WO2014187208A1

WO2014187208A1 - Method and system for backing up private key in electronic signature token

Info

Publication number: WO2014187208A1
Application number: PCT/CN2014/075747
Authority: WO
Inventors: 李东声
Original assignee: 天地融科技股份有限公司
Priority date: 2013-05-23
Filing date: 2014-04-18
Publication date: 2014-11-27
Also published as: CN103281188B; CN103281188A

Abstract

Provided are a method and system for backing up the private key of an electronic signature token, the method comprising the following steps: a first electronic signature token and a second electronic signature token acquire a matching code (101); the first electronic signature token encrypts the matching code, and transmits a private key backup request data packet comprising the encrypted matching code and a first signature issued by a Certificate Authority (CA) server to the first electronic signature token (102); after receiving the private key backup request data packet, the second electronic signature token authenticates the first signature of the first electronic signature token (103); if the first signature passes authentication, then the second electronic signature token decrypts the matching code in the private key backup request data packet, and utilizes the matching code obtained through decryption as a matching code to be authenticated (104); the second electronic signature token compares the to-be-authenticated matching code with a locally obtained matching code (105); if the matching code to be authenticated is the same as the locally obtained matching code, then the second electronic signature token transmits a private key backup response data packet comprising the private key information (106); and the first electronic signature token acquires the private key after obtaining the private key backup response data packet (107).

Description

Method and system for backing up private key in electronic signature token

Technical field

The present invention relates to the field of electronic technologies, and in particular, to a method and system for backing up a private key in an electronic signature token. Background technique

In the prior art, the user's private key and the digital certificate are stored in the electronic signature token, and the user identity is authenticated by using the public key algorithm built into the USB Key. In the existing electronic signature token, the user private key cannot be read theoretically in any way to ensure the security of user authentication. However, once the electronic signature token is lost, the original private key cannot be obtained, and the user must re-apply the electronic signature token. The key information such as the private key and the serial number must be redistributed and acquired, and the electronic signature token needs to be triggered. The update process increases the maintenance cost of the electronic signature token. Therefore, how to efficiently maintain electronic signature tokens is an urgent problem to be solved. Summary of the invention

The present invention provides a method and system for backing up a private key in an electronic signature token, aiming to solve one of the above problems. In order to achieve the above object, the technical solution of the present invention is specifically implemented as follows:

A method for backing up a private key in an electronic signature token, comprising: a first electronic signature token and a second electronic signature token acquiring a matching code; the first electronic signature token encrypting the matching code, and performing a sending private key backup a process of requesting a data packet, wherein the private key backup request data packet includes an encrypted matching code and a first signature issued by the CA server for the first electronic signature token; and the second electronic signature token receives the private key backup request data After the packet, the second electronic signature token verifies the first signature of the first electronic signature token; if the verification is passed, the second electronic signature token decrypts the encrypted matching code, and the decrypted matching code is treated as Verifying the matching code; the second electronic signature token compares the to-be-verified matching code with the locally obtained matching code; if the to-be-verified matching code is the same as the locally obtained matching code, the second electronic signature token performs the sending of the private key The process of backing up the response packet, wherein the private key backup response packet includes private key information; the first electronic signature token is obtained After the backup key response packet, performing the private key acquisition process.

The first electronic signature token encrypts the matching code, including: the first electronic signature token encrypts the matching code by using a key in the first signature to obtain an encrypted matching code; and the second electronic signature token pair The encrypted matching code is decrypted, including:

The second electronic signature token obtains the key from the private key backup request packet, and decrypts the encrypted matching code by using the key. The first electronic signature token performs a process of sending a private key backup request data packet, including: the first electronic signature token signing the private key backup request data packet, and sending the signature processed private key backup request data packet; Before the second electronic signature token verifies the first signature of the first electronic signature token, the method further includes: after receiving the signature private key backup request data packet, the second electronic signature token is processed by the signature The private key backup request packet is checked, and if the check is passed, the operation of verifying the first signature of the first electronic signature token is performed.

The second electronic signature token performs a process of sending a private key backup response data packet, including: the second electronic signature token signatures the private key backup response data packet, and sends the signature processed private key backup response data packet; Before the first electronic signature token performs the process of acquiring the private key, the method further includes: after receiving the signature-processed private key backup request data packet, the first electronic signature token performs the signature processing of the private key backup response data packet. Verification; If the verification passes, the process of obtaining the private key is performed.

