WO2021057073A1

WO2021057073A1 - Private key generation and use method, apparatus and device in asymmetric key

Info

Publication number: WO2021057073A1
Application number: PCT/CN2020/093966
Authority: WO
Inventors: 潘无穷
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2019-09-24
Filing date: 2020-06-02
Publication date: 2021-04-01
Also published as: CN110650010A; CN110650010B; TWI736271B; TW202113646A

Abstract

Provided are a private key generation and use method, apparatus and device in an asymmetric key. The private key generation and use method in an asymmetric key comprises: acquiring an asymmetric key generation request; generating a user private key according to the asymmetric key generation request, wherein the user private key comprises a plurality of user private key components; encrypting the plurality of user private key components by using a pre-determined encryption method to obtain a plurality of corresponding user private key component ciphertexts, wherein at least two of the plurality of user private key components are encrypted by using different pre-determined encryption methods; and storing the plurality of user private key component ciphertexts in the same device.

Description

Method, device and equipment for generating and using private key in asymmetric key

Technical field

This application relates to the field of data security technology, and in particular to a method, device and equipment for generating and using a private key in an asymmetric key.

Background technique

The key has an extremely important position in a cryptographic system. In the encryption system, only the user who has the legal key can perform the decryption operation; in the signature system, only the user who has the legal key can generate a valid signature. The cryptosystem in use now consists of an algorithm and a key. Under the premise that the algorithm of the cryptosystem is public, the security of the cryptosystem completely depends on the security of the key. At present, digital signature and encryption and decryption technologies based on public key cryptography have been widely used in identity authentication, e-commerce and other fields, and become an important tool to ensure information security. Among them, the security of the key (private key) is to ensure these applications The foundation of security.

Generally, a hardware cryptographic module and/or a software cryptographic module can be used to protect the key. Generally speaking, hardware cryptographic modules are suitable for protecting key parts of important systems, and for other parts, software cryptographic modules are more suitable. The application range of software cryptographic modules is wider. At present, cryptographic application scenarios are extremely wide. There are a large number of application scenarios that are not suitable for using hardware cryptographic modules. For example, mobile terminals cannot deploy hardware cryptographic modules due to size limitations; Internet Information Center due to the rapid deployment of products The hardware cryptographic module cannot be fully deployed due to the demand. Compared with traditional hardware cryptographic modules, software cryptographic modules have the advantages of low cost and easy deployment.

In order to improve the security of key protection, the software cryptographic module of the prior art can use distributed means to protect the key. Specifically, the key is divided into several components and stored in multiple different physical devices. Each cryptographic operation must be completed by the cooperation of these devices. The limitation of these methods is that the key is scattered on multiple other devices that are connected to the user side, which has a high system construction cost, and when the key components stored on different devices are used, the difference between each storage device The interaction process between the two is complicated, the number of communication is numerous, and the communication cost is relatively high.

Summary of the invention

In view of this, the embodiments of the present application provide a method, device, and equipment for generating and using a private key in an asymmetric key, which are used to ensure the security of the storage of the private key while reducing the amount of communication between servers when the private key is used. Communication interaction, reducing communication costs and reducing communication delays.

In order to solve the above technical problems, the embodiments of this specification are implemented as follows:

An embodiment of this specification provides a method for generating a private key in an asymmetric key, including: obtaining an asymmetric key generation request; generating a user private key according to the asymmetric key generation request, and the user private key includes Multiple user private key components; using a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components Using different predetermined encryption methods to encrypt; storing the multiple user private key component ciphertexts in the same device.

An embodiment of this specification provides a method for using a private key in an asymmetric key, including: obtaining more than a predetermined number of user private key component cipher texts from the same device, wherein the user private key component cipher text is based on the above Obtained by the asymmetric key generation method; using a predetermined decryption method to decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than a predetermined number, wherein the predetermined decryption The method corresponds to the encryption method used when the user private key component ciphertext to be decrypted is encrypted; the corresponding user private key component plaintext greater than a predetermined number is used to execute the target operation, wherein the predetermined number represents the The minimum number of user private key components required to perform the target operation among the plurality of user private key components.

The device for generating a private key in an asymmetric key provided by an embodiment of this specification includes: a request obtaining module, configured to obtain an asymmetric key generation request; and a generating module, configured to generate a request according to the asymmetric key, Generate a user private key, the user private key includes a plurality of user private key components; the encryption module is used to use a predetermined encryption method to encrypt the plurality of user private key components to obtain corresponding multiple user private key components Wherein at least two of the plurality of user private key components are encrypted by using different predetermined encryption methods; the storage module is used to store the ciphertext of the plurality of user private key components in the same device.

An apparatus for using a private key in an asymmetric key provided by an embodiment of this specification includes: a key acquisition module, which is used to obtain more than a predetermined number of user private key component ciphertexts from the same device, and the user private key component ciphertext The text is obtained according to the asymmetric key generation method described above; the decryption module is used to use a predetermined decryption algorithm to decrypt the cipher text of the user private key component greater than a predetermined number, and obtain the corresponding user private key greater than the predetermined number. Key component plaintext, wherein the predetermined decryption method corresponds to the predetermined decryption method used when the user private key component ciphertext to be decrypted is encrypted; the arithmetic module is used to use the corresponding user private key greater than a predetermined number The component is plaintext for performing a target operation, wherein the predetermined number represents the number of user private key components required to perform the target operation among the plurality of user private key components.

The device for generating a private key in an asymmetric key provided by an embodiment of this specification includes: at least one processor; and a memory communicatively connected with the at least one processor; The instructions executed by the at least one processor, the instructions are executed by the at least one processor, so that the at least one processor can: obtain an asymmetric key generation request; generate an asymmetric key generation request according to the asymmetric key generation request; User private key, the user private key includes multiple user private key components; using a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein At least two of the multiple user private key components are encrypted using different predetermined encryption methods; and the multiple user private key components are stored in the same device in cipher text.

