WO2017166527A1 - 文件签名系统及方法 - Google Patents

文件签名系统及方法 Download PDF

Info

Publication number
WO2017166527A1
WO2017166527A1 PCT/CN2016/089542 CN2016089542W WO2017166527A1 WO 2017166527 A1 WO2017166527 A1 WO 2017166527A1 CN 2016089542 W CN2016089542 W CN 2016089542W WO 2017166527 A1 WO2017166527 A1 WO 2017166527A1
Authority
WO
WIPO (PCT)
Prior art keywords
file
encrypted
signature
encryption
hash
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2016/089542
Other languages
English (en)
French (fr)
Inventor
罗汉彬
王希颋
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Le Holdings Beijing Co Ltd
Leshi Zhixin Electronic Technology Tianjin Co Ltd
Original Assignee
Le Holdings Beijing Co Ltd
Leshi Zhixin Electronic Technology Tianjin Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Le Holdings Beijing Co Ltd, Leshi Zhixin Electronic Technology Tianjin Co Ltd filed Critical Le Holdings Beijing Co Ltd
Priority to US15/242,532 priority Critical patent/US20170279777A1/en
Publication of WO2017166527A1 publication Critical patent/WO2017166527A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2107—File encryption

Definitions

  • the present patent application relates to the field of data security, and in particular to a file signature system and method.
  • digital signature is one of the core technologies to realize online transaction security. It can guarantee the confidentiality of information transmission, the integrity of data exchange, the non-repudiation of sending information, and the certainty of trader identity.
  • Digital signatures are defined in the ISO7498-2 standard as: "some data attached to a data unit, or a cryptographic transformation of a data unit that allows the recipient of the data unit to confirm the source and data of the data unit. The integrity of the unit and protect the data from being forged by people (such as recipients).
  • the function to be realized by the digital signature is an extension of the function of our usual handwritten signature.
  • the main role of signing in a written document is twofold. One is because it is difficult to deny the signature of oneself, thus confirming the fact that the document has been signed by himself; the second is because his signature is not easily imitated by others, thus determining The fact that the file is true.
  • a set of digital signatures usually defines two complementary operations, one for signature and one for verification. Only a sender of information can generate a string of numbers that cannot be forged by others. This string of digits is also a valid proof of the authenticity of the information sent by the sender of the message.
  • Digital signatures are a method of signing messages in electronic form, and a signed message can be transmitted over a communication network.
  • Digital signatures can be obtained based on public key cryptosystems and private key cryptosystems, mainly based on digital signatures of public key cryptosystems. Includes regular digital signatures and special digital signatures.
  • Common digital signature algorithms include RSA, ElGamal, Fiat-Shamir, Guillou-Quisquarter, Schnorr, Ong-Schnorr-Shamir digital signature algorithm, Des/DSA, elliptic curve digital signature algorithm and finite automaton digital signature algorithm.
  • the digital signature can be used to verify the identity of the signer.
  • the encryption and decryption method of public key encryption private key decryption there is still a risk of obtaining a code by using an encryption rule from an encrypted file, and the security of the encrypted file is reduced.
  • the present invention provides a file signature system, the system comprising:
  • An encryption server configured to store an encryption key
  • a signature client configured to generate encrypted information according to a file to be encrypted, and send the generated encrypted information to the encryption server;
  • the encryption server is configured to, after receiving the encrypted information, according to the encryption
  • the key generation hashes and sends back to the signature client;
  • the signature client is configured to sign the file to be encrypted according to the hash.
  • the signature client is configured to compile the file to be encrypted into a binary file; and generate the encrypted information from the binary file.
  • the encrypted information is a message digest of the binary file.
  • the message digest is an MD5 code.
  • the signature client is configured to add the hash to the back of the file to be encrypted to implement signing the file to be encrypted.
  • the encryption server and the signed client communicate via an application interface API.
  • a file signature method comprising:
  • the encryption server After receiving the encrypted information, the encryption server generates a hash according to the encryption key;
  • the method further includes:
  • the encrypted information is generated according to the binary file.
  • the encrypted information is a message digest of the binary file.
  • the message digest is an MD5 code.
  • the method further includes:
  • the encryption key is stored by the encryption server, which can effectively prevent the secret key from leaking out and improve the security of the signature.
  • FIG. 1 is a structural diagram of a file signature system according to an embodiment of the present invention.
  • FIG. 2 is a flowchart of a file signing method according to an embodiment of the present invention.
  • FIG. 1 is a structural diagram of a file signature system according to an embodiment of the present invention. As shown in FIG. 1, the present invention provides a file signature system, which may include:
  • the encryption server 1 is configured to store an encryption key
  • the signature client 2 is configured to generate encrypted information according to the file to be encrypted, and send the generated encrypted information to the encryption server 1;
  • the encryption server 1 is configured to, after receiving the encrypted information, generate a hash according to the encryption key and send it back to the signature client 2;
  • the signature client 2 is configured to sign the file to be encrypted according to the hash.
  • the encryption key is stored by the encryption server, which can effectively prevent the secret key from leaking out and improve the security of the signature.