The process of sending the private key backup response data packet by the second electronic signature token includes: acquiring a private key encryption policy by using the second electronic signature token, and encrypting the private key by using the encryption policy, and performing the sending encryption The process of obtaining the private key by the first electronic signature token includes: obtaining a decryption policy of the private key by the first electronic signature token, and decrypting the encrypted private key by using the decryption policy to obtain the private key.

The encryption policy and the decryption policy of the private key are determined by the first electronic signature token and the second electronic signature token by using a matching code.

The encryption policy and the decryption policy of the private key are determined by the matching code by the first electronic signature token and the second electronic signature token, including: using the matching code obtained by the first electronic signature token as the to-be-verified code, An electronic signature token performs an operation of sending the to-be-verified code to the second electronic signature token; after obtaining the to-be-verified code, the second electronic signature token determines whether the to-be-verified code is identical to the locally obtained matching code; If the to-be-verified code is the same as the locally obtained matching code, the second electronic signature token generates an encryption policy of the private key and a decryption policy corresponding to the encryption policy; and the second electronic signature token transmits at least the decryption policy to the first electronic Signing token.

The encryption policy and the decryption policy of the private key are determined by the matching code by the first electronic signature token and the second electronic signature token, including: the second electronic signature token and the first electronic signature token obtain a matching code, and the encryption Corresponding relationship between the policy and the decryption policy; the second electronic signature token and the first electronic signature token look up the encryption policy and the decryption policy corresponding to the matching code in the corresponding relationship; if found, the encrypted policy and the decryption strategy to be found The encryption policy used as the private key and the decryption policy corresponding to the encryption policy.

The encryption policy and the decryption policy of the private key are the same as the encryption policy and the decryption policy stored in the first signature. The private key backup response data packet further includes a second signature issued by the CA server for the second electronic signature token. The first electronic signature token performs the process of acquiring the private key, including: the first electronic signature token is obtained. After the private key backup response packet, verify the second signature; if the verification is passed, the first electronic signature token performs the acquisition of the private key Process.

A system for backing up a private key in an electronic signature token, comprising: a first acquisition module in a first electronic signature token and a second acquisition module in a second electronic signature token, each used to obtain a matching code; An encryption module in the electronic signature token, configured to encrypt the matching code; a first sending module in the first electronic signature token, configured to execute a process of sending a private key backup request data packet, where the private key backup request data packet And including the encrypted matching code and the first signature issued by the CA server for the first electronic signature token; the first verification module of the second electronic signature token, configured to receive the private key backup on the second electronic signature token After requesting the data packet, verifying the first signature of the first electronic signature token; and the decrypting module in the second electronic signature token is configured to decrypt the encrypted matching code if the verification is passed, and the decrypted matching is performed. a code as a to-be-verified matching code; a comparison module in the second electronic signature token, configured to compare the to-be-verified matching code with the locally obtained matching code; The second sending module of the second electronic signature token is configured to: if the to-be-verified matching code is the same as the locally obtained matching code, perform a process of sending a private key backup response data packet, where the private key backup response data packet includes a private key The third obtaining module of the first electronic signature token is configured to perform a process of acquiring a private key after obtaining the private key backup response data packet.

The encryption module is configured to encrypt the matching code by using a key in the first signature to obtain an encrypted matching code, and the decrypting module is configured to obtain a key from the private key backup request packet, and use the key pair. The encrypted matching code is decrypted.

The first sending module is configured to sign the private key backup request data packet, and send the signature processed private key backup request data packet; the second electronic signature token further includes a third verification module, configured to use the signature The processed private key backup request packet is checked, and if the check is passed, the first signature of the first electronic signature token is verified.

The second sending module is configured to sign the private key backup response data packet, and send the signature processed private key backup response data packet. The first electronic signature token further includes a second verification module, configured to receive After the signature processing of the private key backup request packet, the signature processing of the private key backup response packet is verified; if the verification is passed, the process of obtaining the private key is performed.

The second sending module is configured to obtain an encryption policy of the private key, and encrypt the private key by using the encryption policy, and execute a process of sending the encrypted private key. The third obtaining module is configured to obtain the decryption of the private key. The policy, and decrypting the encrypted private key by using a decryption strategy to obtain a private key.

The system further includes: a first negotiation module of the first electronic signature token and a second negotiation module of the second electronic signature token, where the first negotiation module is configured to obtain the first electronic signature token The matching code is used as the code to be verified. And performing the operation of sending the to-be-verified code to the second negotiation module; the second negotiation module is configured to determine, after obtaining the to-be-verified code, whether the to-be-verified code is the same as the locally obtained matching code; If the locally obtained matching code is the same, the encryption policy of the private key and the decryption policy corresponding to the encryption policy are generated; and at least the decryption policy is sent to the first negotiation module.