The device for using a private key in an asymmetric key provided by an embodiment of this specification includes: at least one processor; and a memory communicatively connected with the at least one processor; The instructions executed by the at least one processor, the instructions are executed by the at least one processor, so that the at least one processor can: obtain a user private key component ciphertext greater than a predetermined number from the same device, wherein the The user private key component ciphertext is obtained according to the asymmetric key generation method described above; the predetermined decryption method is used to decrypt the user private key component ciphertext greater than a predetermined number, and the corresponding user private key component cipher text greater than a predetermined number is obtained. Key component plaintext, wherein the predetermined decryption method corresponds to the encryption method used when the user private key component ciphertext to be decrypted is encrypted; using the corresponding user private key component plaintext greater than a predetermined number to perform the target operation , Wherein the predetermined number represents the minimum number of user private key components required to perform the target operation among the plurality of user private key components.

The above at least one technical solution adopted in the embodiment of this specification can achieve the following beneficial effects:

A method for generating a private key in an asymmetric key is provided. Specifically, according to the obtained asymmetric key generation request, multiple user private key components are generated, and then different predetermined encryption algorithms are used to encrypt the multiple users The private key component is used to obtain multiple user private key component ciphertexts, and then the multiple user private key component ciphertexts are stored in the same device. After the method generates the scattered user private key components, instead of storing the private key components of the user private key on multiple devices, it uses re-encryption instead of realizing the protection of the private key components. Specifically, different components are used. The encryption method is used to encrypt multiple user private key components, so that different decryption methods need to be used to decrypt different components, similar to storing the private key components separately on different devices, to achieve the purpose of risk dispersion. Therefore, since there is no need to use multiple physical devices to store the private key component, the construction cost of the private key protection system is reduced; and when the private key needs to be used, there is no need to communicate between multiple physical devices that store the private key component. Instead, the private key component is obtained in the same device. Under the condition of ensuring the security of the user's private key component, the communication overhead during the use of the private key is reduced, the communication cost is reduced, and the communication delay is also reduced.

Description of the drawings

The drawings described here are used to provide a further understanding of the application and constitute a part of the application. The exemplary embodiments and descriptions of the application are used to explain the application, and do not constitute an improper limitation of the application. In the attached picture:

Fig. 1 is a flowchart of a method for generating a private key in an asymmetric key provided by an embodiment of this specification;

2 is a schematic diagram of the principle of a method for generating a user's private key provided by an embodiment of this specification;

3 is a flowchart of a method for using a private key in an asymmetric key provided by an embodiment of this specification;

FIG. 4 is a schematic diagram of the asymmetric key generation method provided by the embodiment of this specification;

Figure 5 is a schematic diagram of a method for digital signature using a private key provided by an embodiment of the specification;

FIG. 6 is a sequence diagram of a digital signature verification process using an asymmetric key according to an embodiment of the specification;

Fig. 7 is a schematic diagram of a method for decrypting information using a private key provided by an embodiment of the specification;

FIG. 8 is a sequence diagram of a process of information encryption and decryption using an asymmetric key provided by an embodiment of this specification;

FIG. 9 is a schematic structural diagram of a private key generating device in an asymmetric key corresponding to FIG. 1 provided by an embodiment of the specification;

FIG. 10 is a schematic structural diagram of a device for using a private key in an asymmetric key corresponding to FIG. 3 according to an embodiment of the specification;

FIG. 11 is a schematic structural diagram of a private key generating and using device in an asymmetric key provided by an embodiment of this specification.

detailed description

In order to make the objectives, technical solutions, and advantages of the present application clearer, the technical solutions of the present application will be described clearly and completely in conjunction with specific embodiments of the present application and the corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

In order to facilitate the understanding of the technical solutions mentioned in the embodiments of the present application, a brief description of several technical terms involved in the present application will be given below.

Software password module: The password module is a software and hardware module with security functions such as key protection and password calculation. Usually the module that uses the software protection key is called the software cryptographic module. Compared with the traditional hardware cryptographic module, the software cryptographic module has a wider application range, and has the advantages of low cost and convenient deployment. The current demand for software key protection is strong. At the same time, it is difficult to use software cryptographic modules for key protection. Specifically, because the software does not have an independent operating environment, once the operating system where the software is located is compromised, the attacker can obtain the software’s hard disk storage data, runtime memory, etc., through which sensitive information such as keys can generally be recovered. . At present, the commonly used methods of protecting keys include threshold cipher algorithm and white box cipher algorithm.

Threshold cipher algorithm: The threshold cipher algorithm is evolved on the basis of the secret sharing algorithm. (t,n) Secret sharing is to divide a secret into n parts, each in charge of n individuals, and at least t+1 participants can recover the secret. If you use a secret sharing method to keep the key, you can ensure the security of the key in the storage process, but the key still needs to be restored before it can be calculated during use, and the restored plaintext key may still be intercepted by an attacker . Threshold cryptographic algorithms can alleviate this problem. The biggest difference from the secret sharing algorithm is that the threshold cipher algorithm is still in the form of key components during the use of the key, and there is no need to recover the complete key. Specifically, the (t,n) threshold cryptographic algorithm is to split a private key into n parts, which are controlled by n individuals. At least t+1 participants can perform cryptographic operations based on the private key. Any t participants No information about the above results can be obtained, and no information about the private key and the components of the private key will be disclosed during the cryptographic operation. In addition, the commonly used threshold cryptographic algorithm is an implementation of the standard cryptographic algorithm, which is equivalent to the standard cryptographic algorithm.