  • the role of the encryption server is to store the encryption key and generate a hash based on the encryption key.
  • the encryption server needs to have storage and processing operations.
  • the composition of the encryption server may include a processor, a hard disk, a memory, a system bus, etc., similar to a general-purpose computer architecture, but in terms of processing power, stability, reliability, and security, due to the need to provide highly reliable services. Sexuality, scalability, manageability, etc. are highly demanding.
  • the signing client can be a signed client program or a terminal or mobile terminal with a signed application installed.
  • terminals include, but are not limited to, personal computers, cell phones, tablets, and personal digital assistants (PDAs).
  • the signature client can be configured to compile the file to be encrypted into a binary file; and generate the encrypted information from the binary file.
  • the signature client is required to have the ability to compile, that is, a program that can translate a program written in one programming language into another equivalent language. Compilation is to turn a high-level language into a binary language that the computer can recognize. The computer only knows 1 and 0.
  • the compiler replaces the familiar language with binary.
  • the working process of the compiler to translate a source program into a target program is divided into five stages: lexical analysis; syntax analysis; semantic checking and intermediate code generation; code optimization; object code generation. Mainly for lexical analysis and grammar analysis, also known as source program analysis, grammatical errors are found during the analysis, and prompt information is given.
  • a compiled language is a programming language implemented as a compiler. It is not like a literal translation language. The interpreter runs the code one sentence at a time, but instead compiles the code into machine code and then runs it. In theory, any programming language can be compiled or literally translated. The difference between them is only related to the application of the program.
  • the encrypted information is generated from the binary file, wherein the encrypted information can be a message digest of the binary file, such as an MD5 code.
  • the MD5 code used to ensure complete and consistent information transmission is widely used in computers.
  • One of the hash algorithms used also known as digest algorithm, hash algorithm
  • mainstream programming languages have generally implemented MD5.
  • Calculating data (such as Chinese characters) into another fixed-length value is the basic principle of the hash algorithm.
  • the predecessors of MD5 are MD2, MD3, and MD4.
  • the MD5 algorithm has the following characteristics:
  • anti-modification any changes to the original data, even if only 1 byte is modified, the MD5 value obtained is very different.
  • the role of MD5 is to allow large amounts of information to be "compressed" into a secure format (that is, to convert a string of arbitrary length into a string of hexadecimal digits of a certain length) before signing the private key with the digital signature software.
  • the signature client may be further configured to add the hash to the back of the file to be encrypted to implement signing the file to be encrypted.
  • the file to be encrypted in this example is in the form of a binary code, and the content of the hash (for example, a hash code) can be directly loaded after the binary code to implement the signature of the file to be encrypted.
  • the encryption server 1 and the signature client 2 can communicate over a network (eg, a wired network or a wireless network) through an application interface API.
  • the API is a predefined function that provides the ability for applications and developers to access a set of routines based on a piece of software or hardware without having to access the source code or understand the details of the internal workings.
  • APIs There are two main types of APIs:
  • the Windows API is a set of pre-defined controls that control the appearance and behavior of the various components of Windows.
  • Windows function Each action of the user causes one or several functions to run to tell Windows what happened. This is somewhat like the native code of Windows. Other languages just provide a way to access the API automatically and easily.
  • the Windows system is also a large service center. Calling the various services of this service center (each service is a function) can help the application to achieve the purpose of opening the window, drawing graphics and using peripheral devices. Since these functions serve the application, it is called Application Programming. Interface, referred to as the API function.
  • WIN32API is also the application programming interface for the Microsoft Windows 32-bit platform.
  • Any application that executes under the Windows work environment can call the Windows API.
  • the user programming interface API follows the POSIX standard, the most popular application programming interface standard in UNIX.
  • the POSIX standard is a standard system jointly developed by IEEE and ISO/IEC. Based on the existing UNIX practices and experience at the time, the standard describes the operating system's system call programming interface API to ensure that applications can be ported to multiple operating systems at the source level.
  • system call programming interfaces are mainly implemented by the C library (LIBC).
  • FIG. 2 is a flowchart of a file signing method according to an embodiment of the present invention. As shown in FIG. 2, in another aspect of the present invention, a file signature method is provided, the method comprising:
  • the encryption server After receiving the encrypted information, the encryption server generates a hash according to the encryption key;
  • the method may further include: compiling the file to be encrypted into a binary file; and generating the encrypted information according to the binary file.
  • the method may further include: adding the hash to the back of the file to be encrypted, and implementing signing the file to be encrypted.
  • the file signature method and system provided by the present invention use a dedicated encryption server to store a key, and has the technical effect of preventing key leakage and improving the security of the signature.

