WO2017166113A1

WO2017166113A1 - Key management system

Info

Publication number: WO2017166113A1
Application number: PCT/CN2016/077837
Authority: WO
Inventors: 李昕光
Original assignee: 李昕光
Priority date: 2016-03-30
Filing date: 2016-03-30
Publication date: 2017-10-05

Abstract

A key management system, which relates to the data processing field. The key management system comprises: a KMS server (101) including one or more KMS servers (1011), a cipher machine (1012), a cipher machine management terminal (1013), a cipher machine management card (1014), a cipher machine key card (1015), a KMS client (102) including one or more KMS clients (1021), an IC card (1022), a card reader (1023), and the key management system can support key multi-level distribution management and key two-stages management. The system realizes multi-level key distribution of software and key replacement in the electronic cash industry through one level key distribution architecture, the purchasing cost is reduced and higher expandability is achieved.

Description

Key management system

Technical field

The present invention relates to the field of key management, and in particular, to a key management system.

Background technique

Under the Ministry of Housing and Construction key system, or under the UnionPay key system, a multi-level key management system is implemented for a unified root key. For example, the three-level key management system is a symmetric 3DES algorithm using double-length keys, which defines a national unified consumption root key, and then is dispersed according to different organization codes and area codes, and is divided into two levels to form a third level. Key system.

The financial IC card is an IC card that implements the financial function of the bank card by using a smart card chip. At present, the domestic financial IC card complies with the PBOC standard. According to the arrangement of the People's Bank of China, the migration of magnetic stripe cards to IC cards has begun in the country. The extensive use of financial IC cards will greatly improve the security of bank card payments, reduce fraud, and provide a basis for multi-functional application of bank cards. . The financial IC card is a high-security and multi-purpose bank card. It can be used not only as a financial card, but also can load many industry applications to form multi-purpose bank films, such as financial social security cards, citizen cards, financial consumer cards, etc. Card types can be widely used in shopping malls, self-service shopping, public transportation and other fields, greatly facilitating consumers and providing a basis for banks to develop new bank card products. At present, the financial IC card issuance system mainly consists of a financial IC card root CA, a key management system, a data preparation system and a personalization system. The completion of the card issuance system will greatly improve the efficiency and speed of the bank issuing financial IC cards, and is a bank card business. provide assurance.

In order to strengthen the unified management of the IC card key of the national bank and ensure the security of the operation of the bank IC card business, the national bank IC card key management rules are specially formulated.

In the process of implementing the present invention, the inventors have found that the prior art has at least the following problems:

In the key management system, large enterprises are in charge of the root key, and multiple encryption machines are arranged to realize a unified key management system throughout the country. Subordinate organizations that use secondary or tertiary decentralized keys, if there is an operation such as issuing a card, need to initiate an application to the headquarters and receive a fee from the headquarters.

Summary of the invention

In order to solve the problem of the current high cost of the key system, the embodiment of the present invention provides a key tube. Management system. The technical solution is as follows:

According to a first aspect of the embodiments of the present invention, a key management system is provided, the system comprising: a KMS server, including one or more:

a KMS server for installing software and performing the functions of the software, and accessing the KMS server through a client interface software or an API of the software;

A cipher machine for performing various security algorithm operations and saving all or part of the keys;

The cryptographic management terminal is connected to the cipher machine through one or more serial ports to implement management of the cipher machine, including but not limited to configuring the cipher machine and the management key;

The cipher card management card is used to authenticate the operation authority when managing the cipher machine;

The cipher key card is used to back up the key stored in the cipher machine, and can also be used to restore the key backed up in the cipher key card to the cipher machine;

KMS client, including one or more:

The KMS client is used to install interface software, and the user can perform system management and key management operations through the interface of the client;

An IC card for storing a user authentication key for performing identity authentication when logging in to the key management system;

Card reader for reading/writing an IC card;

The key management system can support multi-level key distribution and key two-level management;

Wherein, the system further comprises:

The data preparation system is configured to collect the information required for issuing the IC card when the IC card is issued, and provide all the information issued by the IC card to the personalized system, and the card is issued by the personalized system;

An interaction center, including but not limited to an organization through which information must be exchanged between systems;

Terminals, including but not limited to devices that use a magnetic stripe card or an IC card for transactions;

Counters, including but not limited to counters at bank outlets.