White box cryptographic algorithm: The white box cryptographic algorithm is a cryptographic algorithm that can ensure the security of the key in a white box attack environment. The environment where the execution of the program is completely visible to the attacker is called the white box attack environment. Generally, the white box cryptographic algorithm will be used in conjunction with the code obfuscation technology to further prevent attackers from recovering the key from the cryptographic algorithm. The white-box cipher algorithm is to white-box the original key to obtain the white-box key. The white-box key can exist in the form of a lookup table. Assuming that the original key is 16 bytes, the original key is white-boxed and becomes for example The 300kB lookup table is equivalent to dispersing the 16-byte key in the 300kB data to achieve the effect of hiding. Generally speaking, white-box cryptographic algorithms only support symmetric cryptographic algorithms. This is because the implementation principles of symmetric cryptographic algorithms and asymmetric cryptographic algorithms are different, and there are technical obstacles to white-boxing asymmetric cryptographic algorithms. In order to have a clearer understanding of the principle of the white box cryptographic algorithm, you can refer to the paper "White box cryptography and SM4 algorithm white box realization" by Xiao Yaying and others at the 2009 Annual Conference of the Chinese Cryptographic Society, and the master's thesis of Shang Pei of the University of Electronic Science and Technology of China. The white box cryptographic algorithm design and implementation of SM4 algorithm shows an example of a white box cryptographic algorithm based on SM4, but the implementation of the white box cryptographic algorithm in the embodiments of the present application can be various and is not limited to The SM4 algorithm, for example, can also be based on various symmetric cryptographic algorithms such as the AES algorithm, the DES algorithm, and the 3DES algorithm, which is not specifically limited in this application.

The technical solutions provided by the embodiments of the present application will be described in detail below with reference to the accompanying drawings.

Fig. 1 is a flowchart of a method for generating a private key in an asymmetric key provided by an embodiment of this specification. From a program point of view, the execution body of the process can be a program or an application client loaded on an application server.

As shown in FIG. 1, the method for generating a private key in an asymmetric key according to an embodiment includes the following steps:

S110: Obtain an asymmetric key generation request.

The basic process of data encryption is to process the original plaintext file or data according to a certain algorithm to make it into a character or bit set that cannot be understood without decryption. It is usually called "ciphertext". Achieve the purpose of protecting data from being stolen and read by unauthorized persons. The reverse process of encryption is decryption, that is, the process of transforming the encoded information into its original data. Encryption algorithms are divided into symmetric encryption algorithms and asymmetric encryption algorithms. Among them, the encryption and decryption keys of the symmetric encryption algorithm are the same, and the encryption key and the decryption key of the asymmetric encryption algorithm are different.

Asymmetric encryption algorithm, also known as public key encryption algorithm. It requires two keys, called asymmetric keys, of which one is called a public key, that is, a public key, and the other is called a private key, that is, a private key. If the public key is used to encrypt the data, only the corresponding private key can be used to decrypt it. If the private key is used to encrypt the data, only the corresponding public key can be used to decrypt it. For example, Party A generates a pair of keys and discloses one of them as a public key to others. Party B who obtains the public key uses the public key to encrypt the confidential information before sending it to Party A, and Party A uses its own Another private key (private key) is stored to decrypt the encrypted information.

According to an embodiment, the asymmetric key generation request is obtained, that is, a request to generate a private key and a public key is obtained. According to an embodiment, the obtaining of an asymmetric key generation request may refer to obtaining a request for instructing to generate a private key and a corresponding public key.

S120: Generate a user private key according to the asymmetric key generation request, where the user private key includes multiple user private key components.

Optionally, a (t, n) secret sharing or (t, n) threshold cryptographic algorithm can be used to generate multiple user private key components. For example, if (t,n) secret sharing is used, the user private key plaintext is generated first, and then the user private key plaintext is split into n copies. At least t+1 components are required to recover the original user private key Plaintext. For example, if the (t, n) threshold cryptographic algorithm is used, n user private key components are directly generated as the user private key, and at least t+1 components of them can participate in the cryptographic operation based on the user private key. In this process In, the user's private key plaintext is neither generated nor restored when used, that is, the user's private key does not appear in complete plaintext from beginning to end, but exists in the form of key components. Obviously, using the (t, n) threshold cryptographic algorithm to generate the user private key is more secure. In this application, preferably, the (t, n) threshold cryptographic algorithm is used to directly generate the user private key component as the user private key.

According to an embodiment, generating the user private key according to the asymmetric key generation request specifically includes: generating the user private key by using an asymmetric threshold cryptographic algorithm according to the asymmetric key generation request.

According to an embodiment, the use of an asymmetric threshold cryptographic algorithm to generate a user private key may specifically include: generating a user private key according to a threshold cryptographic algorithm based on a standard asymmetric cryptographic algorithm. Wherein, the standard asymmetric cryptographic algorithm may be SM2 algorithm, ECC (Elliptic Curve Cryptography) algorithm, RSA algorithm or DSA (Digital Signature Algorithm, digital signature algorithm), but is not limited to this.

Optionally, the user private key can be generated according to the SM2-based (t, n) threshold cryptographic algorithm. The user private key can include n user private key components, and any t+1 components can be used directly to achieve The function of the user's private key. Specifically, when the user's private key is used, t+1 components can be used directly to perform cryptographic operations based on the private key, that is to say, there is no need to recover the user's private key plaintext in this process, but in the form of private key components Perform cryptographic calculations. Therefore, in the process of using the user's private key, only the private key component will actually appear, instead of the complete user's private key that is transferred and used in the memory. This solves the problem that the complete user's private key exists in the memory. The problem increases the difficulty for the attacker to obtain the plaintext of the user’s private key.

