Secret key management method, device and system

Abstract

The invention discloses a secret key management method, device and system, and belongs to the technical field of information security. The method comprises the steps that a client side generates a temporary secret key, and the temporary secret key is encrypted by using a public key provided by a background server so that a first cryptograph is obtained and transmitted to the background server; the background server applies a private key corresponding to the public key to decrypt the first cryptograph so as to obtain the temporary secret key, a session key and a key identifier are acquired, and the session key and the key identifier are encrypted by using the temporary secret key so that a second cryptograph is obtained and transmitted to the client side; and the client side applies the temporary secret key to decrypt the second cryptograph so as to obtain the session key and the key identifier, wherein the key identifier is used for identifying the session key, and the session key is used for encrypting the session data. The management complexity of the background server for the secret key can be simplified under the premise of considering the security of the secret key and the efficiency of encryption and decryption so that the processing and storage resources of the background server can be saved.

Description

Technical field [0001] The present invention relates to the technical field of information security, in particular to a key management method, device and system. Background technique [0002] Currently, data encryption methods include symmetric encryption (Symmetric Cryptography) and asymmetric encryption (Asymmetric Cryptography). [0003] Symmetric encryption is a fast and simple encryption method. The encryption (encryption) and decryption (decryption) use the same secret key. Symmetric encryption usually uses a relatively small key, generally less than 256 bits (bits). Because the larger the key, the stronger the encryption, but the slower the encryption and decryption process. The size of the key needs to weigh security and efficiency. Typically, AES (Advanced Encryption Standard, Advanced Encryption Standard) adopts a symmetric encryption method, which is also called Rijndael encryption in cryptography. In 256Byte (byte) plaintext, the estimated speed is 900,000 times per...

AI Technical Summary

Problems solved by technology

[0007] In order to solve the problem in the prior art that the server needs to consume a lot of resources to manage the symmetric key, the embodiment of the present invention provides a key management method, device and system

Images