Cloud key management method and system based on intelligent IC card security authentication

Abstract

The invention discloses a cloud key management method and system based on intelligent IC card security certification, and the method comprises the steps: generating and storing a root key group which comprises an export key EPKn, a protection key PPKn and a transmission key TPKn; for a registered user, receiving a card making application from the user and loading a random number SRDn; checking the identity of the registered user applying for card making, generating corresponding encrypted data according to the service initiated by the registered user after the checking is passed, and issuing the encrypted data to the user; and making the intelligent IC card by using the issued encrypted data. A hardware encryption machine is abandoned, the cost is reduced, cloud system deployment, access, operation and maintenance are rapid and low in cost, data are highly concentrated and shared, and an enterprise can clearly know the card making condition. And large-scale popularization and use are facilitated.

Description

technical field [0001] The invention belongs to the technical field of encryption, and in particular relates to a cloud key management method and system based on smart IC card security authentication. Background technique [0002] At present, smart IC cards have been widely popularized and used in various industries, such as: refueling, gas refueling, medical care, transportation, social security cards, bank cards, ETC, supermarkets and other industries. However, for some small and medium-sized enterprises, it is difficult and costly to build their own key management system. If they do not build their own key management system, there will be problems such as long card production cycle or high cost of bulk purchase card production. The verification of smart IC cards is offline verification. In order to respond quickly and meet customer needs and improve the safety of smart IC cards, this puts forward new requirements for the low-cost deployment of the key management system an...

AI Technical Summary

Problems solved by technology

[0003] There are various ways of using smart IC card key management systems in China, such as: banks basically have their own private key management systems, and provinces and municipalities have regional key management system authority; similarly, PetroChina, Sinopec, and CNOOC are almost similar ;Large enterprises use hardware encryption machines for key management in the center of the key management system, and the cost is relatively high. The requirements for the network environment of the enterprise center are high, and the implementation cost is high.

At present, most small and medium-sized enterprises adopt centralized card production and offline key management. The card production cycle is long and insecure.

Images