WO2019127863A1

WO2019127863A1 - Key saving device and method, key obtaining device and method, and computer readable storage medium

Info

Publication number: WO2019127863A1
Application number: PCT/CN2018/076108
Authority: WO
Inventors: 易小安
Original assignee: 平安科技（深圳）有限公司
Priority date: 2017-12-29
Filing date: 2018-02-10
Publication date: 2019-07-04
Also published as: CN108282330A

Abstract

Disclosed in the present application is a key saving device, comprising a memory and a processor. A key saving program that can be run on the processor is stored on the memory. The program is executed by the processor to implement the following steps: obtaining a first key string to be saved; generating a random string on the basis of a random string generator and storing the random string to a privileged account management system; converting the first key string according to the random string to generate a second key string; encrypting the second key string by means of an encryption algorithm to generate a third key string, adding the third key string to a key configuration file, and sending the key configuration file to a key obtaining device for the key obtaining device to store and use. The present application also provides a key saving method, a key obtaining device and method, and a computer readable storage medium. The present application improves the security of key storage.

Description

Key saving and acquiring device, method and computer readable storage medium

The present application is based on the priority of the Chinese Patent Application entitled "Key Storage and Acquisition Device, Method and Computer-Readable Storage Medium" filed on Dec. 29, 2017, filed on Dec. 29, 2017, which is entitled The overall content is incorporated herein by reference.

Technical field

The present application relates to the field of information security technologies, and in particular, to a key storage and retrieval device, method, and computer readable storage medium.

Background technique

In the scheme of encrypting and transmitting information by using a key, the key needs to be stored securely. The currently widely used key storage method is to encrypt the key and save it on the device by using a user password, for example, a key. The content is directly configured in the configuration file after simple processing such as BASE64 encoding or hexadecimal encoding. For this type of storage, the security of the key storage is low. If the device is attacked, the attacker can easily obtain the key stored on the device, and then use the stolen key to impersonate the legitimate user to decrypt the information. The danger of encrypted information being stolen.

Summary of the invention

The present application provides a key storage and retrieval device, method, and computer readable storage medium, the main purpose of which is to improve the security of key storage.

To achieve the above object, the present application provides a key storage apparatus including a memory and a processor, wherein the memory stores a key save program executable on the processor, the key save program being The processor implements the following steps when executed:

Obtaining a first key string to be saved;

Generating a random string based on the random string generator, and storing the random string to the privileged account management system;

Performing transformation processing on the first key string according to the random string to generate a second key string, wherein the second key string is the same as the character in the first key string , the order of characters is different;

Encrypting the second key string using a preset encryption algorithm to generate a third key string, and adding the third key string to the key configuration file;

Sending the key configuration file to the key obtaining apparatus, for the key obtaining apparatus to use the third key character according to the random character string and a preset decryption algorithm corresponding to the preset encryption algorithm After the string is converted into the first key string, the first key string is used for encryption or decryption operations.

In addition, in order to achieve the above object, the present application provides a key obtaining apparatus, which includes a memory and a processor, wherein the memory stores a key acquisition program executable on the processor, the key acquisition The program implements the following steps when executed by the processor:

When the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random character string corresponding to the third key string is obtained from the privileged account management system;

Performing a reverse decryption operation on the third key string by using the random string and a preset decryption algorithm to obtain a second key string;

Performing inverse transform processing on the second key string according to the obtained random string to generate a first key string;

The target information is encrypted or decrypted using the first key string.

In addition, to achieve the above object, the present application further provides a key saving method, where the method includes:

Obtaining a first key string to be saved;

Encrypting the second key string to generate a third key string using a preset encryption algorithm, and adding the third key string to the key configuration file;

In addition, to achieve the above object, the present application further provides a key acquisition method, where the method includes:

The target information is encrypted or decrypted using the first key string.

Moreover, in order to achieve the above object, the present application further provides a computer readable storage medium having a key save program stored thereon, the key save program being executable by one or more processors, To achieve the following steps:

Obtaining a first key string to be saved;

In addition, in order to achieve the above object, the present application further provides a computer readable storage medium having a key acquisition program stored thereon, the key acquisition program being executable by one or more processors, To achieve the following steps:

The target information is encrypted or decrypted using the first key string.

