the single activation control information corresponding to the first sub-information ciphertext. When the first status credential matches the status credential in the single activation control information corresponding to the first sub-information ciphertext, the authentication path corresponding to the first password credential matches the authentication path in the single activation control information corresponding to the first sub-information ciphertext, and the activation qualification status in the single activation control information corresponding to the first sub-information ciphertext is an unconsumed status, the authentication path in the single activation control information corresponding to the first sub-information ciphertext is updated to the authentication path corresponding to the second password credential. A second status credential is generated based on the updated identity authentication path in the single activation control information corresponding to the first sub-information ciphertext, the first status credential, and the activation eligibility status in the single activation control information corresponding to the first sub-information ciphertext. The status credential in the single activation control information corresponding to the first sub-information ciphertext is then updated to the second status credential, which is different from the first status credential. After updating the identity authentication path and status credentials in the single activation control information corresponding to the first sub-information ciphertext, the activation status in the single activation control information corresponding to the first sub-information ciphertext is updated from the isolated status to the second path pending status.

4. The method as described in claim 3, characterized in that, Also includes: After the status credential in the single activation control information corresponding to the first sub-information ciphertext is updated to the second status credential, a decryption activation request sent by the target receiving object based on the first cryptographic material is received, the decryption activation request carrying the first status credential obtained from the first cryptographic material; The first status credential carried in the decryption activation request is matched with the status credential in the single activation control information corresponding to the first sub-information ciphertext. When the first status credential does not match the status credential in the single activation control information corresponding to the first sub-information ciphertext, the decryption activation request is rejected.

5. The method as described in claim 3, characterized in that, The step of generating the second cryptographic material based on the single activation control information corresponding to the updated second sub-information ciphertext includes: When the authentication path in the single activation control information corresponding to the second sub-information ciphertext is the authentication path corresponding to the second password credential, and the status credential in the single activation control information corresponding to the second sub-information ciphertext is the second status credential, a path migration credential is generated. The path migration credential includes path information before migration and path information after migration. The path information before migration includes the authentication path corresponding to the first password credential and the first status credential. The path information after migration includes the authentication path corresponding to the second password credential and the second status credential. Add the path migration credentials to the single activation control information corresponding to the second sub-information ciphertext; The second cryptographic material is generated based on the single activation control information corresponding to the second sub-information ciphertext containing the path migration credentials.

6. The method as described in claim 1, characterized in that, The target activation control information is the single activation control information corresponding to the second sub-information ciphertext. The target activation control information includes status credentials and activation eligibility status. The activation eligibility status includes unconsumed status, activation consumption final status, and withdrawal consumption final status. The steps of generating the second cryptographic material based on the single activation control information corresponding to the updated second sub-information ciphertext and determining the information transmission status of the information to be sent include: A second cryptographic material is generated based on the status credentials in the target activation control information, and the second cryptographic material is sent to the target receiving object; The system receives a decryption activation request sent by the target receiving object based on the second cryptographic material, and receives a withdrawal request for the second sub-information ciphertext. The decryption activation request and the withdrawal request each carry a status credential to be verified, and each status credential to be verified is the same as the status credential on which the second cryptographic material was generated. Based on the order in which the decryption activation request and the withdrawal request process the target activation control information, the request processed first is determined as the first target request, and the request processed later is determined as the second target request. When the unverified status credentials carried by the first target request match the status credentials in the target activation control information, and the activation eligibility status is unconsumed, the first target request is processed according to the request type of the first target request to obtain the target processing result. When the target processing result indicates that the first target request has been successfully processed, the target consumption final state is determined according to the request type of the first target request, wherein the decryption activation request corresponds to the activation consumption final state, and the withdrawal request corresponds to the withdrawal consumption final state; When the target processing result indicates that the first target request has been successfully processed, before outputting the target processing result, a target status credential different from the unverified status credential carried by the first target request is generated, and the status credential and activation eligibility status in the target activation control information are updated using the target status credential and the target consumption final state. After the first target request is successfully processed and the status credentials and activation eligibility status are updated, the information sending status of the information to be sent is determined according to the target processing result, and the target processing result is output. After the first target request is successfully processed, if the unverified status credentials carried by the second target request do not match the target status credentials, or if the activation eligibility status is not the unconsumed status, the second target request is rejected.

