Multi-KMC key recovery method

Abstract

The invention discloses a multi-KMC key recovery method. The method is realized through two parts including key backup and key recovery, wherein the key backup comprises the following steps of making a third-party CA center issue a digital certificate to each participator, utilizing a user encryption terminal to generate random numbers, utilizes a threshold algorithm to carry out partitioning on a key according to the set KMC threshold number, signing the divided random numbers, utilizing a public key of each KMC to encrypt and uploading to the KMC to carry out key backup; the key recovery comprises the following steps of making a key request for the corresponding KMC according to the KMC threshold number and recovering the key from the user encryption terminal. The method has the following characteristics that 1) the generation intensity of the random numbers is guaranteed and the operation complexity is simplified; 2) even if the part of KMC is broken, the key cannot be leaked, and even if the part of KMC is destroyed, the recovery of the backup key can be also guaranteed; and 3) the security of the encryption key is guaranteed and the key transmission security is also guaranteed.

Description

Technical field [0001] The invention relates to the technical field of information security, in particular to a method for restoring multiple KMC keys. Background technique [0002] In recent years, as information security incidents have shown an increasing trend year by year, people have paid more and more attention to network information security issues. Network security incidents are frequent. Cyber ​​attacks have risen from personal incidents such as information leakage, fund theft, telecommunications fraud and phishing websites to security incidents in the whole society, which will affect our lives, government services, social stability and even social security. In today’s era of big data, in order to manage and use big data well, the premise must be to ensure the security of big data. This requires a credible computing environment, and the core of a credible computing environment is to ensure participation Party’s key is safe. [0003] In a trusted computing environment, th...

AI Technical Summary

Problems solved by technology

[0004] With the development of network attack technology, a single KMC can no longer meet the demand. KMC may be compromised, and there is a risk of key leakage. On the other hand, social engineering attacks and other attacks against insiders will also cause KMC to be compromised.

Images