The system further includes: a first negotiation module in the first electronic signature token and a second negotiation module in the second electronic signature token, where the first negotiation module and the second negotiation module are both used to obtain a matching code, Correspondence between the encryption policy and the decryption policy; and finding the encryption policy and the decryption policy corresponding to the matching code in the correspondence relationship; if found, the encryption policy and the decryption policy that are found as the encryption policy used by the private key and the encryption The decryption strategy corresponding to the policy.

The encryption policy and the decryption policy of the private key are the same as the encryption policy and the decryption policy stored in the first signature. The private key backup response data packet further includes a second signature issued by the CA server for the second electronic signature token. The third obtaining module is configured to: after obtaining the signature backup response data packet, perform the second signature Verification; If the verification passes, the process of obtaining the private key is performed.

As can be seen from the above, the second electronic signature token determines whether the first electronic signature token is legally set to the first electronic signature token by verifying the first signature, and then determining the first electronic signature token by using the matching code. Whether it has the right to back up the private key stored locally, and after the above two conditions are met, the private key information is transmitted to ensure the security of the private key backup. DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those skilled in the art can also obtain other drawings based on these drawings without any creative work.

1 is a schematic flowchart of a method for backing up a private key in an electronic signature token according to the present invention; FIG. 2 is a schematic structural diagram of a system embodiment for backing up a private key in an electronic signature token according to the present invention. detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by a person of ordinary skill in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention. In the description of the present invention, it is to be understood that the terms "center", "vertical", "transverse", "upper", "lower", "previous", "rear", "left", "right", " The orientation or positional relationship of the indications of "", "horizon", "top", "bottom", "inside", "outside", etc. is based on the orientation or positional relationship shown in the drawings, only for the convenience of describing the present invention and The simplification of the description is not intended to limit or imply that the device or elements referred to have a particular orientation, construction and operation in a particular orientation. Moreover, the terms "first" and "second" are used for descriptive purposes only and are not to be construed as indicating or implying a relative importance or quantity or location.

In the description of the present invention, it should be noted that the terms "installation", "connected", and "connected" are to be understood broadly, and may be fixed or detachable, for example, unless otherwise explicitly defined and defined. Connected, or connected integrally; can be mechanical or electrical; can be directly connected, or indirectly connected through an intermediate medium, can be the internal communication of the two components. The specific meaning of the above terms in the present invention can be understood in a specific case by those skilled in the art.

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

FIG. 1 is a schematic flowchart diagram of a method for backing up a private key in an electronic signature token according to the present invention. The method embodiment shown in Figure 1 includes:

Step 101: The first electronic signature token and the second electronic signature token obtain a matching code.

Specifically, the matching code may include at least one of a character, a number, and a character; the second electronic signature token and the first electronic signature token may obtain the matching code through a manual input, a data transmission interface, or a network; A matching code is generated by the second electronic signature token according to the pre-stored generation policy, and the matching code is outputted, wherein the output mode can be displayed or played, and the matching code is obtained by the first electronic signature token. Of course, the first electronic signature token can obtain the matching code through wireless or wired transmission, or can be manually input by the user. Of course, the first electronic signature token and the second electronic signature token may be obtained by the bank backend server by sending the matching code to the first electronic signature token and the second electronic signature token.

In comparison, the method of generating the matching code by the second electronic signature token and acquiring by the first electronic signature token does not require the participation of the bank background server, and the interaction process is simpler than that of the bank background server.

Step 102: The first electronic signature token encrypts the matching code, and performs a process of sending a private key backup request data packet, where the private key backup request data packet includes the encrypted matching code and is certified by a CA (Certificate Authority) The first signature issued by the server for the first electronic signature token;

Among them, the signature issued by the CA server is an authoritative electronic document, which is issued by the authoritative and impartial third-party institution center using the CA server private key, which includes the key and the identification information.

Step 103: After the second electronic signature token receives the private key backup request data packet, the second electronic signature token verifies the first signature of the first electronic signature token. Specifically, the second electronic signature token uses the CA server public key to verify the digital certificate, and if the verification is passed, it indicates that the first electronic signature token is legal, and the first electronic signature token is set, and step 104 is performed; Otherwise, it means that the first electronic signature token is illegally set, and the process ends.

Step 104: If the verification is passed, the second electronic signature token decrypts the matching code in the private key backup request data packet, and uses the decrypted matching code as the to-be-verified matching code.