In a first possible implementation manner of the first aspect, the system further includes:

The KMS server also includes one or more:

Printers, including but not limited to dot matrix printers, for printing key envelopes;

a key envelope, ie, a digital envelope, for storing the encrypted content and the encrypted key for encrypting the content;

The KMS client also includes one or more:

The user card, that is, the IC card held by the individual user, is used to save the key written by the client through the card reader when the card is issued, and supports the terminal device of the IC card to perform the transaction;

PSAM card for storing various keys used in transactions;

Terminal security module for handling terminal security, including but not limited to saving client keys and security algorithm operations;

a key transmission medium for storing a key during key transmission;

A PIN pad for the user to enter a password, and the key stored in the PIN pad is used to encrypt the password entered by the user.

According to a second aspect of the embodiments of the present invention, a key management method is provided, the method comprising:

The subkey with the master key dispersed N times as the key of the user card is written into the user card at the time of card issuance, and N is a natural number greater than 1; or

The manufacturer transfer card and the M supervisor leadership card are saved in the first-level management center, and M is a natural number greater than 3;

Generating a master key card and a master transport card by using the supervisor leader card, and importing the master key into the encryption machine of the first-level management center;

The secondary management center issues the card issuing mother card by using the branch master key card and the main transmission card delivered by the first-level management center, or importing the partial master key into the encryption of the secondary management center In the machine.

In a first possible implementation manner of the second aspect, when the bank provides the electronic cash card and provides the key authority, the partial application file key of the electronic cash card is replaced with the file key of the industry, The file key of the industry is decentralized by the master key or the partial master key.

In a second possible implementation manner of the second aspect, when the partial application file key of the electronic cash card is replaced with the file key of the industry, the application file key of the electronic cash card may also be retained. .

In a third possible implementation of the second aspect, the M is equal to four.

In a fourth possible implementation manner of the second aspect, the first-level management center may be a national key management center.

In a fifth possible implementation manner of the second aspect, the secondary management center may be the one A financial IC card key management center established by a subordinate organization authorized by the level management center.

In a sixth possible implementation manner of the second aspect, the secondary management center may be a pilot city or a commercial bank key management center, or a card issuing bank key management center.

The beneficial effects brought by the technical solutions provided by the embodiments of the present invention are:

The invention realizes the multi-level key dispersion of the software under the primary key distribution system, realizes the key replacement of the electronic cash industry, reduces the purchase cost, and achieves higher scalability.

DRAWINGS

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention. Other drawings may also be obtained from those of ordinary skill in the art in light of the inventive work.

1 is a schematic structural view of an implementation environment involved in various embodiments of the present invention;

2 is a flowchart of a method for a key management method according to an embodiment of the present invention;

3 is a schematic structural diagram of a key management system according to another embodiment of the present invention;

4 is a schematic structural diagram of a KMS server according to another embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a KMS client according to another embodiment of the present invention; FIG.

6 is a schematic structural diagram of a data processing module according to an embodiment of the present invention;

FIG. 7 is a schematic structural diagram of a server according to another embodiment of the present invention.

detailed description

The embodiments of the present invention will be further described in detail below with reference to the accompanying drawings.

Please refer to FIG. 1, which is a schematic structural diagram of an implementation environment involved in various embodiments of the present invention.

The key management system consists of software and hardware components. The software part mainly implements key production, distribution, key import, key download, and key storage. The hardware part mainly implements key calculation, key backup, key transaction, business transaction, and the like.

The key system supports multiple levels of key scatter and key management. Multi-level key dispersion refers to the time of card issuance The key written to the user card may be a subkey after each master key is dispersed multiple times. The multi-level decentralized key system can ensure that the keys between different decentralized areas are independent of each other and can be mutually common; and the two-level management of the keys refers to the management at the headquarters level and the management at the branch level. Headquarters level management can be managed by the operating company. The headquarters is responsible for the maintenance of the factory transfer card and the four supervisor leadership cards. The master key card and the master transport card of the system are generated by the supervisor leader card, and the master key is imported into the encryptor. The branch-level management is managed and operated by the financial IC card key management center set up by the subordinate organization authorized by the operating company headquarters. The branch-level key management is performed by using the branch master key card and the main transport card issued by the headquarters to issue various card-issuing cards required for the branch or directly into the encryption machine of the branch.