S130: Use a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components use different predetermined Encryption method to encrypt.

Specifically, the predetermined encryption algorithm may be any known standard symmetric encryption algorithm or its improved algorithm, for example, SM4 algorithm, AES (Advanced Encryption Standard, Advanced Encryption Standard) algorithm, DES (Data Encryption Standard, data encryption standard) ) Algorithm, 3DES (Triple DES, Triple Data Encryption Standard) algorithm or their improved algorithm, but not limited to this. The key used in the encryption process of the predetermined encryption method may include a fixed character string, a random character string, user terminal device information, or a combination thereof, and a white box key may also be used, but is not limited to this.

Specifically, at least two of the plurality of user private key components are encrypted using different predetermined encryption methods, which means that all the components of the plurality of user private key components are encrypted in different ways. The advantage of this scheme is that when an attacker wants to recover the user's private key component plaintext through the user's private key component ciphertext, he cannot crack all ciphertexts by one method, which increases the number of users who can be cracked by the attacker. The difficulty of the private key component in plaintext.

S140: Store the multiple user private key component ciphertexts in the same device.

In the traditional multi-component key protection scheme, at least part of the key components are scattered on different servers, and cryptographic devices such as cryptographic machines, USB Keys, etc. can be used to protect the components on each server. In the solution of this application, the user private key component ciphertext is stored on the same device. The advantage of this setting is that when the user private key component needs to be used for cryptographic operations, it only needs to be obtained and decrypted on the same device to meet the predetermined number The user component ciphertext, without the need for communication interaction between the servers, reduces the communication overhead of the system, and avoids the communication delay caused by this.

Specifically, the same device may be a device that generates the user's private key component, or may be a device different from the device that generates the user's private key component. For example, if the user private key component is generated on the server, the device storing the cipher text of the user private key component may be a user terminal device that is in communication with the server. For example, if the user private key component is generated on the user terminal, the device storing the cipher text of the private key component may be the user terminal.

According to an embodiment, the storing the plurality of user private key component ciphertexts in the same device may specifically include: storing the plurality of user private key component ciphertexts in a device that requires the use of the user private key in.

Specifically, the device that requires the use of the user's private key may be a user terminal, specifically, a terminal device such as a payment machine, an IOT device (Internet of Things device), and a mobile phone. In the prior art, although the user's private key can be split into several copies and stored on different storage devices, it is also necessary to introduce additional servers, which is not convenient for system deployment and user use; especially, some users The terminal device is inconvenient to directly connect with the physical device as the server, and if it is connected through the cloud, in the process of using the private key, a large data communication overhead will be generated, and there will be a communication delay. This application directly stores the private key components of each user on the user terminal. On the one hand, it reduces the communication overhead between servers when using the private key, and on the other hand, it reduces the user’s need to obtain the private key from the cloud when using the private key. The communication overhead between the terminal and the cloud server reduces the communication delay.

According to an embodiment, the user private key component ciphertext can be stored in different storage areas in the user terminal memory, and each storage area can store at least one user private key component ciphertext. By distributing the ciphertext of the user private key component, it is possible to increase the difficulty for an attacker to obtain a predetermined number of user private key component ciphertext, thereby decrypting the predetermined number of user private key component plaintext.

In the prior art, the private key is divided into multiple private key components and stored on multiple servers that are in communication with the user terminal. When the user terminal needs to use the private key, it is necessary to store the private key components on the user terminal and the server and each For multiple communications between servers, the communication overhead is high and communication delays are prone to occur. This application provides a method for generating a private key in an asymmetric key. Specifically, according to the obtained asymmetric key generation request, multiple user private key components are generated, and then different predetermined encryption algorithms are used to encrypt the multiple Multiple user private key components to obtain multiple user private key component ciphertexts, and then store the multiple user private key component ciphertexts in the same device. After the method generates the scattered user private key components, instead of storing the private key components of the user private key on multiple devices, it uses re-encryption instead of realizing the protection of the private key components. Specifically, different components are used. The encryption method is used to encrypt multiple user private key components, so that different decryption methods need to be used to decrypt different components, similar to storing the private key components separately on different devices, to achieve the purpose of risk dispersion. Therefore, since there is no need to use multiple physical devices to store the private key component, the construction cost of the private key protection system is reduced; and when the private key needs to be used, there is no need to communicate between multiple physical devices that store the private key component. Instead, the private key component is obtained through different decryption methods in the same device. Under the condition of ensuring the security of the user's private key component, the communication overhead during the use of the private key is reduced, the communication cost is reduced, and the communication delay is also reduced.

The embodiments of this specification also provide some specific implementation schemes of the private key generation method in the above-mentioned asymmetric key, which will be described below.

Generally, the threshold cryptographic algorithm can ensure that the key is always present in components during the process of key generation and use, and is generally divided into 3 to 5 key components, so that the attacker cannot obtain a complete key in one place. However, the shortcoming of the threshold cipher algorithm is that the number of keys to be dispersed is limited. Once an attacker obtains more than a predetermined number of key components, the key can be recovered. In contrast, the keys of the white box cipher algorithm are completely dispersed in the algorithm realization process, and the degree of dispersion is much higher than that of the threshold cipher algorithm. Even for some white box cryptographic algorithms, even if an attacker obtains all the key scattered information, he cannot recover the key.

According to an embodiment of the present application, in S130, using a predetermined encryption method to encrypt the multiple user private key components may specifically include: using a white box encryption algorithm to perform the encryption on the multiple user private key components encryption.