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Computer Hardware Design (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Storage Device Security (AREA)

Abstract

本发明实施例涉及数据安全领域领域，公开了一种文件签名系统及方法，其中，该系统包括：加密服务器，被配置成存储加密密钥；签名客户端，被配置成根据待加密的文件生成加密信息，以及将所生成的加密信息发送至所述加密服务器；所述加密服务器，被配置成在接收到所述加密信息之后，根据所述加密密钥生成散列并发送回所述签名客户端；以及所述签名客户端被配置成根据所述散列对所述待加密文件签名。通过上述技术方案，利用加密服务器保存加密密钥，能够有效防止秘钥外泄，提高签名的安全性。

Description

文件签名系统及方法
交叉引用
本申请引用于2016年03月28日递交的第201610183197.6号中国专利申请，其通过引用被全部并入本申请。
技术领域
本专利申请涉及数据安全领域，具体地，涉及一种文件签名系统及方法。
背景技术
为了确保数据传输的安全性，不得不采取一系列的安全技术，如加密技术、数字签名、身份认证、密钥管理、防火墙、安全协议等。其中数字签名就是实现网上交易安全的核心技术之一，它可以保证信息传输的保密性、数据交换的完整性、发送信息的不可否认性、交易者身份的确定性等。
数字签名在ISO7498—2标准中定义为：“附加在数据单元上的一些数据，或是对数据单元所作的密码变换，这种数据和变换允许数据单元的接收者用以确认数据单元来源和数据单元的完整性，并保护数据，防止被人(例如接收者)进行伪造”。
发明人在实现本发明的过程中发现，数字签名要实现的功能是我们平常的手写签名要实现功能的扩展。平常在书面文件上签名的主要作用有两点，一是因为对自己的签名本人难以否认，从而确定了文件已被自己签署这一事实；二是因为自己的签名不易被别人模仿，从而确定了文件是真的这一事实。采用数字签名，也能完成这些功能：
(1)确认信息是由签名者发送的；
(2)确认信息自签名后到收到为止，未被修改过；
(3)签名者无法否认信息是由自己发送的。
数字签名的技术基础是公钥密码技术。一套数字签名通常定义两种互补的运算，一个用于签名，另一个用于验证。只有信息的发送者才能产生的别人无法伪造的一段数字串，这段数字串同时也是对信息的发送者发送信息真实性的一个有效证明。
数字签名是对电子形式的消息进行签名的一种方法，一个签名消息能在一个通信网络中传输。基于公钥密码体制和私钥密码体制都可以获得数字签名，主要是基于公钥密码体制的数字签名。包括普通数字签名和特殊数字签名。普通数字签名算法有RSA、ElGamal、Fiat-Shamir、Guillou-Quisquarter、Schnorr、Ong-Schnorr-Shamir数字签名算法、Des/DSA，椭圆曲线数字签名算法和有限自动机数字签名算法等。
虽然利用数字签名可以验证签名者的身份。然而，在现有技术中，由于采用公钥加密私钥解密的加解密方式，仍然存在从加密文件中利用加密规则获取代码的风险，降低了加密文件的安全性。
针对上述技术问题，现有技术中尚无良好解决方案。
发明内容
本发明部分实施例的目的是提供一种方法及系统，该方法及系统提供新的文件签名方式，提高加密文件的安全性。
为了实现上述目的，本发明提供一种文件签名系统，该系统包括：
加密服务器，被配置成存储加密密钥；
签名客户端，被配置成根据待加密的文件生成加密信息，以及将所生成的加密信息发送至所述加密服务器；
所述加密服务器，被配置成在接收到所述加密信息之后，根据所述加密 密钥生成散列并发送回所述签名客户端；以及
所述签名客户端被配置成根据所述散列对所述待加密文件签名。
在一个实施例中，所述签名客户端被配置成，编译所述待加密的文件为二进制文件；以及根据所述二进制文件生成所述加密信息。
在一个实施例中，所述加密信息为所述二进制文件的信息摘要。
