Direct selling bank hybrid model full-message encryption system and method

Abstract

The invention discloses a direct selling bank hybrid model full-message encryption system and method. The system comprises a client, an HTML5 module and an application server. The system is characterized by that the client comprises an RSA public key obtaining module, an AES key generation module, a digital envelope generation module, a random encryption module, a data digest generation module and a data sending module. The application server generates a key pair through utilization of a rivest-shamir-adleman (RSA). The client carries out secondary encryption on a key of an advanced encryption standard (AES) according to a received public key, thereby generating a digital envelope. The application server verifies and decrypts a received ciphertext to obtain message data of the client. The system and the method have the advantages that single-time single-key mode is employed in an encryption process; the secondary encryption is carried out through utilization of the public key, so the security of the ciphertext is further improved; whether the ciphertext is tampered or not in a transmission process can be verified according to a comparison process of the data digest; and the transmission security of financial information is omni-directionally improved in production and transmission processes.

Description

technical field [0001] The invention relates to the technical field of computer application security, in particular to a mixed-mode full-message encryption system and method for direct selling banks. Background technique [0002] As the Internet is more and more widely used and the number of APPs is increasing, security issues have become the focus of people's increasing attention. Because the financial industry is more sensitive to data, it also pays more attention to data encryption. The financial industry has a lot of data to be transmitted on the network, including from the front-end to the host, from the self-service terminal to the front-end, etc. These data are transmitted on the network for necessary interaction. The existing encryption methods are relatively simple, and there is a certain possibility of being decrypted, resulting in the leakage of user information and causing losses to varying degrees. [0003] There are many existing encryption algorithms, but th...

AI Technical Summary

Problems solved by technology

For the existing encryption methods are relatively simple, there is a certain possibility of being decrypted, resulting in the leakage of user information and causing losses of varying degrees

[0003] There are many existing encryption algorithms, but the algorithms are relatively simple, and to a certain extent, only focus on the confidentiality of the client or the transmission process, and the encryption process of the whole process of information is not perfect enough

Images