Control method for enhancing using security of cryptographic machine by adopting dual-factor mandatory certification technology

Abstract

The invention discloses a control method for enhancing the using security of a cryptographic machine by adopting a dual-factor mandatory certification technology, and relates to the technical field of information security and cryptology. The control method comprises the following steps that: (1) a manager sets a running security strategy of the cryptographic machine; (2) the manager starts the cryptographic machine; (3) after being started, the cryptographic machine enters a function authority management state; (4) if the cryptographic machine is used at the first time, the cryptographic machine enters a personalized flow of the dual-factor mandatory certification technology; and (5) if the cryptographic machine is not used at the first time, the cryptographic machine enters a security service starting flow of the dual-factor mandatory certification technology. The method has the advantages that during actual application, the security risk caused by a reason that a non-authorized user operates the cryptographic machine is completely avoided, so that the overall application security of the cryptographic machine is improved; and furthermore, the authority of the manager is separated, so that problem that safety defect is brought to system management is avoided, and the management security of the cryptographic machine is improved.

Description

technical field [0001] The invention relates to the technical field of information security ciphers, in particular to a control method for enhancing the use security of a cipher machine by adopting a two-factor compulsory authentication technology. Background technique [0002] Cryptography technology is the basic technology of information security, and cipher machine is the foundation of secure application of cryptography technology and the core of information security. With the rapid and comprehensive development of my country's information industry, cryptographic equipment, as the core of information security, has been providing secure cryptographic technology for the development of information industry and modern service industry, but it is also facing more and more stringent security requirements. [0003] In information security, the safe operation and maintenance management of cipher machines is a very important part of the application process of cipher machines. Thr...

AI Technical Summary

Problems solved by technology

[0004] Usually, when the cipher machine is running in the production environment, there are complete log records, monitoring and other protection technologies to prevent illegal tampering and stealing of sensitive information stored in the cipher machine; however, when the cipher machine is powered off and stops running, real-time security monitoring will cannot work; therefore, illegal users may illegally use the cipher machine by stopping the operation of the cipher machine, thereby bypassing the real-time security monitoring mechanism of the cipher machine

Images