The device, the method, and the computer readable storage medium provided by the application, after acquiring the first key string to be saved, generate a random string based on the random string generator, and store the random string to the privileged account management. The system performs a transform process on the first key string according to the random string to generate a second key string, the second key string being the same as the characters in the first key string, and the order of the characters is different. Applying a preset encryption algorithm, the second key string is encrypted to generate a third key string, adding the third key string to the key configuration file, and transmitting the key configuration file to the key acquisition device. The key obtaining apparatus may convert the third key string into the first key string according to the random string and the preset decryption algorithm corresponding to the preset encryption algorithm, and then use the first key string to encrypt or decrypt. Operation, the above solution converts the key to be saved based on the random string, and encrypts it and sends it to the key acquisition device. Even if the key is acquired by the attacker, the random string and the decryption algorithm cannot be obtained. In this case, the key cannot be used to decrypt the information; and the random string is stored in the privileged account management system and is not transmitted between the sender of the message and the device of the receiver, thereby further improving the security of the key storage. .

DRAWINGS

1 is a schematic diagram of a preferred embodiment of a key storage device of the present application;

2 is a schematic diagram of a program module of a key saving program in an embodiment of a key holding device of the present application;

3 is a flowchart of a preferred embodiment of a key saving method of the present application;

4 is a schematic diagram of a preferred embodiment of a key acquisition apparatus of the present application;

FIG. 5 is a flowchart of a preferred embodiment of a key acquisition method of the present application.

The implementation, functional features and advantages of the present application will be further described with reference to the accompanying drawings.

Detailed ways

It is understood that the specific embodiments described herein are merely illustrative of the application and are not intended to be limiting.

The application provides a key storage device. Referring to FIG. 1, a schematic diagram of a preferred embodiment of a key storage device of the present application is shown.

In this embodiment, the key storage device may be a PC (Personal Computer), or may be a terminal device such as a smart phone, a tablet computer, an e-book reader, or a portable computer.

The key holding means includes at least a memory 11, a processor 12, a communication bus 13, and a network interface 14.

The memory 11 includes at least one type of readable storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (for example, an SD or DX memory, etc.), a magnetic memory, a magnetic disk, an optical disk, and the like. The memory 11 may in some embodiments be an internal storage unit of a key holding device, such as a hard disk of the key holding device. The memory 11 may also be an external storage device of the key storage device in other embodiments, such as a plug-in hard disk equipped with a key storage device, a smart memory card (SMC), and a secure digital (Secure Digital, SD) card, flash card, etc. Further, the memory 11 may also include both an internal storage unit of the key holding device and an external storage device. The memory 11 can be used not only for storing application software installed in the key holding device and various types of data, such as code of a key save program, but also for temporarily storing data that has been output or is to be output.

The processor 12, in some embodiments, may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor or other data processing chip for running program code or processing stored in the memory 11. Data, such as executing a key save program.

Communication bus 13 is used to implement connection communication between these components.

The network interface 14 can optionally include a standard wired interface, a wireless interface (such as a WI-FI interface), and is typically used to establish a communication connection between the device and other electronic devices.

Figure 1 shows only the key holding device with components 11-14 and the key save program, but it should be understood that not all illustrated components may be implemented, and more or fewer components may be implemented instead.

Optionally, the device may further include a user interface, the user interface may include a display, an input unit such as a keyboard, and the optional user interface may further include a standard wired interface and a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch sensor, or the like. The display may also be suitably referred to as a display screen or display unit for displaying information processed in the key holding device and a user interface for displaying the visualization.

Optionally, the device may also include a touch sensor. The area provided by the touch sensor for the user to perform a touch operation is referred to as a touch area. Further, the touch sensor described herein may be a resistive touch sensor, a capacitive touch sensor, or the like. Moreover, the touch sensor includes not only a contact type touch sensor but also a proximity type touch sensor or the like. In addition, the touch sensor may be a single sensor or a plurality of sensors arranged in an array. The area of the display of the device may be the same as or different from the area of the touch sensor. Optionally, a display is stacked with the touch sensor to form a touch display. The device detects a user-triggered touch operation based on a touch screen display.