Step 105: The second electronic signature token compares the to-be-verified matching code with the locally obtained matching code. Step 106: If the to-be-verified matching code is the same as the locally obtained matching code, the second electronic signature token is sent. The process of responding to the data packet by the private key backup, wherein the private key backup response data packet includes private key information;

Step 107: After obtaining the private key backup response data packet, the first electronic signature token performs a process of acquiring the private key. As can be seen from the above, the second electronic signature token determines whether the first electronic signature token is legally set to the first electronic signature token by verifying the first signature, and then determining the first electronic signature token by using the matching code. Whether it has the right to back up the private key stored locally, and after the above two conditions are met, the private key information is transmitted to ensure the security of the private key backup.

The method embodiments provided by the present invention are further described below:

The first electronic signature token encrypts the matching code, including:

The first electronic signature token encrypts the matching code by using the key in the first signature to obtain the encrypted matching code; and the second electronic signature token decrypts the encrypted matching code, including:

The second electronic signature token obtains the key from the private key backup request packet, and decrypts the encrypted matching code by using the key.

It can be seen from the above that the encryption of the matching code uses the key in the first signature, and the key for decrypting the encrypted matching code can also be directly obtained from the private key backup request packet, that is, the first signature. The plaintext, therefore, the above method makes the encryption and decryption operation of the matching code simple.

Of course, it is not limited to the above manner, wherein the encryption and decryption policy may be pre-stored in the corresponding electronic signature token or determined by two electronic signature tokens.

In order to prevent the legitimate electronic signature token from falsifying the private key of the second electronic signature token after the first signature is obtained, the security of the private key is leaked.

The first electronic signature token performs an operation of sending a private key backup request packet, including:

The first electronic signature token signs the private key backup request data packet, and sends the signature processed private key backup request data packet;

Before the second electronic signature token verifies the first signature in the private key backup request data packet, the method further includes: after receiving the signature private key backup request data packet, the second electronic signature token performs processing on the signature Private The signature of the key backup request packet is verified. If the verification passes, the second electronic signature token is executed to verify the first signature in the private key backup request packet.

The private key used for signing the private key backup request packet and the public key used by the second electronic signature token to verify the signature of the private key backup request packet are pre-negotiated, and the respective settings are written. In the first electronic signature token.

It can be seen that the private key backup request data packet is signed by the first electronic signature token, and the second electronic signature token is used to verify the private key backup request data packet, so that the first electronic device that initiates the backup request is implemented. The identity of the signature token is such that the electronic signature token with the first signature cannot spoof the private key of the second electronic signature token, thereby improving the security of the private key backup.

Similarly, in order to prevent the legitimate electronic signature token from authenticating the second electronic signature token and sending the wrong private key to the first electronic signature token after the second signature is obtained, the private key backup fails. In the method flow, the second electronic signature token performs an operation of sending a private key backup response data packet, including:

The second electronic signature token signs the private key backup response data packet, and sends the signature processed private key backup response data packet;

Before the first electronic signature token verifies the second signature in the private key backup response packet, the method further includes: after receiving the signature private key backup response data packet, the first electronic signature token is processed after the signature The private key backup verifies the signature of the data packet, and if the verification passes, performs the operation of verifying the digital signature in the private key backup response packet by the first electronic signature token.

It can be seen from the above that the private key backup response data packet is signed by the second electronic signature token, and then the first electronic signature token is used to verify the private key backup response data packet, so as to implement the first electronic response to initiate the backup response. The identity authentication of the signature token enables the legal electronic signature token with the second signature to prevent the first electronic signature token from acquiring the correct private key, and ensures that the first electronic signature token can back up the correct private key.

The private key used by the private key backup response packet and the public key used by the first electronic signature token to verify the signed private key backup response packet are pre-negotiated, and the respective settings are written. In the first electronic signature token.

Of course, in order to ensure the security of the second electronic signature token private key backup response packet, the private key is encrypted and transmitted during the transmission process, and the private key is encrypted and transmitted, including:

The second electronic signature token performs a process of sending a private key backup response data packet, including:

The second electronic signature token acquires an encryption policy of the private key, and encrypts the private key by using the encryption policy, and executes a process of transmitting the encrypted private key;

The first electronic signature token performs a process of obtaining a private key, including: The first electronic signature token acquires a decryption policy of the private key, and decrypts the encrypted private key by using a decryption policy to obtain a private key.

The encryption policy and the decryption policy may be pre-negotiated, and the encryption policy used by one of the second electronic signature token and the first electronic signature token to communicate with the other query may be decrypted corresponding to the encryption policy. Strategy, another one can select one set of encryption and decryption strategies from the pre-stored encryption and decryption strategy to respond to the query request, and the two are consistent. The latter increases the randomness of the encryption and decryption strategy than the former.