The white box cryptographic algorithm can include the white box encryption algorithm used for encryption and the corresponding white box decryption algorithm used for decryption. Its purpose is to protect the key in the white box attack environment and prevent attackers from executing the cryptographic software. Extract the key information from. White-box cryptographic algorithm can refer to a new algorithm that can resist attacks in a white-box attack environment, or it can refer to a pure white-box design based on an existing cryptographic algorithm. Specifically, the white-box encryption algorithm based on the standard symmetric encryption algorithm, that is, based on the existing standard symmetric encryption algorithm, is designed through white-box cipher technology, and certain characteristics of the algorithm are used to hide the key, making the white-box attack Under the environment, the function of the original algorithm is not changed, but the security in the white box attack environment can be achieved, and the security of the original algorithm is not damaged. The commonly used white box cipher algorithm is an implementation of the standard cipher algorithm, which is equivalent to the standard cipher algorithm, that is, for the same plaintext, the ciphertext generated by the standard symmetric encryption algorithm and the corresponding white box encryption algorithm Consistent.

Optionally, said adopting a white box encryption algorithm to encrypt the plurality of user private key components may specifically include: adopting a white box encryption algorithm based on a standard symmetric encryption algorithm to perform encryption on the plurality of user private key components encryption. Wherein, the standard symmetric encryption algorithm may be SM4 algorithm, AES algorithm, DES algorithm or 3DES algorithm, but it is not limited thereto.

If the different key components of a user key adopt the same protection method, the attacker can use the same method to break all the key components. In view of this, different white box encryption algorithms can be used to protect different key components, so that the degree of protection of the key components is strengthened, and the difficulty for an attacker to break through multiple threshold key components is increased.

According to an embodiment of the present application, at least two of the plurality of user private key components are encrypted using different predetermined encryption methods, which may specifically include: for any user private key component in a user private key, using the same The other user private key components in the one user private key component are encrypted with different white box encryption algorithms. In other words, if the user private key includes n user private key components, n different white box encryption algorithms can be used to respectively encrypt the n user private key components, where one user private key component uses a white box The encryption algorithm is used for encryption, and different user private key components use different white box encryption algorithms.

Optionally, the different white box encryption algorithms may be white box encryption algorithms constructed using different white box methods. Specifically, different white box cipher design methods can be used to design the white box encryption algorithm, for example, a look-up table method, a method of inserting a scrambled item, a method of multivariate cipher, etc. can be used. Among them, the main idea of the look-up table method is: for a cryptographic algorithm, given a specific key, the mapping from plaintext to ciphertext is determined, and then the mapping from plaintext to ciphertext is scrambled and encrypted, The subsequent mapping is expressed in the form of a look-up table, and finally, the execution process of the cryptographic algorithm is realized through the look-up table.

Optionally, the different white box encryption algorithms may be white box encryption algorithms constructed based on different standard symmetric encryption algorithms. Specifically, SM4 white box encryption algorithm, AES white box encryption algorithm, DES white box encryption algorithm, etc. can be used. For example, the SM4 white-box encryption algorithm can be a white-box design based on the original SM4 algorithm. The SM4 algorithm has a packet length of 128 bits and a key length of 128 bits, using 32 rounds of non-linear iteration results, and the decryption process The structure is similar to the encryption process, but the order of using the round keys is reversed. Specifically, the key information of the SM4 white box encryption algorithm is hidden in the lookup table, and the security of the algorithm lies in the difficulty of analyzing the key information from the lookup table or recovering the input and output codes.

Optionally, the different white box encryption algorithms may be white box encryption algorithms based on the same standard encryption algorithm but using different design parameters. For example, all can be based on the SM4 white box encryption algorithm, but in the white box implementation process, a different number of lookup tables can be used, different system parameters and/or fixed parameters can be used, and/or different white box keys can be used . The key obtained by dispersing the original key used for encryption and decryption in the standard cryptographic algorithm is called the white box key. A white box key refers to a key used for encryption or decryption in a white box environment. The white box key carries the information of the original key and replaces the original key to complete the function of encryption and decryption. At the same time, even if it is analyzed Unable to get the original key. The white box key needs to be performed in a secure environment to ensure the security of the white box key and the original key. According to an embodiment, in this application, the white box key can be generated in the server, and then the white box key and the algorithm program are packaged and transmitted to the terminal device for encrypting the user's private key component, that is, the white box key. The key generation environment is different from its use environment to ensure the security of the original key used to generate the white box key.

The original intention of the threshold cipher algorithm is that each threshold key component has a different person in charge, so as to achieve the effect of risk dispersion; analogously, in the embodiment of this application, although each threshold component is equalized in order to reduce communication interaction It is stored in a communication terminal (for example, the user terminal), and at the same time, different white box cryptographic algorithms and/or white box keys can be used for protection through each threshold key component, so as to achieve a certain degree of risk dispersion effect.

According to an embodiment, the method for generating a private key in the aforementioned asymmetric key may further include: obtaining another asymmetric key generation request; generating another user private key according to the another asymmetric key generation request, The other user private key includes multiple user private key components; for any user private key component in the another user private key, the same one used for one user private key component in the one user private key is used The white box encryption algorithm is used for encryption, and each user private key component in the other user private key adopts a different white box encryption algorithm. Wherein, the number of user private key components in the other user private key is the same as the number of user private key components in the one user private key.

Specifically, there may be m user private keys, and each user private key may include n user private key components, and the (m, n)th user private key component may be used to represent the m-th user private key. The n-th user private key component; the p-th white-box encryption algorithm among n different white-box encryption algorithms can be used for the (1, p)-th user private key component to the (m, p)-th user private key component Encryption; where m and n are positive integers, p is a positive integer not greater than n, and take any value from 1 to n for p, and perform the above encryption method.

In other words, when there are m user private keys, and each user private key is split into n components, n different white box encryption algorithms can be used to perform all the user private key components of the user private key. Encryption, n groups of user private key component ciphertexts are obtained; the m user private key component ciphertexts in each group of user private key component ciphertexts respectively correspond to a private key component in each user's private key.