To realize the electronic cash industry key replacement, the bank first provides an electronic cash card, and the bank provides the authority to replace some of the application file keys with the industry's file key, which is obtained by the operator's self-built key. Therefore, the electronic cash card that has been replaced by the industry key can be used in the application scope of the city level; while retaining the previous file, the electronic cash card can also be applied to the original scene.

The key management system is a software system that manages various keys in the business system from the perspective of key usage. The key algorithm operations and operations are implemented by hardware cryptographic devices.

The key function of the key management system is to provide key management and service functions for the business system, which can be widely applied to related electronic payment such as mobile payment, telecommunications, banking, social security, and public transportation. The key system adopts configuration management to meet the multi-application multi-service key management requirements of users.

The key system construction strictly implements the idea that “secret lies in the key” and has high security and advanced nature. In terms of safety management, it has perfect personnel certification, security control, operation and maintenance monitoring and auditing mechanism. In terms of application functions, it supports EMV/PBOC2.0 standard bank credit/debit card, e-wallet, etc. Key management and service requirements in key generation, transmission, card issuance, key update, etc., can be used as independent The key management center can also be used to connect with business systems such as data preparation systems and card issuance systems to support related key management services.

In summary, the present invention realizes multi-level key distribution of software under the primary key distribution system, realizes key replacement in the electronic cash industry, reduces purchase cost, and achieves higher scalability.

Please refer to FIG. 2, which is a flowchart of a method for a key management method according to an embodiment of the present invention. This embodiment is exemplified by applying the key management method to the implementation environment shown in FIG. 1. The method can include:

The subkey obtained by dispersing the master key N times is used as the key of the user card, and is written at the time of card issuance. In the user card, N is a natural number greater than 1; or

In step 201, the manufacturer transmission card and the M supervisor leadership card are saved in the first-level management center, and M is a natural number greater than 3.

Preferably, the first-level management center may be a national key management center;

Preferably, the M is equal to 4;

Step 202: Generate a master key card and a master transport card by using the supervisor leader card, and import the master key into the encryption machine of the first-level management center;

Step 203: The secondary management center issues a card issuing mother card by using the branch master key card and the main transmission card delivered by the first-level management center, or importing the branch master key into the second-level management. Central encryption machine.

Preferably, when the bank provides the electronic cash card and provides the key authority, the partial application file key of the electronic cash card is replaced with the file key of the industry, and the file key of the industry is used by the master key Or the branch master key is decentralized.

Preferably, when the partial application file key of the electronic cash card is replaced with the file key of the industry, the application file key of the electronic cash card may also be retained.

Preferably, the secondary management center may be a financial IC card key management center established by a lower-level organization authorized by the first-level management center.

Preferably, the secondary management center may be a pilot city or a commercial bank key management center, or a card issuing bank key management center.

Please refer to FIG. 3, which is a schematic structural diagram of a key management system according to another embodiment of the present invention. This embodiment is exemplified by applying the method to the implementation environment shown in FIG. 1. The system includes a KMS server 201 and a KMS client 202.

Please refer to FIG. 4, which is a schematic structural diagram of a KMS server according to another embodiment of the present invention. This embodiment is exemplified by applying the method to the implementation environment shown in FIG. 1. The KMS server 201 includes:

a KMS server 1011, configured to install software and perform functions of the software, and access the KMS server through a client interface software or an API of the software;

The cryptographic machine 1012 is configured to perform various security algorithm operations and save all or part of the keys;

The cryptographic management terminal 1013 is connected to the cipher machine through one or more serial ports to implement management of the cipher machine, including but not limited to configuring the cipher machine and the management key;

The cryptographic management card 1014 is configured to authenticate the operation authority when managing the cipher machine;

The cipher key card 1015 is configured to back up the key stored in the cipher machine, and may also be used to restore the key backed up in the cipher key card to the cipher machine;

Printer 1016, including but not limited to a dot matrix printer, for printing a key envelope;

A key envelope 1017, a digital envelope, is used to store the encrypted content and the encrypted key used to encrypt the content.