Certainly, the method is not limited thereto, and the encryption policy and the decryption strategy of the private key are determined by the matching code by the first electronic signature token and the second electronic signature token, and the identification of the private key is increased due to the high randomness of the matching code. The randomness of the decryption strategy improves the security of the information.

Specifically, the encryption policy and decryption strategy of the private key include the following two types:

Manner 1: The encryption policy and the decryption policy of the private key are determined by the first electronic signature token and the second electronic signature token by using a matching code;

Manner 2: The second electronic signature token acquires a key, which is the same as the key stored in the first signature of the first electronic signature token, and encrypts the private key of the second electronic signature token by using the key to obtain The private key of the encrypted second electronic signature token;

The key obtained by the second electronic signature token in the second mode may also be obtained by querying the first electronic signature token, or may be obtained from the bank background server.

It can be seen from the above that mode 1 determines the encryption and decryption strategy by matching code encryption and decryption strategy, and increases the randomness of the encryption and decryption strategy. The second method uses the key in the first signature of the first electronic signature token, which is convenient for the first The electronic signature token acquires the decryption strategy and is simple to implement.

The following describes the mode one:

Among them, the use of matching code negotiation encryption and decryption strategies has the following two types, including:

A1: the matching code obtained by the first electronic signature token is used as a code to be verified, and the first electronic signature token performs an operation of sending the to-be-verified code to the second electronic signature token; the second electronic signature token is acquired After the to-be-verified code, it is determined whether the to-be-verified code is the same as the locally obtained matching code; if the to-be-verified code is the same as the locally obtained matching code, the second electronic signature token generates a private key encryption policy and the encryption policy. Corresponding decryption strategy; the second electronic signature token sends at least the decryption policy to the first electronic signature token.

As can be seen from the above, in the manner provided by the first method, the second electronic signature token determines the initiation and negotiation of the encryption and decryption policy with the second electronic signature token by comparing the to-be-verified code with the locally obtained matching code. Whether an electronic signature token is the first electronic signature token to verify the identity of the first electronic signature token, determining that the first electronic signature token is the first electronic signature token, and then sending the decryption algorithm to the first An electronic signature token guarantees the transmission of the private key All.

In A1, in order to prevent other electronic signature tokens from stealing the encryption policy of the private key, the first electronic signature token performs an operation of sending the to-be-verified code to the second electronic signature token, including:

The first electronic signature token signs the to-be-verified code, and sends the signature-processed to-be-verified code to the second electronic signature token;

Correspondingly, before the second electronic signature token determines whether the to-be-verified code is identical to the locally obtained matching code, the method further includes:

After receiving the signature-processed to-be-verified code, the second electronic signature token verifies the second electronic signature token to be verified by the signature-processed to-be-verified code, and if the verification passes, determines the to-be-verified code and the locally acquired code. Whether the matching code is the same.

The private key used by the first electronic signature token to sign the verification code may be the same as the private key used when the first electronic signature token signs the private key backup request packet. Similarly, the second electronic signature order The public key used by the card to verify the signed code to be verified is the same as the public key used to back up the request packet for the signed private key.

A2: the second electronic signature token and the first electronic signature token obtain a correspondence between the matching code, the encryption policy, and the decryption policy; and the second electronic signature token and the first electronic signature token find a matching code corresponding to the matching The encryption policy and the decryption policy; if found, the encryption policy and the decryption policy that are found are used as the encryption policy used by the private key and the decryption policy corresponding to the encryption policy.

Specifically, both parties substitute the matching code as an input parameter into the preset algorithm, and calculate a unique pair of encryption and decryption strategies, and use the preset algorithm as a strategy for encrypting and decrypting the private key.

In A2, the first electronic signature token and the second electronic signature token determine the encryption and decryption strategy used for communication by querying the locally obtained correspondence relationship, and the implementation is simple, and the first electronic signature token and the first The information exchange between the two electronic signature tokens reduces the possibility of information being stolen.

Preferably, in order to ensure the backup of the private key, the private key backup response data packet further includes a second signature of the second electronic signature token, which is used to identify that the private key is sent by the legal first electronic signature token. Of course, the private key backup request packet further includes a second signature issued by the CA server for the second electronic signature token; wherein the first electronic signature token performs the process of acquiring the private key, including: the first electronic signature token is received After the private key backup request packet, the second signature is verified; if the verification is passed, the first electronic signature token performs a process of acquiring the private key.