Optionally, the device may further include a camera, an RF (Radio Frequency) circuit, a sensor, an audio circuit, a WiFi module, and the like. Among them, sensors such as light sensors, motion sensors, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein if the device is a mobile terminal, the ambient light sensor may adjust the brightness of the display screen according to the brightness of the ambient light, and the proximity sensor may move when the mobile terminal moves to the ear. , turn off the display and / or backlight. As a kind of motion sensor, the gravity acceleration sensor can detect the magnitude of acceleration in each direction (usually three axes), and can detect the magnitude and direction of gravity when stationary, and can be used to identify the posture of the mobile terminal (such as horizontal and vertical screen switching, Related games, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tapping), etc.; of course, the mobile terminal can also be equipped with other sensors such as gyroscope, barometer, hygrometer, thermometer, infrared sensor, etc. No longer.

In the apparatus embodiment shown in FIG. 1, a key save program is stored in the memory 11; when the processor 12 executes the key save program stored in the memory 11, the following steps are implemented:

Get the first key string to be saved.

A random string is generated based on the random string generator, and the random string is stored to the privileged account management system.

It should be noted that the first key string to be saved in this embodiment may be obtained from an encryption machine or generated according to a preset key generation rule. After obtaining the first key string to be saved, acquiring a random string based on the random string generator, and storing the random string in the privileged account management system for permission to log in to the privileged account management system The key recipient gets a random string from the system.

Regarding the privileged account management system described above, the random string storage management can be performed, and only the privileged user can log in to the system to obtain a random character string. Therefore, in this embodiment, the random string is not required to be carried in the configuration file, and the key is not required to be transmitted between the sender of the key and the device of the receiver, thereby further improving the security of the key storage.

Performing transformation processing on the first key string according to the random string to generate a second key string, wherein the second key string is the same as the character in the first key string The order of characters is different. In some embodiments, the first key string is transformed according to the random string, and the step of generating the second key string includes: performing the random string according to a preset key length. The modulo operation uses the result of the modulo operation as a displacement parameter; the first key string is subjected to a displacement process according to the displacement parameter to generate the second key string. Assuming that the preset key length is 2048 and the random string is k, the modulo operation is calculated according to e=k mod 2048 to obtain the displacement parameter e. The e-th bit and the 2048-e bit of the first key string are extracted, and placed at the first and last ends of the key respectively to obtain a second key string. Or in other embodiments, other displacement processing may be adopted. First, the odd number in the first key string is converted into an even number, and the e-th bit and the 2048-e bit of the first key string are extracted. , respectively, at the first and last ends of the key to get the second key string. There are many other types of displacement processing, which are not listed here.

In other embodiments, a random string may also be inserted at a specific location in the first key string to confuse the first key string, wherein the first key string is the same as the random string The hex.

In some embodiments, the foregoing preset encryption algorithm may be a DES (Data Encryption Standard) encryption algorithm or an AES (Advanced Encryption Standard) encryption algorithm. In addition, when encrypting, the above random character string can be used as a key. After the encryption is performed according to the above encryption algorithm, a third key string is generated, and the third key string is added to the key configuration file and sent to the key acquisition device.

For the key acquisition device, after receiving the key configuration file sent by the key storage device, it is stored in a preset storage area. When the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random character string corresponding to the third key string is obtained from the privileged account management system;

The target information is encrypted or decrypted using the first key string.

When the key acquisition apparatus needs to perform encryption and decryption operations on the target information by using the key, the stored key configuration file is read from the preset storage area, and the third key string is extracted therefrom. The string cannot be used for encryption and decryption. In this case, you need to log in to the privilege management system to obtain a random string corresponding to the third key string. Use the random string and the default decryption algorithm for the third key. The key string is reversely decrypted to obtain a second key string, and the displacement parameter is calculated according to the same method as above, and the second key string is reversely deformed using the displacement parameter to generate a first key. String. It should be noted that the preset encryption algorithm is a reversible encryption algorithm.