在一个实施例中，所述信息摘要为MD5码。
在一个实施例中，所述签名客户端被配置成，将所述散列添加在所述待加密文件后部，实现对所述待加密文件签名。
在一个实施例中，所述加密服务器和所述签名客户端通过应用程序接口API通信。
本发明的另一个方面，提供了一种文件签名方法，该方法包括：
根据待加密的文件生成加密信息；
将所生成的加密信息发送至加密服务器；
所述加密服务器在接收到所述加密信息之后，根据加密密钥生成散列；以及
根据所述散列对所述待加密文件签名。
在一个实施例中，该方法还包括：
编译所述待加密的文件为二进制文件；以及
根据所述二进制文件生成所述加密信息。
在一个实施例中，所述加密信息为所述二进制文件的信息摘要。
在一个实施例中，所述信息摘要为MD5码。
在一个实施例中，该方法还包括：
将所述散列添加在所述待加密文件后部，实现对所述待加密文件签名。
通过上述技术方案，利用加密服务器保存加密密钥，能够有效防止秘钥外泄，提高签名的安全性。
本发明的其它特征和优点将在随后的具体实施例部分予以详细说明。
附图说明
附图是用来提供对本发明的进一步理解，并且构成说明书的一部分，与下面的具体实施例一起用于解释本发明，但并不构成对本发明的限制。在附图中：
图1是本发明实施例提供的一种文件签名系统结构图；
图2是本发明实施例提供的一种文件签名方法流程图。
附图标记说明
1  加密服务器；       2  签名客户端。
具体实施例
以下结合附图对本发明的具体实施例进行详细说明。应当理解的是，此处所描述的具体实施例仅用于说明和解释本发明，并不用于限制本发明。
图1是本发明实施例提供的一种文件签名系统结构图。如图1所示，本发明提供一种文件签名系统，该系统可以包括：
加密服务器1，被配置成存储加密密钥；
签名客户端2，被配置成根据待加密的文件生成加密信息，以及将所生成的加密信息发送至所述加密服务器1；
所述加密服务器1，被配置成在接收到所述加密信息之后，根据所述加密密钥生成散列并发送回所述签名客户端2；以及
所述签名客户端2被配置成根据所述散列对所述待加密文件签名。
通过上述技术方案，利用加密服务器保存加密密钥，能够有效防止秘钥外泄，提高签名的安全性。
本领域技术人员可以理解，加密服务器的作用在于存储加密密钥以及根据加密密钥生成散列。加密服务器为了实现上述作用，需要具有存储和处理运算功能。在一个例子中，加密服务器的构成可以包括处理器、硬盘、内存、系统总线等，和通用的计算机架构类似，但是由于需要提供高可靠的服务，因此在处理能力、稳定性、可靠性、安全性、可扩展性、可管理性等方面要求较高。
在一个例子中，签名客户端可以是签名客户端程序，或者是安装了签名应用的终端或移动终端。这样的终端的例子包括但不限于个人电脑、手机、平板电脑以及个人数字助理(PDA)等。
在一个例子中，签名客户端可以被配置成，编译所述待加密的文件为二进制文件；以及根据所述二进制文件生成所述加密信息。在这样的例子中，要求签名客户端具有编译能力，即能够将某一种程序设计语言写的程序翻译成等价的另一种语言的程序。编译就是把高级语言变成计算机可以识别的2进制语言，计算机只认识1和0，编译程序把人们熟悉的语言换成2进制的。编译程序把一个源程序翻译成目标程序的工作过程分为五个阶段：词法分析；语法分析；语义检查和中间代码生成；代码优化；目标代码生成。主要是进行词法分析和语法分析，又称为源程序分析，分析过程中发现有语法错误，给出提示信息。
编译语言是一种以编译器来实现的编程语言。它不像直译语言一样，由解释器将代码一句一句运行，而是以编译器，先将代码编译为机器码，再加以运行。理论上，任何编程语言都可以是编译式，或直译式的。它们之间的区别，仅与程序的应用有关。
在一个例子中，根据所述二进制文件生成所述加密信息，其中加密信息可以是所述二进制文件的信息摘要，例如，MD5码。
在一个例子中，用于确保信息传输完整一致的MD5码，是计算机广泛 使用的杂凑算法之一(又称为摘要算法、哈希算法)，主流编程语言普遍已有MD5实现。将数据(如汉字)运算为另一固定长度值，是杂凑算法的基础原理，MD5的前身有MD2、MD3和MD4。