7. The method as described in claim 1, characterized in that, Each of the sub-information ciphertexts is decrypted and activated sequentially according to the preset order. The single activation control information corresponding to each of the sub-information ciphertexts includes activation eligibility status and activation status. The information sending status includes withdrawal boundary information. Determining the information transmission status of the information to be sent includes: Receive a withdrawal request for the information to be sent, and obtain the decryption result determination information corresponding to each of the sub-information ciphertexts; Based on the decryption result determination information, the decryption capability formation result corresponding to each of the sub-information ciphertexts is determined respectively; According to the preset order, the sub-information ciphertexts that are arranged consecutively from the first one and whose corresponding decryption capability formation results are all formed are determined as the confirmed decrypted sub-information ciphertext sequence, and the remaining sub-information ciphertexts are determined as the withdrawn sub-information ciphertext sequence. The activation status in the single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence is updated to the revocation status, and the corresponding activation eligibility status is updated to the revocation consumption final state. Based on the target receiving object, the confirmed decrypted sub-information ciphertext sequence, the withdrawn sub-information ciphertext sequence, and the updated single activation control information, a withdrawal boundary credential is generated. The withdrawal boundary information is generated based on the confirmed decrypted sub-information ciphertext sequence, the withdrawn sub-information ciphertext sequence, and the withdrawal boundary credential, and the withdrawal boundary information is added to the information transmission status of the information to be sent.

8. The method as described in claim 7, characterized in that, The single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence also includes status credentials; The step of updating the activation status of the single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence to the revocation status, and updating the corresponding activation eligibility status to the revocation consumption final state, includes: Based on the withdrawal request and the single activation control information corresponding to each sub-information ciphertext in the withdrawal sub-information ciphertext sequence, a withdrawal status credential different from the status credential before the update is generated. The status credentials in the single activation control information corresponding to each sub-information ciphertext in the revocation sub-information ciphertext sequence are updated to the corresponding revocation status credentials, and the corresponding activation status and activation eligibility status are updated to the revocation status and the revocation consumption final state, respectively. The step of generating withdrawal boundary credentials based on the target receiving object, the confirmed decrypted sub-information ciphertext sequence, the withdrawal sub-information ciphertext sequence, and the updated single activation control information includes: From the updated single activation control information, obtain the withdrawal status credential and withdrawal consumption final state corresponding to each sub-information ciphertext in the withdrawal sub-information ciphertext sequence; Based on the target receiving object, the confirmed decrypted sub-information ciphertext sequence, the withdrawn sub-information ciphertext sequence, each withdrawn status credential, and each withdrawn consumption final state, the withdrawn boundary credential is generated. The method further includes: Receive a target request for the target retraction of the sub-information ciphertext in the retraction sub-information ciphertext sequence. The target request is a cryptographic material generation request or a decryption activation request sent based on cryptographic material generated before retraction. The decryption activation request carries a pending verification status credential. When the target request is the cryptographic material generation request, and the activation eligibility status corresponding to the target withdrawn sub-information ciphertext is the withdrawal consumption final state, the cryptographic material generation request is rejected. When the target request is the decryption activation request, and the status credential to be verified does not match the retraction status credential corresponding to the target retraction sub-information ciphertext, the decryption activation request is rejected. When the target request is the decryption activation request, and the activation eligibility status corresponding to the target withdrawn sub-information ciphertext is the withdrawal consumption final state, the decryption activation request is rejected.

9. A password-based information transmission status control system, characterized in that, include: The information encryption module is used to acquire the information to be sent and the target receiving object, and to divide the information to be sent into multiple sub-information arranged in a preset order and encrypt them respectively to obtain information ciphertext composed of the ciphertext of each sub-information; The control information establishment module is used to establish a single activation control information that uniquely corresponds to each of the sub-information ciphertexts and the target receiving object, and send the information ciphertexts to the target receiving object. The first cryptographic material generation module is used to receive a first access request for a first sub-information ciphertext sent by the target receiving object based on a first cryptographic credential, and to generate first cryptographic material according to the first access request and the single activation control information corresponding to the first sub-information ciphertext, wherein the first sub-information ciphertext is a non-last-position sub-information ciphertext. An isolation control module is used to receive a second access request sent by the target receiving object based on a second cryptographic credential during the period when the processing result corresponding to the first cryptographic material is pending confirmation, and to update the activation status in the single activation control information corresponding to the first sub-information ciphertext to an isolation status. The isolation status is used to suspend the decryption activation of the first cryptographic material and the generation of cryptographic material for the first sub-information ciphertext based on the second cryptographic credential. The first cryptographic credential and the second cryptographic credential correspond to different identity authentication paths. The continuation determination module is used to obtain decryption result determination information corresponding to the first cryptographic material, and determine the second sub-information ciphertext corresponding to the second access request based on the decryption result determination information and the first sub-information ciphertext, including: Based on the decryption result determination information, the decryption capability formation result based on the first cryptographic material is determined; When the decryption capability is not formed, the first sub-information ciphertext is determined as the second sub-information ciphertext; When the decryption capability is formed, the next sub-information ciphertext arranged in the preset order after the first sub-information ciphertext will be determined as the second sub-information ciphertext. The status control module is used to update the single activation control information corresponding to the first sub-information ciphertext and the single activation control information corresponding to the second sub-information ciphertext according to the second cryptographic credential, the decryption result determination information and the second sub-information ciphertext, and to generate the second cryptographic material according to the updated single activation control information corresponding to the second sub-information ciphertext and determine the information transmission status of the information to be sent.

Images