Optionally, in order to protect the first key string and the random string from being leaked, after the encryption and decryption operation is completed, the random string and the first key string in the cache are deleted.

In addition, it can be understood that the present embodiment provides that the key saving apparatus is not limited to only having the function of processing and safely storing the first key string to be saved, and in other embodiments, by performing the above The step implementation converts the third key string into a first key string for encrypting and decrypting the information.

After acquiring the first key string to be saved, the foregoing apparatus according to the embodiment generates a random character string based on the random string generator, and stores the random string in the privileged account management system according to the random string pair. A key string is transformed to generate a second key string, the second key string being the same as the characters in the first key string, and the order of the characters is different. Applying a preset encryption algorithm, the second key string is encrypted to generate a third key string, adding the third key string to the key configuration file, and transmitting the key configuration file to the key acquisition device. The key obtaining apparatus may convert the third key string into the first key string according to the random string and the preset decryption algorithm corresponding to the preset encryption algorithm, and then use the first key string to encrypt or decrypt. Operation, the above solution converts the key to be saved based on the random string, and encrypts it and sends it to the key acquisition device. Even if the key is acquired by the attacker, the random string and the decryption algorithm cannot be obtained. In this case, the key cannot be used to decrypt the information; and the random string is stored in the privileged account management system and is not transmitted between the sender of the message and the device of the receiver, thereby further improving the security of the key storage. .

Optionally, in other embodiments, the key save program may also be divided into one or more modules, one or more modules are stored in the memory 11 and are composed of one or more processors (this embodiment) Illustrated by the processor 12) to complete the application, a module referred to herein refers to a series of computer program instructions that are capable of performing a particular function for describing the execution of a key save program in a key holding device.

For example, referring to FIG. 2, it is a schematic diagram of a program module of a key saving program in an embodiment of the key storage device of the present application. In this embodiment, the key saving program may be divided into an obtaining module 110 and a storage module 120. The transform module 130, the encryption module 140, and the sending module 150 are exemplarily:

The obtaining module 110 is configured to: acquire a first key string to be saved;

The storage module 120 is configured to: generate a random string based on the random string generator, and store the random string into the privileged account management system;

The transform module 130 is configured to: perform a transform process on the first key string according to the random string to generate a second key string, where the second key string and the first key The characters in the string are the same and the characters are arranged in different order;

The encryption module 140 is configured to: perform encryption processing on the second key string by using a preset encryption algorithm to generate a third key string, and add the third key string to the key configuration file;

The sending module 150 is configured to send the key configuration file to the key obtaining apparatus, where the key obtaining apparatus sends the key acquiring apparatus according to the random character string and a preset decryption algorithm corresponding to the preset encryption algorithm. After the third key string is converted into the first key string, the first key string is used for encryption or decryption operations.

The functions or operation steps of the above-mentioned acquisition module 110, the storage module 120, the conversion module 130, the encryption module 140, and the transmission module 50 are substantially the same as those in the above embodiment, and are not described herein again.

In addition, the present application also provides a key saving method. Referring to FIG. 3, it is a flowchart of a preferred embodiment of the key saving method of the present application. The method can be performed by a device that can be implemented by software and/or hardware.

In this embodiment, the key saving method includes:

Step S110: Acquire a first key string to be saved.

Step S120: Generate a random character string based on the random string generator, and store the random string into the privileged account management system.

In the following embodiment, the method of the present embodiment is described by using the key storage device as an execution entity. In addition, it should be noted that the first key string to be saved in this embodiment may be obtained from the encryption machine, or Pre-set key generation rules are generated. After obtaining the first key string to be saved, acquiring a random string based on the random string generator, and storing the random string in the privileged account management system for permission to log in to the privileged account management system The key recipient gets a random string from the system.