MD5算法具有以下特点：
1、压缩性：任意长度的数据，算出的MD5值长度都是固定的。
2、容易计算：从原数据计算出MD5值很容易。
3、抗修改性：对原数据进行任何改动，哪怕只修改1个字节，所得到的MD5值都有很大区别。
4、强抗碰撞：已知原数据和其MD5值，想找到一个具有相同MD5值的数据(即伪造数据)是非常困难的。
MD5的作用是让大容量信息在用数字签名软件签署私人密钥前被“压缩”成一种保密的格式(就是把一个任意长度的字节串变换成一定长的十六进制数字串)。
在一个例子中，所述签名客户端还可以被配置成，将所述散列添加在所述待加密文件后部，实现对所述待加密文件签名。其中，此例子中的待加密文件为二进制代码的形式，散列(例如，哈希码)的内容可以直接加载二进制代码之后，以实现对待加密文件的签名。
在一个例子中，所述加密服务器1和所述签名客户端2可以通过网络(例如，有线网络或无线网络)通过应用程序接口API通信。其中，API是一些预先定义的函数，目的是提供应用程序与开发人员基于某软件或硬件得以访问一组例程的能力，而又无需访问源码，或理解内部工作机制的细节。
API主要具有两种类型：
Windows API
API函数包含在Windows系统目录下的动态连接库文件中。Windows API是一套用来控制Windows的各个部件的外观和行为的预先定义的 Windows函数。用户的每个动作都会引发一个或几个函数的运行以告诉Windows发生了什么。这在某种程度上很像Windows的天然代码。而其他的语言只是提供一种能自动而且更容易的访问API的方法。当你点击窗体上的一个按钮时，Windows会发送一个消息给窗体，VB获取这个调用并经过分析后生成一个特定事件。
更易理解来说：Windows系统除了协调应用程序的执行、内存的分配、系统资源的管理外，同时他也是一个很大的服务中心。调用这个服务中心的各种服务(每一种服务就是一个函数)可以帮助应用程序达到开启视窗、描绘图形和使用周边设备等目的，由于这些函数服务的对象是应用程序，所以称之为Application Programming Interface，简称API函数。WIN32API也就是MicrosoftWindows 32位平台的应用程序编程接口。
凡是在Windows工作环境底下执行的应用程序，都可以调用Windows API。
linux API
在linux中，用户编程接口API遵循了UNIX中最流行的应用编程界面标准--POSIX标准。POSIX标准是由IEEE和ISO/IEC共同开发的标准系统。该标准基于当时现有的UNIX实践和经验，描述了操作系统的系统调用编程接口API，用于保证应用程序可以在源程序一级上在多种操作系统上移植运行。这些系统调用编程接口主要是通过C库(LIBC)来实现的。
图2是本发明的一个实施例提供的一种文件签名方法流程图。如图2所示，本发明的另一个方面，提供了一种文件签名方法，该方法包括：
根据待加密的文件生成加密信息；
将所生成的加密信息发送至加密服务器；
所述加密服务器在接收到所述加密信息之后，根据加密密钥生成散列；以及
根据所述散列对所述待加密文件签名。
上述方法可以在图1中提供的文件签名系统中实施。在一个例子中，该方法还可以包括：编译所述待加密的文件为二进制文件；以及根据所述二进制文件生成所述加密信息。该方法还可以包括：将所述散列添加在所述待加密文件后部，实现对所述待加密文件签名。
本发明提供的文件签名方法与系统，采用专用的加密服务器存储密钥，具有防止密钥外泄、提高签名的安全性的技术效果。
以上结合附图详细描述了本发明的一个例子，但是，本发明并不限于上述例子中的具体细节，在本发明的技术构思范围内，可以对本发明的技术方案进行多种简单变型，这些简单变型均属于本发明的保护范围。
另外需要说明的是，在上述具体例子中所描述的各个具体技术特征，在不矛盾的情况下，可以通过任何合适的方式进行组合。为了避免不必要的重复，本发明对各种可能的组合方式不再另行说明。
此外，本发明的各种不同的例子之间也可以进行任意组合，只要其不违背本发明的思想，其同样应当视为本发明所公开的内容。