Please refer to FIG. 5, which is a schematic structural diagram of a KMS client according to another embodiment of the present invention. This embodiment is exemplified by applying the method to the implementation environment shown in FIG. 1. KMS client 201, including one or more:

The KMS client 2011 is used to install interface software, and the user can perform system management and key management operations through the interface of the client;

The 2012 IC card is configured to store a user authentication key for performing identity authentication when logging in to the key management system;

Card reader 2013 for reading/writing an IC card;

The user card 2014, that is, the IC card held by the individual user, is used to save the key written by the client through the card reader when the card is issued, and supports the terminal device of the IC card to perform the transaction;

PSAM card 2015, used to store various keys used in transactions;

The terminal security module 2016 is configured to process terminal security, including but not limited to saving a client key and a security algorithm operation;

a key transmission medium 2017 for storing a key during key transmission;

The PIN pad 2018 is used for the user to input a password, and the key stored in the PIN pad is used to encrypt the password input by the user.

It should be noted that the key management system provided by the foregoing embodiment only uses The division of each of the above functional modules is illustrated by an example. In actual applications, the above function assignments may be completed by different functional modules as needed, that is, the internal structure of the system is divided into different functional modules to complete all or part of the functions described above. . In addition, the embodiment of the key management system and the key management method provided in the foregoing embodiments are in the same concept, and the specific implementation process is described in detail in the method embodiment, and details are not described herein again.

Please refer to FIG. 6, which is a schematic structural diagram of a terminal according to an embodiment of the present invention. The electronic device can be used to implement the item transfer method provided in the above embodiments. Specifically:

The terminal 1000 may include an RF (Radio Frequency) circuit 1010, a memory 1020 including one or more computer readable storage media, an input unit 1030, a display unit 1040, a sensor 1050, an audio circuit 1060, a short-range communication module 1070, A processor 1080 having one or more processing cores, and a power supply 1090 and the like are included. It will be understood by those skilled in the art that the terminal structure shown in FIG. 10 does not constitute a limitation to the terminal, and may include more or less components than those illustrated, or combine some components, or different component arrangements. among them:

The RF circuit 1010 can be used for receiving and transmitting signals during and after receiving or transmitting information, in particular, receiving downlink information of the base station and then processing it by one or more processors 1080; in addition, transmitting data related to the uplink to the base station . Generally, the RF circuit 1010 includes, but is not limited to, an antenna, at least one amplifier, a tuner, one or more oscillators, a Subscriber Identity Module (SIM) card, a transceiver, a coupler, an LNA (Low Noise Amplifier). , duplexer, etc. In addition, RF circuit 1010 can also communicate with the network and other devices via wireless communication. Wireless communication can use any communication standard or protocol, including but not limited to GSM (Global System of Mobile communication), GPRS (General Packet Radio Service), CDMA (Code Division Multiple Access) Divisional Multiple Access), WCDMA (Wideband Code Division Multiple Access), LTE (Long Term Evolution), e-mail, SMS (Short Messaging Service), and the like.

The memory 1020 can be used to store software programs and modules, and the processor 1080 executes various functional applications and data processing by running software programs and modules stored in the memory 1020. The memory 1020 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.) The storage data area can store data (such as audio data, phone book, etc.) created according to the use of the terminal 1000. Moreover, memory 1020 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device. Accordingly, memory 1020 can also include a memory controller to provide access to memory 1020 by processor 1080 and input unit 1030.

Input unit 1030 can be used to receive input numeric or character information, as well as to generate keyboard, mouse, joystick, optical or trackball signal inputs related to user settings and function controls. In particular, input unit 1030 can include touch-sensitive surface 1031 as well as other input devices 1032. Touch-sensitive surface 1031, also known as a touch display or touchpad, can collect touch operations on or near the user (such as a user using a finger, stylus, etc., on any touch-sensitive surface 1031 or The operation near the touch-sensitive surface 1031) and driving the corresponding connecting device according to a preset program. Alternatively, the touch-sensitive surface 1031 may include two parts of a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. The processor 1080 is provided and can receive commands from the processor 1080 and execute them. In addition, the touch sensitive surface 1031 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch-sensitive surface 1031, the input unit 1030 can also include other input devices 1032. Specifically, other input devices 1032 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