Step S130: Perform a transform process on the first key string according to the random string to generate a second key string, where the second key string and the first key string are The characters are the same and the characters are arranged in different order. In some embodiments, the first key string is transformed according to the random string, and the step of generating the second key string includes: performing the random string according to a preset key length. The modulo operation uses the result of the modulo operation as a displacement parameter; the first key string is subjected to a displacement process according to the displacement parameter to generate the second key string. Assuming that the preset key length is 2048 and the random string is k, the modulo operation is calculated according to e=k mod 2048 to obtain the displacement parameter e. The e-th bit and the 2048-e bit of the first key string are extracted, and placed at the first and last ends of the key respectively to obtain a second key string. Or in other embodiments, other displacement processing may be adopted. First, the odd number in the first key string is converted into an even number, and the e-th bit and the 2048-e bit of the first key string are extracted. , respectively, at the first and last ends of the key to get the second key string. There are many other types of displacement processing, which are not listed here.

Step S140, performing encryption processing on the second key string by using a preset encryption algorithm to generate a third key string, and adding the third key string to the key configuration file;

Step S150: Send the key configuration file to the key obtaining apparatus, so that the key obtaining apparatus sets the third according to the random character string and a preset decryption algorithm corresponding to the preset encryption algorithm. After the key string is converted into the first key string, the first key string is used for encryption or decryption operations.

The target information is encrypted or decrypted using the first key string.

The key saving method in this embodiment obtains a first key string to be saved, generates a random string based on the random string generator, and stores the random string in the privileged account management system according to the random string. Transforming the first key string to generate a second key string, the second key string being the same as the characters in the first key string, and the order of the characters is different. Applying a preset encryption algorithm, the second key string is encrypted to generate a third key string, adding the third key string to the key configuration file, and transmitting the key configuration file to the key acquisition device. The key obtaining apparatus may convert the third key string into the first key string according to the random string and the preset decryption algorithm corresponding to the preset encryption algorithm, and then use the first key string to encrypt or decrypt. Operation, the above solution converts the key to be saved based on the random string, and encrypts it and sends it to the key acquisition device. Even if the key is acquired by the attacker, the random string and the decryption algorithm cannot be obtained. In this case, the key cannot be used to decrypt the information; and the random string is stored in the privileged account management system and is not transmitted between the sender of the message and the device of the receiver, thereby further improving the security of the key storage. .

In addition, the present application also provides a key acquisition apparatus. Referring to FIG. 4, it is a schematic diagram of a preferred embodiment of a key acquisition apparatus of the present application.

In this embodiment, the key acquisition device may be a PC (Personal Computer), or may be a terminal device such as a smart phone, a tablet computer, an e-book reader, or a portable computer.

The key acquisition means includes at least a memory 21, a processor 22, a communication bus 23, and a network interface 24.

The memory 21 includes at least one type of readable storage medium including a flash memory, a hard disk, a multimedia card, a card type memory (for example, an SD or DX memory, etc.), a magnetic memory, a magnetic disk, an optical disk, and the like. The memory 21 may be an internal storage unit of the key acquisition device, such as a hard disk of the key acquisition device, in some embodiments. The memory 21 may also be an external storage device of the key acquisition device in other embodiments, such as a plug-in hard disk equipped on the key acquisition device, a smart memory card (SMC), and a secure digital (Secure Digital, SD) card, flash card, etc. Further, the memory 21 may also include both an internal storage unit of the key acquisition device and an external storage device. The memory 21 can be used not only for storing application software installed in the key acquisition device and various types of data, such as code of a key acquisition program, but also for temporarily storing data that has been output or is to be output.

The processor 22, in some embodiments, may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor or other data processing chip for running program code or processing stored in the memory 21. Data, such as executing a key acquisition program.

Communication bus 23 is used to implement connection communication between these components.

The network interface 24 can optionally include a standard wired interface, a wireless interface (such as a WI-FI interface), and is typically used to establish a communication connection between the device and other electronic devices.

Figure 4 shows only the key acquisition means with components 21-24 and the key acquisition procedure, but it should be understood that not all illustrated components may be implemented, and more or fewer components may be implemented instead.