Fig. 2 is a schematic diagram of the principle of a method for generating a user private key provided by an embodiment of this specification.

Referring to Figure 2, specifically, for example, there are m user private keys that need to be protected, where each user private key can be split into n components, and the private key component mn in Figure 2 is the (m, n)th above. The user private key component is used to represent the nth component of the m user private keys. For example, the second private key component in user private key 1 can be represented by private key component 1-2. Here, for example, the names of the private key component 1-1, the private key component 1-2, and the private key component 1-3 in the private key 1 are only for the purpose of distinguishing, to illustrate that there are multiple different in the private key 1. The component is not intended to constitute a restriction on each component, and its naming method is not limited to this.

Specifically, n different white box encryption algorithms may be used to encrypt all user private key components. For example, the n white box encryption algorithms may be based on the same standard symmetric encryption algorithm, but use different white box keys. For example, for different components, they may all be based on the SM4 standard encryption algorithm, but use different original keys for encryption, that is, use different white box keys for encryption. Figure 2 shows a situation where different white box keys are used to encrypt each private key component in a user's private key. Specifically, for example, a white box key equivalent to the number of private key components of each user’s private key can be used to encrypt the corresponding private key component, so that all private key components in the user’s private key are mutually exclusive. The white box key is different.

As an example, assume that m=1 and n=3 in Figure 2, that is, there is 1 user private key (private key 1) that needs to be encrypted. The user private key includes 3 private key components, and 3 white box encryption algorithms can be used. To encrypt these 3 components, p can be 1, 2 and 3. Specifically, p = 1, that is, the first white box encryption algorithm among the three white box encryption algorithms is used to encrypt the private key component 1-1 in the private key 1; p = 2 that is, three white box encryption algorithms are used The second white-box encryption algorithm in the algorithm encrypts the private key component 1-2 in the private key 1; p=3 that is, the third white-box encryption algorithm among the three white-box encryption algorithms is used to encrypt the private key 1. The private key components 1-3 in are encrypted.

As an example, suppose m=4 and n=3 in Figure 2, that is, there are 4 user private keys (private key 1, private key 2, private key 3, and private key 4) that need to be encrypted, and each user private key can include With 3 private key components, 3 white box encryption algorithms can be used to encrypt these 3 components; p can be 1, 2, and 3. Specifically, p = 1, that is, the first white-box encryption algorithm among the three white-box encryption algorithms is used, and the private key component 1-1 in the private key 1, the private key component 2-1 in the private key 2, and the private key The private key component 3-1 in the key 3 and the private key component 4-1 in the private key 4 are encrypted; p=2 that is, the second white-box encryption algorithm among the three white-box encryption algorithms is used, and the private key 1 The private key component 1-2 in the private key 2, the private key component 2-2 in the private key 3, the private key component 3-2 in the private key 3, and the private key component 4-2 in the private key 4 are encrypted; p=3 That is, the third white-box encryption algorithm among the three white-box encryption algorithms is used to compare the private key components 1-3 in the private key 1, the private key components 2-3 in the private key 2, and the private key in the private key 3. Component 3-3, private key component 4-3 in private key 4 are encrypted.

In the traditional white box key use process, the white box key is usually used as the service key to encrypt the service data, that is, the service key is bound to the white box, which makes it difficult to update the service key. Specifically, when the service key needs to be updated, the white box key must be updated. In addition, if different white box keys are used to protect different business data, a white box key equivalent to the number of business data is required, and the white box key file is usually large, which will take up more storage. space. For example, if there are 100 communication data that need to be protected, and the corresponding 100 business keys need to be implemented as white box keys, the key management system needs to store 100 white box keys, which will occupy more storage space; and when When the service key needs to be updated, the corresponding white box key needs to be updated.

In this application, the white box key is used to encrypt and protect the user key components, instead of using the white box key to directly protect user data. This is the difference between the white box key in this application and the white box key in the prior art. Significant differences in usage. Specifically, in this application, the user key is used to encrypt business data, and the white box key is used to encrypt and protect the components of the user key. On the one hand, when the service key needs to be updated, there is no need to update the white box key, which avoids the problem of difficulty in key update in the process of using traditional white box keys. On the other hand, this application uses a white box key to encrypt the key components. The number of white box keys used is small and the storage space is small. Specifically: for example, a user key has 3 key components, and each The components are encrypted using different white box keys. Only 3 white box keys need to be stored in the key management system; assuming that there are 100 business data to be encrypted, 100 user keys are used correspondingly, and each user password The key includes 3 key components, and the three components of each user key are respectively encrypted using the aforementioned 3 white box keys. In addition, in this application, by combining the white box cipher algorithm with the threshold cipher algorithm, a new method for protecting asymmetric keys is proposed, that is, the white box encryption technology is applied to private key protection.

This application combines the threshold cipher algorithm and the white box cipher algorithm, and takes advantage of the flexible key update of the threshold cipher algorithm and the high degree of key dispersion of the white box cipher algorithm to design a brand new key protection technology. Compared with the traditional threshold cipher scheme, this scheme strengthens the security of key storage through the use of white box cipher algorithm; and through the use of different white box keys/algorithms, it achieves a certain degree of risk dispersion effect. This scheme combines the threshold cipher algorithm and the white box cipher algorithm, and proposes a new software key protection method, which overcomes the shortcomings of weak protection of the threshold cipher algorithm key component and the inconvenience of the white box cipher key update and mass use. Both sex and convenience have been improved.

