TWI396425B - Combining time and place key encryption and decryption system and method - Google Patents

Description

Key encryption and decryption system and method combining time and place

The invention belongs to a key encryption and decryption system and method combining time and place, in particular to a feature that uses GPS to provide three-dimensional positioning information and standard time cannot be faked and falsified, and the public key smart card is used for high security. Sexual, high-efficiency encryption and decryption system ensures the confidentiality of files and can perform key recovery operations when necessary. It can solve the problem that important files cannot be decrypted when the private key is lost and the security of file portability can be avoided. Concerned.

Before the case, there is no exact technology to achieve the effect of such security encryption and decryption. In the past, only the password selected by the user was used as the encryption and decryption key, which is easy to be cracked under the dictionary attack method, and when the user forgets the password. At the time, all the confidential documents could not be unlocked, which was similar to the loss of the archives. Since many important files require a high-security security measure and avoid the security concerns of file portability, when the user's key or password is lost, a safer and more reliable mechanism is needed. Key recovery work to ensure the confidentiality and availability of important files.

It can be seen that there are still many shortcomings in the above-mentioned methods of use. It is not a good design and needs to be improved. In view of the shortcomings derived from the above-mentioned conventional methods, the inventor of the present invention has improved and innovated, and after years of painstaking research, he finally succeeded in researching and developing the key encryption and decryption system and method combining the time and place.

The object of the present invention is to provide a key encryption and decryption system and method combining time and place, which uses a cryptographically high security level algorithm combined with GPS provided three-dimensional positioning information and standard time, so that confidential files cannot be passed through other locations. It is not allowed to transmit or decrypt in time, and therefore there is no information security concern.

The key encryption and decryption system and method for achieving the combined purpose and time of the above invention aims to ensure high-security and high-confidence encryption and decryption management operations by using the public key smart card combined with the positioning information provided by the GPS and the standard time. The confidentiality of the file. When the user's password or private key is lost, after the appropriate authentication and authorization and confirmation of the GPS three-dimensional positioning coordinates, if the standard time of the GPS is within the allowable time, the key recovery server can perform the recovery of the symmetric key. It can solve the problem that important files cannot be decrypted when the password or key is lost, and the security concerns caused by avoiding file portability. The present invention adopts a cryptographically high security level algorithm, such as RSA 1024-bit public key and AES 256-bit symmetric key, which can effectively enhance the confidentiality of the file. In addition, the present invention utilizes the three-dimensional positioning information and standard time provided by the GPS, so that the confidential file can be free from suspicion, peek and denial of transmission. When the user loses his personal password or private key, the present invention can restore the positioning information and standard time provided by the server and the GPS through the key, and after the appropriate authentication and authorization and confirmation of the GPS three-dimensional positioning coordinates, within the allowable time, The restoration of the symmetric key does not result in the loss of the user's important files. The invention limits the user's key recovery information by adding its spatial positioning information in a specific time, so that the confidential file cannot be transmitted or decrypted through other locations or in an unallowable time, and thus there is no information security. doubt.

In order to facilitate the review committee to further understand the structure, use and characteristics of the present invention, the inventors have a better embodiment and a detailed description of the following: A key encryption and decryption system and method combining time and place may include: a file encryption process, which can utilize a public key smart card combined with GPS positioning information and standard time for high security and high privacy encryption management. Job; a file decryption process, which can use the public key smart card combined with GPS positioning information and standard time for high security and high privacy decryption management operations; a key recovery process, can use the public key smart card combined with GPS Provides location information and standard time for key recovery; a digital envelope workflow that uses a public key smart card combined with GPS-provided positioning information and standard time for digital envelope-based security measures to prevent tampering and peeping Or deny production and other issues.

Please refer to FIG. 1 , which is a schematic diagram of a key encryption and decryption system combined with time and place according to the present invention. The system includes: an encryption terminal 1 and a decryption terminal 2; a public key smart card 3, which stores a key pair and can be Execute its signature, encryption and decryption operation; a smart card control interface 4, providing the encryption terminal to read the public key of the public key smart card 3, and the decryption end uses the private key of the public key smart card 3 for decryption operation A cryptographic module 5, connected to the encryption and decryption end, can combine the GPS locating coordinates with the standard time to disclose the public key, the symmetric key and the voucher parsing operation, thereby performing the key encryption and decryption, the text encryption and decryption, the digital signature verification, and the like. Key cryptography operation; client and server module 6 of a key recovery operation can perform key recovery operation according to the client using a legal public key smart card to perform key recovery; a digital envelope codec verification mode Group 7, connected to the encryption and decryption end, to perform the receiver public key access, digital envelope signature encoding, digital envelope decoding verification, file decryption and the like.