Optionally, the device may further include a user interface, the user interface may include a display, an input unit such as a keyboard, and the optional user interface may further include a standard wired interface and a wireless interface. Optionally, in some embodiments, the display may be an LED display, a liquid crystal display, a touch-sensitive liquid crystal display, an OLED (Organic Light-Emitting Diode) touch sensor, or the like. The display may also be suitably referred to as a display screen or display unit for displaying information processed in the key acquisition device and a user interface for displaying visualizations.

Optionally, the device may also include a touch sensor. The area provided by the touch sensor for the user to perform a touch operation is referred to as a touch area. Further, the touch sensor described herein may be a resistive touch sensor, a capacitive touch sensor, or the like. Moreover, the touch sensor includes not only a contact type touch sensor but also a proximity type touch sensor or the like. Furthermore, the touch sensor can be a single sensor or a plurality of sensors arranged in an array. The area of the display of the device may be the same as or different from the area of the touch sensor. Optionally, a display is stacked with the touch sensor to form a touch display. The device detects a user-triggered touch operation based on a touch screen display.

In the apparatus embodiment shown in FIG. 4, a key acquisition program is stored in the memory 21; when the processor 22 executes the key acquisition program stored in the memory 21, the following steps are implemented:

Performing a reverse decryption operation on the third key string by using a random string and a preset decryption algorithm to obtain a second key string;

Performing an inverse transform process on the second key string according to the obtained random string to generate a first key string;

The target information is encrypted or decrypted using the first key string.

For a specific implementation of the key acquisition apparatus proposed in this embodiment, refer to the description in the foregoing embodiment of the key storage apparatus, and details are not described herein again.

Optionally, the second key string is inversely transformed according to the obtained random string, and the step of generating the first key string includes: performing a modular operation on the random string according to a preset key length, and The result of the operation is used as a displacement parameter; the second key string is reversely deformed to generate a first key string.

Optionally, the key obtaining program may be further executed by the processor to perform the following steps after the step of encrypting or decrypting the target information by using the first key string: after completing the encryption or decryption operation, Delete the random string and the first key string in the cache.

In addition, the present application also provides a key acquisition method. Referring to FIG. 5, it is a flowchart of a preferred embodiment of the key acquisition method of the present application. The method can be performed by a device that can be implemented by software and/or hardware.

In this embodiment, the key acquisition method includes:

In step S210, when the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random character string corresponding to the third key string is obtained from the privileged account management system;

Step S220: Perform a reverse decryption operation on the third key string by using a random string and a preset decryption algorithm to obtain a second key string.

Step S230: Perform inverse transform processing on the second key string according to the obtained random character string to generate a first key string.

Step S240, using the first key string to encrypt or decrypt the target information.

For a specific implementation of the key acquisition method in this embodiment, refer to the description in the foregoing embodiment of the key storage method, and details are not described herein again.

In addition, the embodiment of the present application further provides a computer readable storage medium, where the key storage program is stored on the computer readable storage medium, and the key saving program can be executed by one or more processors to implement the following operating:

Obtaining a first key string to be saved;

In addition, the embodiment of the present application further provides a computer readable storage medium, where the computer readable storage medium stores a key acquisition program, and the acquisition save program can be executed by one or more processors to implement the following operations. :

When the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random string corresponding to the third key string is obtained from the privileged account management system; And performing a reverse decryption operation on the third key string by using a random string and a preset decryption algorithm to obtain a second key string; performing inverse transformation on the second key string according to the obtained random string Processing, generating a first key string; using the first key string to encrypt or decrypt the target information.

The specific embodiment of the computer readable storage medium of the present application is substantially the same as the foregoing key storage device and method, or the key acquisition device and method embodiments, and will not be described herein.

It should be noted that the foregoing serial numbers of the embodiments of the present application are merely for the description, and do not represent the advantages and disadvantages of the embodiments. And the terms "including", "comprising", or any other variations thereof are intended to encompass a non-exclusive inclusion, such that a process, apparatus, article, or method that comprises a plurality of elements includes not only those elements but also Other elements listed, or elements that are inherent to such a process, device, item, or method. An element that is defined by the phrase "comprising a ..." does not exclude the presence of additional equivalent elements in the process, the device, the item, or the method that comprises the element.