Display unit 1040 can be used to display information entered by the user or information provided to the user and various graphical user interfaces of terminal 1000, which can be constructed from graphics, text, icons, video, and any combination thereof. The display unit 1040 may include a display panel 1041. Alternatively, the display panel 1041 may be configured in the form of an LCD (Liquid Crystal Display), an OLED (Organic Light-Emitting Diode), or the like. Further, the touch-sensitive surface 1031 can cover the display panel 1041, and when the touch-sensitive surface 1031 detects a touch operation thereon or nearby, it is transmitted to the processor 1080 to determine the type of the touch event, and then the processor 1080 according to the touch event The type provides a corresponding visual output on display panel 1041. Although in FIG. 10, touch-sensitive surface 1031 and display panel 1041 are implemented as two separate components to implement input and input functions, in some embodiments, touch-sensitive surface 1031 can be integrated with display panel 1041 for input. And output function.

Terminal 1000 can also include at least one type of sensor 1050, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 1041 according to the brightness of the ambient light, and the proximity sensor may close the display panel 1041 when the terminal 1000 moves to the ear. / or backlight. As a kind of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in all directions (usually three axes). When it is stationary, it can detect the magnitude and direction of gravity. It can be used to identify the gesture of the mobile phone (such as horizontal and vertical screen switching, related Game, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc.; as for the terminal 1000 can also be configured with gyroscopes, barometers, hygrometers, thermometers, infrared sensors and other sensors, not here Let me repeat.

Audio circuit 1060, speaker 1061, and microphone 1062 can provide an audio interface between the user and terminal 1000. The audio circuit 1060 can transmit the converted electrical data of the received audio data to the speaker 1061, and convert it into a sound signal output by the speaker 1061; on the other hand, the microphone 1062 converts the collected sound signal into an electrical signal, by the audio circuit 1060. After receiving, it is converted into audio data, and then processed by the audio data output processor 180, transmitted to the terminal, for example, via the RF circuit 110, or outputted to the memory 120 for further processing. The audio circuit 160 may also include an earbud jack to provide communication of the peripheral earphones with the terminal 1000.

The short-range communication module 170 may include WiFi (wireless fidelity) technology and/or NFC technology and/or Bluetooth technology and/or infrared technology, and the terminal 1000 may help the user to send and receive emails and browse the webpage through the short-range communication module 170. And accessing streaming media, etc., it provides users with wireless broadband Internet access and close-range communication, such as reading and writing of electronic cards in the embodiment of the present invention.

The processor 1080 is the control center of the terminal 1000, connecting various portions of the entire handset with various interfaces and lines, by running or executing software programs and/or modules stored in the memory 1020, and recalling data stored in the memory 1020, The various functions and processing data of the terminal 1000 are performed to perform overall monitoring of the mobile phone. Optionally, the processor 1080 may include one or more processing cores; preferably, the processor 1080 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like. The modem processor primarily handles wireless communications. It will be appreciated that the above described modem processor may also not be integrated into the processor 1080.

The terminal 1000 also includes a power source 1090 (such as a battery) that supplies power to the various components, preferably, electricity. The source can be logically coupled to the processor 1080 through a power management system to manage functions such as charging, discharging, and power management through a power management system. The power supply 1090 may also include any one or more of a DC or AC power source, a recharging system, a power failure detection circuit, a power converter or inverter, a power status indicator, and the like.

Although not shown, the terminal 1000 may further include a camera, a Bluetooth module, and the like, and details are not described herein again. Specifically, in this embodiment, the display unit of the electronic device is a touch screen display, the electronic device further includes a memory, and one or more programs, wherein one or more programs are stored in the memory and configured to be one or one The above processor executes one or more programs including a key management method for performing the above.

Please refer to FIG. 7, which is a schematic structural diagram of a server according to an embodiment of the present invention. One or more of the servers may constitute an order management system, a card management system, a convergence management system, or an item provider device in the embodiment of the present invention. The server 1100 includes a central processing unit (CPU) 1101, a system memory 1104 including a random access memory (RAM) 1102 and a read only memory (ROM) 1103, and a system bus 1105 that connects the system memory 1104 and the central processing unit 1101. The server 1100 also includes a basic input/output system (I/O system) 1106 that facilitates transfer of information between various devices within the computer, and mass storage for storing the operating system 1113, applications 1114, and other program modules 1115. Device 1107.