In summary, the first electronic signature token may include the following key information: a key for encrypting the matching code, a private key for signing the information locally sent to the master, a public key for verifying the signature data sent by the master, and a key for decrypting the encrypted private key of the master; correspondingly, the master includes a private key for requesting backup by the first electronic signature token, and further includes: decrypting the key of the matching code, and performing local information to the master The signed private key, sent to the first electronic signature token The public key of the signature data is verified and the key of the private key of the encryption master. FIG. 2 is a schematic structural diagram of a system embodiment of a private key in the backup electronic signature token provided by the present invention. The system embodiment shown in Figure 2 includes:

The first obtaining module 201 of the first electronic signature token and the second obtaining module 202 of the second electronic signature token are both used to obtain a matching code;

An encryption module 203 in the first electronic signature token, configured to encrypt the matching code;

The first sending module 204 of the first electronic signature token is configured to perform a process of sending a private key backup request data packet, where the private key backup request data packet includes the encrypted matching code and the first electronic signature command by the CA server The first signature issued by the card;

The first verification module 205 is configured to: after the second electronic signature token receives the private key backup request data packet, verify the first signature of the first electronic signature token;

The decryption module 206 in the second electronic signature token is configured to decrypt the encrypted matching code if the verification succeeds, and use the decrypted matching code as the to-be-verified matching code;

The comparing module 207 in the second electronic signature token is configured to compare the to-be-verified matching code with the locally obtained matching code;

The second sending module 208 of the second electronic signature token is configured to: if the to-be-verified matching code is the same as the locally obtained matching code, perform a process of sending a private key backup response data packet, where the private key backup response data packet includes Private key letter from E.;

The third obtaining module 209 of the first electronic signature token is configured to perform a process of acquiring the private key after obtaining the private key backup response data packet.

The second sending module is configured to sign the private key backup response data packet, and send the signature processed private key backup response data packet. The first electronic signature token further includes a second verification module, configured to receive After the signature processing of the private key backup request packet, the signature processing of the private key backup response packet is verified; if the verification is passed, Then the process of obtaining the private key is performed.

The system further includes: a first negotiation module of the first electronic signature token and a second negotiation module of the second electronic signature token, where the first negotiation module is configured to obtain the first electronic signature token The matching code is used as the code to be verified, and the operation of sending the to-be-verified code to the second negotiation module is performed. The second negotiation module is configured to determine whether the code to be verified and the locally obtained matching code are obtained after the code to be verified is obtained. If the code to be verified is the same as the locally obtained matching code, the encryption policy of the private key and the decryption policy corresponding to the encryption policy are generated; and at least the decryption policy is sent to the first negotiation module.

As can be seen from the above, the second electronic signature token determines whether the first electronic signature token is legally set to the first electronic signature token by verifying the first signature, and then determining the first electronic signature token by using the matching code. Whether it has the right to back up the private key stored locally, and after the above two conditions are met, the private key information is transmitted to ensure the security of the private key backup. Any process or method description in the flowcharts or otherwise described herein may be understood to represent a module, segment or portion of code that includes one or more executable instructions for implementing the steps of a particular logical function or process. And the scope of the preferred embodiments of the invention includes additional implementations, in which the functions may be performed in a substantially simultaneous manner or in an opposite order depending on the functions involved, in the order shown or discussed. It will be understood by those skilled in the art to which the embodiments of the present invention pertain. It should be understood that portions of the invention may be implemented in hardware, software, firmware or a combination thereof. In the above-described embodiments, multiple steps or methods may be implemented in software or firmware stored in a memory and executed by a suitable instruction execution system. For example, if implemented in hardware, as in another embodiment, it can be implemented with any one or combination of the following techniques well known in the art: having logic gates for implementing logic functions on data signals Discrete logic circuits, application specific integrated circuits with suitable combinational logic gates, programmable gate arrays (PGAs), field programmable gate arrays (FPGAs), etc.

One of ordinary skill in the art can understand that all or part of the steps carried by the method of implementing the above embodiments can be completed by a program to instruct related hardware, and the program can be stored in a computer readable storage medium. When executed, one or a combination of the steps of the method embodiments is included.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing module, or each unit may exist physically separately, or two or more units may be integrated into one module. The above integrated modules can be implemented in the form of hardware or in the form of software functional modules. The integrated modules, if implemented in the form of software functional modules and sold or used as separate products, may also be stored in a computer readable storage medium.