Through the description of the above embodiments, those skilled in the art can clearly understand that the foregoing embodiment method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be through hardware, but in many cases, the former is better. Implementation. Based on such understanding, the technical solution of the present application, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a storage medium (such as ROM/RAM as described above). , a disk, an optical disk, including a number of instructions for causing a terminal device (which may be a mobile phone, a computer, a server, or a network device, etc.) to perform the methods described in the various embodiments of the present application.

The above is only a preferred embodiment of the present application, and is not intended to limit the scope of the patent application, and the equivalent structure or equivalent process transformations made by the specification and the drawings of the present application, or directly or indirectly applied to other related technical fields. The same is included in the scope of patent protection of this application.

Claims

A key holding device, comprising: a memory and a processor, wherein the memory stores a key save program executable on the processor, the key save program being processed The following steps are implemented when the device is executed:

Obtaining a first key string to be saved;

Generating a random string based on the random string generator, and storing the random string to the privileged account management system;

Performing transformation processing on the first key string according to the random string to generate a second key string, wherein the second key string is the same as the character in the first key string , the order of characters is different;

Encrypting the second key string to generate a third key string using a preset encryption algorithm, and adding the third key string to the key configuration file;

Sending the key configuration file to the key obtaining apparatus, for the key obtaining apparatus to use the third key character according to the random character string and a preset decryption algorithm corresponding to the preset encryption algorithm After the string is converted into the first key string, the first key string is used for encryption or decryption operations.
The key storage device according to claim 1, wherein the step of transforming the first key string according to the random character string to generate a second key string comprises:

Performing a modulo operation on the random string according to a preset key length, and using the result of the modulo operation as a displacement parameter;

The first key string is subjected to a displacement process according to the displacement parameter to generate the second key string.
The key storage device according to claim 2, wherein the preset encryption algorithm is a preset encryption algorithm, which may be a DES encryption algorithm or an AES encryption algorithm.
A key acquisition apparatus, comprising: a memory and a processor, wherein the memory stores a key acquisition program executable on the processor, the key acquisition program being processed by the key The following steps are implemented when the device is executed:

When the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random character string corresponding to the third key string is obtained from the privileged account management system;

Performing a reverse decryption operation on the third key string by using the random string and a preset decryption algorithm to obtain a second key string;

Performing inverse transform processing on the second key string according to the obtained random string to generate a first key string;

The target information is encrypted or decrypted using the first key string.
The key acquisition apparatus according to claim 4, wherein the step of performing inverse transform processing on the second key string according to the acquired random character string to generate the first key string includes :

Performing a modulo operation on the random string according to a preset key length, and using the result of the modulo operation as a displacement parameter;

Performing reverse displacement processing on the second key string to generate the first key string.
The key acquisition apparatus according to claim 4, wherein said key acquisition program is further executable by said processor to encrypt or decrypt the target information using said first key string After the steps of the operation, the following steps are also implemented:

After completing the encryption or decryption operation, the random string in the cache and the first key string are deleted.
A key acquisition apparatus according to claim 5, wherein said key acquisition program is further executable by said processor to encrypt or decrypt the target information using said first key string After the steps of the operation, the following steps are also implemented:

After completing the encryption or decryption operation, the random string in the cache and the first key string are deleted.
A key saving method, the method comprising:

Obtaining a first key string to be saved;

Generating a random string based on the random string generator, and storing the random string to the privileged account management system;

Performing transformation processing on the first key string according to the random string to generate a second key string, wherein the second key string is the same as the character in the first key string , the order of characters is different;

Encrypting the second key string to generate a third key string using a preset encryption algorithm, and adding the third key string to the key configuration file;

Sending the key configuration file to the key obtaining apparatus, for the key obtaining apparatus to use the third key character according to the random character string and a preset decryption algorithm corresponding to the preset encryption algorithm After the string is converted into the first key string, the first key string is used for encryption or decryption operations.
The key storage method according to claim 8, wherein the step of transforming the first key string according to the random character string to generate a second key string comprises:

Performing a modulo operation on the random string according to a preset key length, and using the result of the modulo operation as a displacement parameter;

The first key string is subjected to a displacement process according to the displacement parameter to generate the second key string.
The key saving method according to claim 9, wherein the preset encryption algorithm is a preset encryption algorithm, which may be a DES encryption algorithm or an AES encryption algorithm.
A key acquisition method, the method comprising:

When the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random character string corresponding to the third key string is obtained from the privileged account management system;

Performing a reverse decryption operation on the third key string by using the random string and a preset decryption algorithm to obtain a second key string;

Performing inverse transform processing on the second key string according to the obtained random string to generate a first key string;

The target information is encrypted or decrypted using the first key string.
The key acquisition method according to claim 11, wherein the step of performing inverse transform processing on the second key string according to the obtained random character string, the step of generating the first key string includes :

Performing a modulo operation on the random string according to a preset key length, and using the result of the modulo operation as a displacement parameter;

Performing reverse displacement processing on the second key string to generate the first key string.
The key acquisition method according to claim 11, wherein after the step of encrypting or decrypting the target information using the first key string, the method further comprises the step of: completing the encryption Or after the decryption operation, the random string in the cache and the first key string are deleted.
The key acquisition method according to claim 12, wherein after the step of encrypting or decrypting the target information using the first key string, the method further comprises the step of: completing the encryption Or after the decryption operation, the random string in the cache and the first key string are deleted.
A computer readable storage medium, characterized in that the computer readable storage medium stores a key save program, and the key save program can be executed by one or more processors to implement the following steps:

Obtaining a first key string to be saved;

Generating a random string based on the random string generator, and storing the random string to the privileged account management system;

Performing transformation processing on the first key string according to the random string to generate a second key string, wherein the second key string is the same as the character in the first key string , the order of characters is different;

Encrypting the second key string to generate a third key string using a preset encryption algorithm, and adding the third key string to the key configuration file;

Sending the key configuration file to the key obtaining apparatus, for the key obtaining apparatus to use the third key character according to the random character string and a preset decryption algorithm corresponding to the preset encryption algorithm After the string is converted into the first key string, the first key string is used for encryption or decryption operations.
The computer readable storage medium according to claim 15, wherein the step of transforming the first key string according to the random character string to generate a second key string comprises:

Performing a modulo operation on the random string according to a preset key length, and using the result of the modulo operation as a displacement parameter;

The first key string is subjected to a displacement process according to the displacement parameter to generate the second key string.
A computer readable storage medium, characterized in that the computer readable storage medium stores a key acquisition program, and the key acquisition program can be executed by one or more processors to implement the following steps:

When the target information is to be encrypted or decrypted, the third key character is obtained from the preset storage area, and the random character string corresponding to the third key string is obtained from the privileged account management system;

Performing a reverse decryption operation on the third key string by using the random string and a preset decryption algorithm to obtain a second key string;

Performing inverse transform processing on the second key string according to the obtained random string to generate a first key string;

The target information is encrypted or decrypted using the first key string.
The computer readable storage medium according to claim 17, wherein said step of performing inverse transform processing on said second key string according to said obtained random character string to generate a first key string include:

Performing a modulo operation on the random string according to a preset key length, and using the result of the modulo operation as a displacement parameter;

Performing reverse displacement processing on the second key string to generate the first key string.
The computer readable storage medium of claim 17 wherein said key acquisition program is further executable by said one or more processors to use said first key string against said target After the step of performing the encryption or decryption operation, the following steps are further performed: after the encryption or decryption operation is completed, the random character string and the first key string in the cache are deleted.
A computer readable storage medium as recited in claim 18, wherein said key acquisition program is further executable by said one or more processors to use said first key string against said target After the step of performing the encryption or decryption operation, the following steps are further performed: after the encryption or decryption operation is completed, the random character string and the first key string in the cache are deleted.