The basic input/output system 1106 includes a display 1108 for displaying information and an input device 1109 such as a mouse or keyboard for user input of information. The display 1108 and the input device 1109 are both connected to the central processing unit 1101 via an input-output controller 1110 connected to the system bus 1105. The basic input/output system 1106 can also include an input output controller 1110 for receiving and processing input from a plurality of other devices, such as a keyboard, mouse, or electronic stylus. Similarly, the input and output controller 1110 also provides output to a display screen, printer, or other type of output device.

The mass storage device 1107 is connected to the central processing unit 1101 by a mass storage controller (not shown) connected to the system bus 1105. The mass storage device 1107 and its associated computer readable medium provide non-volatile storage for the server 1100. That is, the mass storage device 1107 can include a computer readable medium such as a hard disk or a CD-ROM drive. (not shown).

Without loss of generality, the computer readable medium can include computer storage media and communication media. Computer storage media includes volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media include RAM, ROM, EPROM, EEPROM, flash memory or other solid state storage technologies, CD-ROM, DVD or other optical storage, tape cartridges, magnetic tape, magnetic disk storage or other magnetic storage devices. Of course, those skilled in the art will appreciate that the computer storage medium is not limited to the above. The system memory 1104 and the mass storage device 1107 described above may be collectively referred to as a memory.

According to various embodiments of the present invention, the server 1100 may also be operated by a remote computer connected to the network through a network such as the Internet. That is, the server 1100 can be connected to the network 1112 through the network interface unit 1111 connected to the system bus 1105, or can also be connected to other types of networks or remote computer systems (not shown) using the network interface unit 1111. .

The memory further includes one or more programs, the one or more programs being stored in a memory, the one or more programs including instructions for performing a key management method provided by an embodiment of the present invention.

The serial numbers of the embodiments of the present invention are merely for the description, and do not represent the advantages and disadvantages of the embodiments.

A person skilled in the art may understand that all or part of the steps of implementing the above embodiments may be completed by hardware, or may be instructed by a program to execute related hardware, and the program may be stored in a computer readable storage medium. The storage medium mentioned may be a read only memory, a magnetic disk or an optical disk or the like.

The above are only the preferred embodiments of the present invention, and are not intended to limit the present invention. Any modifications, equivalents, improvements, etc., which are within the spirit and scope of the present invention, should be included in the protection of the present invention. Within the scope.

Claims

A key management system, characterized in that the system comprises:

KMS server, including one or more:

a KMS server for installing software and performing the functions of the software, and accessing the KMS server through a client interface software or an API of the software;

A cipher machine for performing various security algorithm operations and saving all or part of the keys;

The cryptographic management terminal is connected to the cipher machine through one or more serial ports to implement management of the cipher machine, including but not limited to configuring the cipher machine and the management key;

The cipher card management card is used to authenticate the operation authority when managing the cipher machine;

The cipher key card is used to back up the key stored in the cipher machine, and can also be used to restore the key backed up in the cipher key card to the cipher machine;

KMS client, including one or more:

The KMS client is used to install interface software, and the user can perform system management and key management operations through the interface of the client;

An IC card for storing a user authentication key for performing identity authentication when logging in to the key management system;

Card reader for reading/writing an IC card;

The key management system can support multi-level key distribution and key two-level management;

Wherein, the system further comprises:

The data preparation system is configured to collect the information required for issuing the IC card when the IC card is issued, and provide all the information issued by the IC card to the personalized system, and the card is issued by the personalized system;

An interaction center, including but not limited to an organization through which information must be exchanged between systems;

Terminals, including but not limited to devices that use a magnetic stripe card or an IC card for transactions;

Counters, including but not limited to counters at bank outlets.
The system of claim 1 wherein the system further comprises:

The KMS server also includes one or more:

Printers, including but not limited to dot matrix printers, for printing key envelopes;

a key envelope, ie a digital envelope, for storing the encrypted content and being encrypted for encrypting said Key to the content;

The KMS client also includes one or more:

The user card, that is, the IC card held by the individual user, is used to save the key written by the client through the card reader when the card is issued, and supports the terminal device of the IC card to perform the transaction;

PSAM card for storing various keys used in transactions;

Terminal security module for handling terminal security, including but not limited to saving client keys and security algorithm operations;

a key transmission medium for storing a key during key transmission;

A PIN pad for the user to enter a password, and the key stored in the PIN pad is used to encrypt the password entered by the user.