Key agreement method and device

Abstract

The invention discloses a secret key negotiation method and a secret key negotiation device. The secret key negotiation method comprises the steps of: generating a first random number, encrypting the first random number and identification information of terminal equipment by using a first public key of a cloud server to generate a first ciphertext; sending a secret key negotiation request containing the first ciphertext and a second public key of the terminal equipment to the cloud server; receiving a secret key negotiation response containing a second ciphertext sent after the cloud server verifies that the terminal equipment is legal and a session key containing the first random number is encrypted by using the second public key; decrypting the second ciphertext by using a second private key, encrypting a first character string which negotiates with the cloud server in advance by using the session key when the first random number is obtained, and sending a secret key confirmation response containing a third ciphertext to the cloud server. The secret key negotiation method can complete the bidirectional identity authentication of the terminal equipment and the cloud server, establishes reliable and secure connection, reduces cost, improves security of data transmission, and is high in efficiency.

Description

technical field [0001] The present application relates to the technical field of information security, and in particular to a key agreement method and device. Background technique [0002] Generally, SSL (Secure Sockets Layer, Secure Sockets Layer), as a security protocol that provides security and data integrity for network communication, is often used to confirm the identities of both parties when the terminal device communicates with the relevant server, and for Avoid data leakage, encryption of communication data, etc. [0003] However, in the above method of using the SSL protocol for security services, due to the large memory usage of SSL, most terminal devices cannot run SSL, and in the process of performing SSL services, a third-party CA company is required, and the operation is too complicated. And only the server can be authenticated, but the terminal device cannot be authenticated, so the security is low. Contents of the invention [0004] The purpose of this ...

AI Technical Summary

Problems solved by technology

[0003] However, in the above method of using the SSL protocol for security services, due to the large memory usage of SSL, most terminal devices cannot run SSL, and SSL needs to rely on a third-party CA company during the service process, and the operation is too complicated

And only the server can be authenticated, but the terminal device cannot be authenticated, so the security is low

Images