The above-mentioned storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

In the description of the present specification, the description of the terms "one embodiment", "some embodiments", "example", "specific example", or "some examples" and the like means a specific feature described in connection with the embodiment or example. A structure, material or feature is included in at least one embodiment or example of the invention. In the present specification, the schematic representation of the above terms does not necessarily mean the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

Although the embodiments of the present invention have been shown and described, it is understood that the foregoing embodiments are illustrative and not restrictive Variations, modifications, alterations and variations of the above-described embodiments are possible within the scope of the invention. The scope of the invention is defined by the appended claims and their equivalents.

Claims

claims

1. A method of backing up the private key in an electronic signature token, which is characterized by including:

The first electronic signature token and the second electronic signature token obtain matching codes;

The first electronic signature token encrypts the matching code and executes the process of sending a private key backup request data packet, wherein the private key backup request data packet includes the encrypted matching code and the CA server's The first signature issued by the first electronic signature token;

After the second electronic signature token receives the private key backup request data packet, the second electronic signature token verifies the first signature of the first electronic signature token; if the verification passes, The second electronic signature token decrypts the encrypted matching code, and uses the decrypted matching code as the matching code to be verified;

The second electronic signature token compares the matching code to be verified with the matching code obtained locally; if the matching code to be verified is the same as the matching code obtained locally, then the second electronic signature token Execute the process of sending a private key backup response data packet, wherein the private key backup response data packet includes private key information;

After obtaining the private key backup response data packet, the first electronic signature token executes the process of obtaining the private key.

2. The method according to claim 1, characterized in that:

The first electronic signature token encrypts the matching code, including:

The first electronic signature token uses the key in the first signature to encrypt the matching code to obtain the encrypted matching code;

The second electronic signature token decrypts the encrypted matching code, including:

The second electronic signature token obtains the key from the private key backup request packet, and uses the key to decrypt the encrypted matching code.

3. The method according to claim 1 or 2, characterized in that:

The first electronic signature token executes a process of sending the private key backup request packet, including:

The first electronic signature token signs the private key backup request data packet, and sends the signed private key backup request data packet;

Before the second electronic signature token verifies the first signature of the first electronic signature token, it further includes: the second electronic signature token receives the private key backup request data after the signature processing. After the signature is packaged, the signature-processed private key backup request data packet is verified. If the signature verification passes, the operation of verifying the first signature of the first electronic signature token is performed.

4. The method according to claim 1 or 2, characterized in that:

The second electronic signature token executes the process of sending the private key backup response data packet, including: The second electronic signature token signs the private key backup response data packet, and sends the signed private key backup response data packet;

Before the first electronic signature token executes the process of obtaining the private key, it also includes:

After receiving the signed-processed private key backup request packet, the first electronic signature token verifies the signed-processed private key backup response packet; if the verification passes, then performs the acquisition of the private key. process.

5. The method according to claim 1 or 4, characterized in that:

The second electronic signature token executes the process of sending the private key backup response data packet, including:

The second electronic signature token obtains the encryption policy of the private key, uses the encryption policy to encrypt the private key, and executes the process of sending the encrypted private key;

The first electronic signature token executes the process of obtaining the private key, including:

The first electronic signature token obtains the decryption strategy of the private key, and uses the decryption strategy to decrypt the encrypted private key to obtain the private key.

6. The method according to claim 5, characterized in that, the encryption strategy and decryption strategy of the private key are determined by the matching code of the first electronic signature token and the second electronic signature token. .

7. The method according to claim 6, wherein the encryption strategy and decryption strategy of the private key are determined by the matching code of the first electronic signature token and the second electronic signature token. , include:

The matching code obtained by the first electronic signature token is used as the code to be verified, and the first electronic signature token performs the operation of sending the code to be verified to the second electronic signature token;

After obtaining the code to be verified, the second electronic signature token determines whether the code to be verified is the same as the matching code obtained locally;

If the code to be verified is the same as the locally obtained matching code, the second electronic signature token generates an encryption strategy for the private key and a decryption strategy corresponding to the encryption strategy;

The second electronic signature token sends at least the decryption policy to the first electronic signature token.

8. The method according to claim 6, characterized in that the encryption strategy and decryption strategy of the private key are determined by the matching code of the first electronic signature token and the second electronic signature token. , include:

The second electronic signature token and the first electronic signature token obtain the corresponding relationship between the matching code, encryption strategy and decryption strategy;

The second electronic signature token and the first electronic signature token search for the encryption strategy and decryption strategy corresponding to the matching code in the corresponding relationship;

If found, the found encryption policy and decryption policy are used as the encryption policy used by the private key and the decryption policy corresponding to the encryption policy.