Claims (11)

  1. 一种文件签名系统，包括：
    加密服务器，被配置成存储加密密钥；
    签名客户端，被配置成根据待加密的文件生成加密信息，以及将所生成的加密信息发送至所述加密服务器；
    所述加密服务器，被配置成在接收到所述加密信息之后，根据所述加密密钥生成散列并发送回所述签名客户端；以及
    所述签名客户端被配置成根据所述散列对所述待加密文件签名。
  2. 根据权利要求1所述的文件签名系统，其中，所述签名客户端被配置成，编译所述待加密的文件为二进制文件；以及
    根据所述二进制文件生成所述加密信息。
  3. 根据权利要求2所述的文件签名系统，其中，所述加密信息为所述二进制文件的信息摘要。
  4. 根据权利要求3所述的文件签名系统，其中，所述信息摘要为MD5码。
  5. 根据权利要求1到4任一项所述的文件签名系统，其中，所述签名客户端被配置成，将所述散列添加在所述待加密文件后部，实现对所述待加密文件签名。
  6. 根据权利要求1至5中任意一项所述的文件签名系统，其中，所述加密服务器和所述签名客户端通过应用程序接口API通信。
  7. 一种文件签名方法，包括：
    根据待加密的文件生成加密信息；
    将所生成的加密信息发送至加密服务器；
    所述加密服务器在接收到所述加密信息之后，根据加密密钥生成散列；以及
    根据所述散列对所述待加密文件签名。
  8. 根据权利要求7所述的文件签名方法，其中，该方法还包括：
    编译所述待加密的文件为二进制文件；以及
    根据所述二进制文件生成所述加密信息。
  9. 根据权利要求8所述的文件签名方法，其中，所述加密信息为所述二进制文件的信息摘要。
  10. 根据权利要求9所述的文件签名方法，其中，所述信息摘要为MD5码。
  11. 根据权利要求7到10任一项所述的文件签名方法，其中，该方法还包括：
    将所述散列添加在所述待加密文件后部，实现对所述待加密文件签名。
PCT/CN2016/089542 2016-03-28 2016-07-10 文件签名系统及方法 Ceased WO2017166527A1 (zh)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US15/242,532 US20170279777A1 (en) 2016-03-28 2016-08-21 File signature system and method

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201610183197.6 2016-03-28
CN201610183197.6A CN105868647A (zh) 2016-03-28 2016-03-28 文件签名系统及方法

Related Child Applications (1)