The invention utilizes the principle of cryptography to implement a key encryption and decryption system combined with time and place, which has the following features:

a. Use the RSA smart card as a private key vehicle to perform RSA operations;

b. Adopt AES algorithm for high security and high efficiency encryption and decryption operations;

c. The client can use the legal RSA smart card to apply for key recovery, the key recovery server is properly authorized, and the location in the information is consistent with the three-dimensional positioning coordinates provided by the GPS when the original ciphertext file is produced. And if the time included in the application information is the allowable time, the key recovery operation is performed;

d. Use a more rigorous key encryption and decryption method, combined with the positioning coordinates and standard time provided by GPS, the location and allowable time of the non-original ciphertext file cannot be verified by the key to restore the authorization of the server;

e. Support digital envelope-style signature encryption to protect transmission security.

Please refer to FIG. 2 , which is a flowchart of an encryption operation applied to a file security system according to the present invention, and the steps thereof include:

2a. Read the document and read and verify the key recovery server certificate;

2b. Read the public key of the RSA smart card and the public key of the user, and terminate the execution if the reading is incorrect;

2c. Encrypt the document with the random key of the AES algorithm, and restore the public key of the server and the GPS three-dimensional positioning coordinates and the standard time encryption package key recovery information, and then encrypt the key information with the user's public key. ;

2d. After the encryption is completed, the ciphertext file is written.

The completed ciphertext file has the following features:

a. ciphertext with AES algorithm;

b. Encrypt the key with the RSA key (encrypted by the user's public key);

c. Restore the information ciphertext for the key (to recover the public key of the server and the GPS three-dimensional positioning coordinates and standard time encryption).

The key recovery ciphertext format of the item c includes:

a. AES random key;

b. ciphertext attribute information;

c. User ID information;

d. GPS three-dimensional positioning coordinates and standard time.

Please refer to FIG. 3, which is a flowchart of a decryption operation applied to a file security system according to the present invention, and the steps thereof include:

3a. The decryption end captures the current GPS three-dimensional positioning coordinates and the local time, and checks it with the coordinate of the key recovery information format, and the local time is within the allowed time range, otherwise the execution is terminated;

3b. Read the key encryption key information of the secret document, and input the PIN code to obtain the private key authority of the RSA smart card;

3c. Call the RSA smart card function, decrypt the user's private key and retrieve the random key to unlock the AES ciphertext;

3d. Write the plaintext file after the decryption is completed.

Please refer to FIG. 4, which is a flowchart of the key recovery operation of the present invention, and the steps thereof include:

4a. Reading the key recovery information of the secret document;

4b. Enter the PIN code to obtain the privacy key of the RSA smart card; and read the user in the RSA smart card and read the GPS three-dimensional positioning coordinates and standard time;

4c. Encapsulate the application information through the key module of the key recovery, and call the RSA smart card function to sign and upload to the key recovery server; the format of the application information may include:

(1) Key recovery information ciphertext;

(2) the applicant's public key;

(3) User ID information;

(4) GPS three-dimensional positioning coordinates and standard time; and

(5) Digital signature.

4d. The key recovery server first parses the application information, and finds the relative certificate according to the user 1D information to verify the correctness of the signature;

4e. After the signature verification is correct, take out the key recovery information and call the hardware high-speed security device, use its private key to unlock each key recovery information, and then compare the user 1D and recovery information in the application information. Whether the IDs in the IDs are consistent, and then verify whether the GPS three-dimensional positioning coordinates in the application information match the location of the key recovery information format, and the standard time is within the allowed time range to confirm the legal application;

4f. After confirming that the application is legal, use the user public key encryption in the application information to create a new key encryption key information, and then package it back to the client;

4g. After the client parses the new key encryption key information, it updates the key encryption key portion of the file that could not be decrypted in order, thus completing the key recovery operation. After that, the user performs the file decryption operation according to the decryption process shown in FIG.

