Encryption method and equipment applied to key security

Abstract

The invention aims at providing an encryption method and encryption equipment applied to key security. The method comprises the steps of acquiring a unique identification character string of a mobile application from service equipment, and generating a data key of the mobile application; and then statically encrypting the data key according to an encryption algorithm and macro definition, and dynamically encrypting the data key according to a preset hash function and acquired MAC addresses and user passwords of user equipment. According to the method and the equipment provided by the invention, the data key of the mobile application is statically encrypted, which ensures that the data key of the mobile application can be only acquired the application including a macro definition encryption process, and thus application binding of the data key is achieved; the data key of the mobile application is dynamically encrypted, so that user equipment binding of the data key is achieved, even the MAC addresses of the user equipment are tampered to be two pieces of consistent user equipment with the inconsistent user passwords, the data key can still be not cracked and thus business data in the mobile application canoe be acquired, and user perception of the data key can be achieved.

Description

technical field [0001] The present application relates to the computer field, and in particular to an encryption technology for key security. Background technique [0002] The attack model of the mobile terminal key is divided into three types: malware, which applies for all available system permissions, such as sending text messages, making calls, reading contacts, obtaining geographical location and other private information; jailbreak attack, obtaining the highest authority of the device, scanning File system, to obtain system sensitive data; monitor root attacks, monitor user keyboard input, and obtain input content. [0003] At present, there are mainly the following types of key protection methods for mobile terminals: First, ARM TrustZone technology divides embedded devices into two independent operating environments from the design of system bus, processor, etc., and Normal Word is responsible for Android OS ( Android system), Secure word is responsible for handling...

AI Technical Summary

Problems solved by technology

[0006] The purpose of this application is to provide an encryption method and device for key security to solve the key security problem at the user equipment end

Images