Management method, apparatus and system for remotely destroying private key

Abstract

The invention provides a management method, apparatus and system for remotely destroying a private key. A client stores a first part of the private key dc, a server side stores a second part of the private key ds, and an electronic signature is generated after cooperative calculation on the first part of the private key and the second part of the private key. The method comprises the following steps: sending a digest e and a random elliptic curve point Q by the client to the server side; receiving a first intermediate signature ts of the server side; and calculating a second intermediate signature tc through the ts and the dc, and sending the tc to the server side so that the server side can calculate a second part of the signature s and verify the e, if verification succeeds, a signature result (r, s) is sent to an authentication end for verification, and if the verification fails, the second part of the private key ds stored at the server side is destroyed. According to the invention, through the design of a key system for storing partial private keys respectively by using a client and a trusted central server and through combination with the technical means of dynamic key destruction,hacker attacks such as client-side single-point attacks, exhaustive trial and error attacks and the like are avoided.

Description

technical field [0001] The invention relates to the technical field of mobile security, in particular to a management method, device and system for remotely destroying private keys. Background technique [0002] A digital certificate refers to an electronic signature authentication certificate that complies with the "Electronic Signature Law of the People's Republic of China" and can verify that the signer and the electronic signature data have a reliable relationship in online electronic activities such as online finance, e-government or e-commerce. Digital certificates are based on asymmetric cryptography, including public keys and private keys. The public key is called the public key, and the private key is called the private key. [0003] In the prior art, the digital certificate private key storage methods mainly include the following three methods: [0004] One is a soft certificate, also known as a file certificate, and the private key of the user's digital certifica...

AI Technical Summary

Problems solved by technology

[0007] In the process of research, the inventor found that the above three methods have their own disadvantages: the soft certificate is easy to use but the risk level of the digital certificate private key being stolen is relatively high, especially for untrusted running and storage environments such as mobile phones, attackers The private key of the user's digital certificate can be stolen by means of memory tracking and unauthorized access to local files; hard certificates are protected by hardware packaging technology and have high security, but there are problems such as inconvenient use and poor compatibility; The private key of the certificate is hosted on the cloud, and the private key is isolated and protected by the cloud, but it is difficult to ensure that the digital signature is operated by the user himself, and there is a business risk that the cloud can forge the digital signature

[0008] However, although hard certificates can ensure the safe generation and use of signature private keys, their hardware cost and inconvenience have been criticized, especially in today's rapid development of the mobile Internet, end users need to be easy to use and universally applicable Security software that can satisfy security without losing convenience

In this method, the calculation of the two parameters r and s of the signature is completed by two parties, so that each party does not have the complete signature verification data, because the data received by communication is not calculated by itself, so the data is not credible and graspable Signature verification data has no management (signature verification and destruction) method, so there is a barrel risk, that is, there is a possibility of tampering in communication, and there are security risks of counterfeiting and exhaustive attacks

Images