Please refer to FIG. 5 , which is a flowchart of the operation of the digital envelope of the present invention, and the steps thereof are similar to the encryption and decryption processes described in FIG. 2 and FIG. 3 , and include:

5a. Read the document and read and verify the key recovery server certificate;

5b. Select the recipient's credentials and read the public key;

5c. Add the signature according to the user option, and encrypt the document and the encryption package key recovery information and the key encryption key information by using the random key of the AES algorithm;

5d. After the encryption is completed, the ciphertext file is written and transmitted to the receiver;

5e. The receiver decrypts in the decryption process of Figure 3;

5f. After successful decryption, if there is a signature, verify the correctness of the signature;

5g. The signature verification ends correctly, otherwise the execution is terminated.

The invention provides a key encryption and decryption system and method combining time and place, and has the following advantages when compared with other conventional technologies:

a. Using public key smart cards and cryptographically high security level algorithms, such as RSA 1024-bit public key and AES 256-bit symmetric key, can greatly improve the confidentiality of the file.

b. When the user loses his personal private key, the present invention can be restored by the key recovery server after the appropriate authorization authentication and confirmation of the GPS three-dimensional positioning coordinates, and the symmetric key is restored within the allowable time, so as not to be lost. Important file of the person.

c. The present invention supports digital envelope-type security measures to prevent tampering, peek or denial of production.

d. The invention is limited to a specific time, plus its spatial positioning information, to provide a user key recovery function, so that confidential files cannot be transmitted or decrypted through other locations or in an unallowed time, and thus there is no information security. Concerns.

The detailed description of the preferred embodiments of the present invention is intended to be limited to the scope of the invention, and is not intended to limit the scope of the invention. The patent scope of this case.

To sum up, this case is not only innovative in terms of technical thinking, but also able to enhance the above-mentioned multiple functions compared with the conventional methods. It should fully comply with the statutory invention patent requirements of novelty and progressiveness, and apply for it according to law. This invention patent application, in order to invent invention, to the sense of virtue.

1. . . Encrypted end

2. . . Encrypted end

3. . . Smart card

4. . . Zhici card control interface

5. . . Password module

6. . . Client and server module for key recovery operation

7. . . Digital Envelope Codec Verification Module

The following is a detailed description of a preferred embodiment of the present invention and its accompanying drawings, and the technical contents of the present invention and its functions will be further understood; the drawings relating to the embodiment are:

FIG. 1 is a schematic structural diagram of a key encryption and decryption system combining time and place according to the present invention.

Figure 2 is a flow chart of the encryption operation applied to the file security system of the present invention.

Figure 3 is a flow chart of the decryption operation applied to the file security system of the present invention.

Figure 4 is a flow chart of the key recovery operation of the present invention.

Figure 5 is a flow chart of the digital envelope operation of the present invention.

1. . . Encrypted end

2. . . Encrypted end

3. . . Smart card

4. . . Zhici card control interface

5. . . Password module

6. . . Client and server module for key recovery operation

7. . . Digital Envelope Codec Verification Module

Claims (9)