According to the embodiment of the present application, the key is first dispersed through a threshold algorithm, and then encrypted through the white box. According to the embodiment of the present application, the solution includes at least two kinds of keys-user key and white box key. Among them, the user key is used to protect user data in the form of a threshold component, and the white box key is used to encrypt and protect the user. Key component. In this application, the white box key is not used to directly protect user data. This is also the difference between our use of the white box key in the past. In addition, different white box keys/algorithms are used for protection through different threshold components, which makes the protection of threshold components diversified and achieves a certain degree of risk dispersion effect.

Based on the same idea, the embodiment of this specification also provides a method for using an asymmetric key corresponding to the method for generating a private key in the asymmetric key. Fig. 3 is a flowchart of a method for using a private key in an asymmetric key provided by an embodiment of this specification. From a program point of view, the execution body of the process can be a program or an application client loaded on an application server.

As shown in FIG. 3, after S140 in the method for generating a private key in an asymmetric key, the method for using an asymmetric key according to an embodiment may include the following steps:

S210: Obtain a user private key component ciphertext greater than a predetermined number from the same device, the user private key component ciphertext obtained according to the private key generation method in the aforementioned user asymmetric key.

According to the embodiment, the user's asymmetric key usage method and the execution subject of the generation method may be the same or different. For example, you can generate a user's private key on the server, and use the user's private key to perform cryptographic operations on the client. For another example, the user's private key can be generated on the client, and the user's private key can be used for cryptographic operations on the client.

According to an embodiment, the acquisition of more than a predetermined number of user private key component ciphertexts from the same device may be obtained from a device different from the user private key using terminal, or it may be obtained from the user private key component ciphertext. Obtain the ciphertext of the user private key component from the local storage of the terminal.

S220: Use a predetermined decryption method to decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than a predetermined number, wherein the predetermined decryption method is encrypted with the user private key component to be decrypted. Corresponds to the predetermined encryption method used when the text is encrypted.

According to an embodiment, the predetermined decryption method may be a white box decryption algorithm, specifically, a white box decryption algorithm corresponding to the white box encryption algorithm used when the user key component is encrypted. More specifically, when the white box encryption algorithm is a white box encryption algorithm based on SM4, the corresponding white box decryption algorithm based on SM4 is used for decryption. More specifically, the white box encryption key used in encryption can be obtained by dispersing the original key in the implementation of the SM4 encryption algorithm, and the white box decryption key used in decryption can be obtained by dispersing the original key in the SM4 decryption algorithm. Obtained during the implementation process, where the original keys used for encryption and decryption are the same, and the SM4 encryption algorithm corresponds to the SM4 decryption algorithm.

S230: Use the corresponding user private key component plaintext greater than a predetermined number to execute the target calculation.

Wherein, the predetermined number represents the minimum number of user private key components required to perform the target operation among the plurality of user private key components. Specifically, for example, for the (t, n) threshold encryption algorithm, if the key is divided into n shares, t+1 shares of the key can be used for cryptographic operations.

According to an embodiment, in the asymmetric key usage method, the corresponding user private key component plaintext greater than a predetermined number is used to perform the target operation. It should be noted that the user private key component plaintext is not used to generate complete Instead of directly using multiple user private key components in plaintext to perform cryptographic operations, such as digital signatures, information decryption, etc. The advantage of this scheme is that in the process of using the private key, it always exists in the form of the key component, and the complete user private key plaintext will not appear in the memory, that is, the user is always protected in the form of the user private key component. The private key makes it impossible for an attacker to directly obtain the user's private key by cracking the private key use process, which improves the security of the user's private key during use.

According to an embodiment, in the foregoing asymmetric key generation method, after an asymmetric threshold cryptographic algorithm is used to generate a user private key, the method further includes: generating a user public key based on the multiple user private key components; The user’s public key.

Fig. 4 is a schematic diagram of the asymmetric key generation method provided by the embodiment of the specification. The asymmetric key includes a corresponding private key and public key. After the user's private key is split into multiple components, each component is encrypted using a white box encryption algorithm to obtain the user's private key component ciphertext, and then store it.

According to an optional embodiment, in the foregoing method for using asymmetric keys, the use of the corresponding plaintext of user private key components greater than a predetermined number to perform the target operation may specifically include: using the greater than a predetermined number of users The private key component is signed in plain text, and the signature result is obtained.

Fig. 5 is a schematic diagram of a method for digital signature using a private key provided by an embodiment of the specification. Specifically, when it is necessary to use the private key for digital signature, obtain the private key component ciphertext greater than a predetermined number from the data storage location, and decrypt the private key component ciphertext using the corresponding white box decryption algorithm to obtain the corresponding private key Component plaintext, and then directly use the obtained private key component plaintext for digital signature, and get the signature result.

In order to more clearly illustrate the process of using the private key for digital signature and using the corresponding public key for signature verification, Figure 6 and related descriptions are provided.

Fig. 6 is a sequence diagram of a digital signature verification process using an asymmetric key provided by an embodiment of the specification. As an example, FIG. 7 shows a method of generating and using a private key at the first communicating party, for example, a method of generating and using a private key at a user terminal. The solution of the present application is not limited to this, the private key and public key can also be generated on the server, then the private key is encrypted and stored in the user terminal, and the private key is used in the user terminal to perform cryptographic operations.

6, the process of using an asymmetric key for digital signature verification may specifically include: the first communicating party generates a user private key component and a user public key, and encrypts the user private key component to obtain a cipher text of the user private key component ; When it is necessary to use the private key to sign, the first communicating party decrypts the user private key component ciphertext greater than a predetermined number to obtain the corresponding user private key component plaintext greater than the predetermined number, and then uses the user who is greater than the predetermined number The private key component is in plain text and digitally signed.