9. The method according to claim 5, wherein the encryption policy and decryption policy of the private key are the same as the encryption policy and decryption policy stored in the first signature respectively.

10. The method according to any one of claims 1 to 9, characterized in that:

The private key backup response data packet also includes a second signature issued by the CA server for the second electronic signature token;

Wherein, the first electronic signature token performs a process of obtaining a private key, including:

After obtaining the private key backup response data packet, the first electronic signature token verifies the second signature;

If the verification is passed, the first electronic signature token executes the process of obtaining the private key.

11. A system for backing up the private key in an electronic signature token, which is characterized by including:

The first acquisition module in the first electronic signature token and the second acquisition module in the second electronic signature token are both used to obtain the matching code;

The encryption module in the first electronic signature token is used to encrypt the matching code;

The first sending module in the first electronic signature token is used to execute the process of sending a private key backup request data packet, wherein the private key backup request data packet includes an encrypted matching code and a CA server for the The first signature issued by the first electronic signature token;

The first verification module in the second electronic signature token is configured to verify the first verification of the first electronic signature token after the second electronic signature token receives the private key backup request data packet. signature for verification;

The decryption module in the second electronic signature token is used to decrypt the encrypted matching code if the verification is passed, and use the decrypted matching code as the matching code to be verified;

The comparison module in the second electronic signature token is used to compare the matching code to be verified with the matching code obtained locally;

The second sending module in the second electronic signature token is used to execute the process of sending a private key backup response data packet if the matching code to be verified is the same as the matching code obtained locally, wherein the private key The backup response packet includes private key information;

The third acquisition module in the first electronic signature token is used to execute the process of acquiring the private key after acquiring the private key backup response data packet.

12. The system according to claim 11, characterized in that:

The encryption module is used to encrypt the matching code using the key in the first signature to obtain an encrypted matching code;

The decryption module is used to obtain the key from the private key backup request packet and use the key pair The encrypted matching code is decrypted.

13. The system according to claim 11 or 12, characterized in that:

The first sending module is used to sign the private key backup request data packet and send the signed private key backup request data packet;

The second electronic signature token also includes:

The third verification module is configured to verify the signature of the private key backup request data packet after signature processing. If the signature verification passes, perform an operation of verifying the first signature of the first electronic signature token.

14. The system according to claim 11 or 12, characterized in that:

The second sending module is used to sign the private key backup response data packet and send the signed private key backup response data packet;

The first electronic signature token also includes:

The second verification module is configured to verify the signed private key backup response data packet after receiving the signed private key backup request data packet; if the verification is passed, perform the process of obtaining the private key. process.

15. The system according to claim 11 or 14, characterized in that:

The second sending module is used to obtain the encryption policy of the private key, encrypt the private key using the encryption policy, and execute the process of sending the encrypted private key;

The third acquisition module is used to obtain the decryption strategy of the private key, and use the decryption strategy to decrypt the encrypted private key to obtain the private key.

16. The system according to claim 15, wherein the encryption strategy and decryption strategy of the private key are determined by the matching code of the first electronic signature token and the second electronic signature token. .

17. The system according to claim 16, further comprising: a first negotiation module in the first electronic signature token and a second negotiation module in the second electronic signature token,

Wherein, the first negotiation module is configured to use the matching code obtained by the first electronic signature token as a code to be verified, and perform the operation of sending the code to be verified to the second negotiation module;

The second negotiation module is configured to, after obtaining the code to be verified, determine whether the code to be verified is the same as the matching code obtained locally; if the code to be verified is the matching code obtained locally If they are the same, generate an encryption policy for the private key and a decryption policy corresponding to the encryption policy; and send at least the decryption policy to the first negotiation module.

18. The system according to claim 16, further comprising: a first negotiation module in the first electronic signature token and a second negotiation module in the second electronic signature token, wherein, The first negotiation module and the second negotiation module are both used to obtain the corresponding relationship between the matching code, encryption strategy and decryption strategy; and in the corresponding relationship Search for the encryption policy and decryption policy corresponding to the matching code; if found, use the found encryption policy and decryption policy as the encryption policy used by the private key and the decryption policy corresponding to the encryption policy.

19. The system according to claim 15, wherein the encryption strategy and decryption strategy of the private key are the same as the encryption strategy and decryption strategy stored in the first signature.

20. The system according to any one of claims 11 to 19, characterized in that:

Wherein, the third acquisition module is used to verify the second signature after obtaining the signature backup response data packet; if the verification passes, execute the process of obtaining the private key.