A key encryption and decryption system combining time and place uses the public key smart card and GPS three-dimensional positioning information and standard time to perform encryption and decryption management operations to ensure the confidentiality and usability of the file, mainly including: an encryption terminal; a decryption end; a public key smart card, storing the key pair and performing its signature, encryption and decryption operations; a public key smart card control interface, providing an encryption terminal to read the public key of the public key smart card The decryption end uses the private key of the public key smart card to perform the decryption operation; a password module connects the encryption and decryption end, and combines the GPS positioning coordinate with the standard time to disclose the public key, the symmetric key and the credential analysis operation. By performing key cryptography operations such as key encryption and decryption, text encryption and decryption, digital signature verification, etc.; client and server module of a key recovery operation can apply for a legal public key smart card according to the client. Key recovery, key recovery operation; a digital envelope encoding and decoding operation module, connected to the encryption and decryption end, to perform receiver public key access, digital letter Signature encoding, decoding digital envelope verification, decryption program files. A key encryption and decryption method combining time and place, comprising: a file encryption process, which can use a public key smart card combined with GPS positioning information and standard time for high security and high privacy encryption management operations; The decryption process can use the public key smart card to combine the positioning information provided by GPS with the standard time for high security and high secret decryption management operations; a key recovery process can use the public key smart card combined with the positioning information provided by GPS Key recovery operation with standard time; and a digital envelope operation process, which can prevent tampering, peeping or denying production by using the public key smart card combined with GPS positioning information and standard time for digital envelope security measures. And other issues. The key encryption and decryption method of combining time and place as described in claim 2, wherein the step of the file encryption process may include: a. reading the document, and reading and verifying the key recovery server certificate; b. Read the public key of the RSA smart card and the public key of the user, and terminate the execution if the reading error occurs; c. encrypt the document with the random key of the AES algorithm, and restore the server with the key Key and GPS three-dimensional positioning coordinates and standard time encryption package key recovery information, and then encrypt the key information with the user's public key; d. After the encryption is completed, the ciphertext file is written. The method for encrypting and decrypting a combination time and place as described in claim 3, wherein the ciphertext file may include the following features: a. ciphertext with AES algorithm; b. cryptocard with RSA key The key is encrypted by the user's public key; c. The key is used to restore the information ciphertext, that is, the public key of the server is restored by the key and the GPS three-dimensional positioning coordinates are encrypted with the standard time. The key encryption and decryption method for combining time and place as described in claim 4, wherein the key recovery information ciphertext format may include: a. AES random key; b. ciphertext attribute information; c. ID information; d. GPS three-dimensional positioning coordinates and standard time. The method for encrypting and decrypting the time and place of the combination as described in claim 2, wherein the step of the file decryption process may include: a. the decryption end captures the current GPS three-dimensional positioning coordinates and local time, and compares it with gold. After the coordinates of the key recovery information format are verified, and the local time is within the allowed time range, otherwise the execution is terminated; b. The key encryption key information of the confidential document is read; c. The PIN code is input to obtain the RSA smart card. Private key authority; d. Call RSA smart card function, decrypt the user's private key to retrieve the random key, and unlock the AES ciphertext; e. Write the plaintext file after decryption is completed. The key encryption and decryption method of combining time and place as described in claim 2, wherein the step of the key restoration process may include: a. reading key recovery information of the secret document; b. inputting the PIN code to Obtain the privacy key of the RSA smart card; read the user in the RSA smart card and read the GPS three-dimensional positioning coordinates and standard time; c. encapsulate the application information through the key module of the key recovery, and call The RSA smart card function is signed and uploaded to the key recovery server; d. The key recovery server finds the relative certificate according to the user 1D information to verify the correctness of the signature; e. After the signature verification is correct From the key recovery information and call the hardware high-speed security device, use its private key to unlock each key recovery information, and then compare the ID of the user 1D and the recovery information in the application information, and then Verify that the GPS three-dimensional positioning coordinates in the application information match the location of the key recovery information format, and the standard time is within the allowed time range to confirm the legal application; f. After confirming that the application is legal, use the application The user's public key encryption in the news is made into a new key encryption key information, and then encapsulated and transmitted back to the client; g. After the client parses the new key encryption key information, the original can not be decrypted. The file is updated with the key of the key encryption key, and the file decryption operation is performed according to the decryption process. The key encryption and decryption method of combining time and place as described in claim 7 of the patent application scope, wherein the format of the key restoration application information may include: a. key recovery information ciphertext; b. applicant public key ; c. user ID information; d. GPS three-dimensional positioning coordinates and standard time; and e. digital signature. The key encryption and decryption method of combining time and place as described in claim 2, wherein the step of the digital envelope operation process may include: a. reading the document and reading and verifying the key recovery server certificate ;b. Select the recipient's credentials and read the public key; c. Add the signature according to the user option, and encrypt the document and the encryption package key recovery information and key encryption with the random key of the AES algorithm. Key information; d. After the encryption is completed, the ciphertext file is written and transmitted to the receiver; e. The receiver decrypts in the decryption process; f. After the decryption is successful, if the signature is signed, the signature is verified correctly. Sex; g. When the signature verification is correct, it ends, otherwise the execution is terminated.