Application Number Title Priority Date Filing Date
US15/242,532 Continuation US20170279777A1 (en) 2016-03-28 2016-08-21 File signature system and method

Publications (1)

Publication Number Publication Date
WO2017166527A1 true WO2017166527A1 (zh) 2017-10-05

Family

ID=56626062

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/089542 Ceased WO2017166527A1 (zh) 2016-03-28 2016-07-10 文件签名系统及方法

Country Status (2)

Country Link
CN (1) CN105868647A (zh)
WO (1) WO2017166527A1 (zh)

Families Citing this family (1)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN110298184A (zh) * 2019-06-28 2019-10-01 维沃移动通信有限公司 信息处理方法及终端设备

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101369889A (zh) * 2007-08-13 2009-02-18 深圳兆日技术有限公司 一种对文档进行电子签名的系统和方法
CN102014133A (zh) * 2010-11-26 2011-04-13 清华大学 在云存储环境下一种安全存储系统的实现方法
US20120066493A1 (en) * 2010-09-14 2012-03-15 Widergren Robert D Secure Transfer and Tracking of Data Using Removable Non-Volatile Memory Devices
CN105049213A (zh) * 2015-07-27 2015-11-11 小米科技有限责任公司 文件签名方法及装置

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101369889A (zh) * 2007-08-13 2009-02-18 深圳兆日技术有限公司 一种对文档进行电子签名的系统和方法
US20120066493A1 (en) * 2010-09-14 2012-03-15 Widergren Robert D Secure Transfer and Tracking of Data Using Removable Non-Volatile Memory Devices
CN102014133A (zh) * 2010-11-26 2011-04-13 清华大学 在云存储环境下一种安全存储系统的实现方法
CN105049213A (zh) * 2015-07-27 2015-11-11 小米科技有限责任公司 文件签名方法及装置

Also Published As

Publication number Publication date
CN105868647A (zh) 2016-08-17

Similar Documents

Publication Publication Date Title
US10997808B2 (en) Secure smart unlocking
KR102447251B1 (ko) 실링 엔클레이브로써의 데이터 실링해제
KR102467687B1 (ko) 크로스-플랫폼 엔클레이브 신원
RU2762141C2 (ru) Абстрактная идентификация анклава
Abadi Secrecy by typing in security protocols
KR102510273B1 (ko) 실링 엔클레이브로써의 데이터 실링
KR20030082485A (ko) 대칭 키 암호화에 기초한 데이터의 저장 및 검색
KR20030082484A (ko) 공개 키 암호화에 기초한 데이터의 저장 및 검색
US11497938B1 (en) System and method for general data protection regulation (GDPR) compliant hashing in blockchain ledgers
CN108199852A (zh) 一种鉴权方法、鉴权系统和计算机可读存储介质
CN109634615B (zh) 应用安装包的发布方法、验证方法和装置
CN114168909B (zh) 基于代码签名的程序保护方法、装置、设备和存储介质
JP7606531B2 (ja) モデル保護方法、装置、機器、システム、記憶媒体及びプログラム
Ahman et al. Recalling a witness: foundations and applications of monotonic state
Bhargavan et al. Formal security and functional verification of cryptographic protocol implementations in rust
CN112115430A (zh) 一种apk的加固方法、电子设备及存储介质
KR20170089352A (ko) 가상화 시스템에서 수행하는 무결성 검증 방법
US20220035924A1 (en) Service trust status
CN110602051B (zh) 基于共识协议的信息处理方法及相关装置
WO2017166527A1 (zh) 文件签名系统及方法
Pop et al. Secure migration of WebAssembly-based mobile agents between secure enclaves
CN118740391A (zh) 设备级安全增强协同签名方法、装置、电子设备和存储介质
CN115001782B (zh) 接口请求参数的处理方法、装置、设备及存储介质
CN113987597B (zh) 一种为应用分配账号的方法和装置
Adao et al. Type-based analysis of generic key management apis

Legal Events

Date Code Title Description
NENP Non-entry into the national phase

Ref country code: DE

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16896299

Country of ref document: EP

Kind code of ref document: A1

122 Ep: pct application non-entry in european phase

Ref document number: 16896299

Country of ref document: EP

Kind code of ref document: A1