In the above process, it further includes: the first communicating party broadcasts the public key, and accordingly, the second communicating party can obtain the public key; when the second communicating party receives the public key sent by the first communicating party After the signature result, the second communication party uses the user public key broadcast by the first communication party to verify the signature result. Here, the steps of the first communicating party broadcasting the public key and the second communicating party receiving the public key can be at any stage after the first communicating party generates the public key and before the second communicating party uses the public key, and is not limited to the steps shown in the figure. Timing shown.

According to an optional embodiment, in the foregoing method for using asymmetric keys, the use of the corresponding plaintext of user private key components greater than a predetermined number to perform the target operation may specifically include: using the greater than a predetermined number of users The private key component decrypts the information to be decrypted in plain text to obtain the decrypted result, where the information to be decrypted is information obtained after encryption using the user public key corresponding to the user private key.

Fig. 7 is a schematic diagram of a method for decrypting information using a private key provided by an embodiment of the specification. Specifically, when it is necessary to use the private key to decrypt the information encrypted by the corresponding public key, obtain the private key component ciphertext greater than a predetermined number from the data storage location, and use the corresponding white box decryption algorithm to decrypt the private key component Ciphertext, obtain the corresponding private key component plaintext, and then directly use the obtained private key component plaintext to decrypt the information, and obtain the decryption result.

In order to more clearly describe the process of using the public key for information encryption and using the corresponding private key for information decryption, Figure 8 and related descriptions are provided.

Fig. 8 is a sequence diagram of a process of information encryption and decryption using an asymmetric key provided by an embodiment of the specification. As an example, FIG. 8 shows a method of generating and using a private key at the first communicating party, for example, a method of generating and using a private key at a user terminal. The solution of the present application is not limited to this, the private key and public key can also be generated on the server, then the private key is encrypted and stored in the user terminal, and the private key is used in the user terminal to perform cryptographic operations.

8, the process of using an asymmetric key to encrypt and decrypt information specifically includes: the first communicating party generates a user private key component and a user public key, and encrypts the user private key component to obtain a cipher text of the user private key component; And the first communicating party broadcasts the public key.

In the above process, it also includes: the second communicating party receives the public key broadcast by the first communicating party; when the second communicating party needs to send encrypted information to the first communicating party, the public key received from the first communicating party can be used. The key encrypts the information; and sends the encrypted information to the first communicating party.

In the above process, it also includes: when the first communicating party receives the encrypted information sent by the second communicating party, decrypting the stored user private key component ciphertext greater than a predetermined number to obtain the corresponding user private key greater than the predetermined number. Key component plaintext; and using the user private key component plaintext greater than a predetermined number to decrypt the encrypted information.

The above examples only show some specific implementations of the method of using the private key of the present application, but the method of using the private key is not limited to this. For example, it can also be used for key exchange. There is no specific limitation here.

According to the asymmetric key generation and use method of this application, a threshold cryptographic algorithm is used for asymmetric key generation, and a private key is used for signature, decryption and other operations. Specifically, when the private key is generated, a threshold cryptographic algorithm is first used to generate multiple private key components, and then each threshold private key component is encrypted and stored using a white box cryptographic algorithm. When it is necessary to use the private key to perform operations, first use the white box key to decrypt the threshold private key component, and then use the threshold cryptographic algorithm to perform private key operations such as signature and decryption.

Generally, because it is easier for an attacker to obtain storage files, and the key data in the memory is usually erased after use, and the existence time is very short, so the security requirements of the key when it is stored (that is, in the hard disk) are more secure than when it is running. (That is, in memory) the requirements are higher. In view of this, the solution of the present application just provides a stronger security guarantee during the key storage, and meets the security requirements very well. Specifically, when the key is stored, the key is protected by a threshold cipher algorithm and a white box cipher algorithm; when the key is used (in memory), the key is protected by a threshold cipher algorithm.

Based on the same idea, the embodiment of this specification also provides a device corresponding to the above-mentioned asymmetric key generation method. FIG. 9 is a schematic structural diagram of a private key generation device in an asymmetric key corresponding to FIG. 1 provided by an embodiment of the specification.

As shown in Figure 9, the asymmetric key generation device may include:

The request obtaining module 310 is used to obtain an asymmetric key generation request;

The generating module 320 is configured to generate a user private key according to the asymmetric key generation request, where the user private key includes multiple user private key components;

The encryption module 330 is configured to use a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components Use different predetermined encryption methods to encrypt;

The storage module 340 is configured to store the ciphertexts of the multiple user private key components in the same device.

Optionally, the generating module 320 is specifically configured to use an asymmetric threshold cryptographic algorithm to generate a user private key according to the asymmetric key generation request.

Optionally, the encryption module 330 is specifically configured to use different white box encryption algorithms to encrypt the multiple user private key components.

Optionally, the encryption module 330 is specifically configured to: for any user private key component in a user private key, use a white box encryption algorithm that is different from other user private key components in the user private key. encryption.

Optionally, the encryption module 330 is specifically configured to: there are m user private keys, each user private key includes n user private key components, and the (m, n)th user private key component represents the mth user private key component. The nth user private key component among the user private keys; n different white-box encryption algorithms are used to encrypt all user private key components; the p-th white box among the n different white-box encryption algorithms is used The encryption algorithm encrypts the (1, p)-th user private key component to the (m, p)-th user private key component; where m and n are positive integers, and p is a positive integer not greater than n.

Optionally, the storage module 340 is specifically configured to store the multiple user private key component ciphertexts in a device that has a use requirement for the user private key. In other words, the storage module 340 may be a storage module in the user terminal.

Optionally, the request obtaining module 310, the generating module 320, the encryption module 330, and the storage module 340 may all be provided in the user terminal. In other words, multiple user private key components can be generated at the user terminal, and then the multiple user private key components can be encrypted and stored.

Based on the same idea, the embodiment of this specification also provides a device corresponding to the above-mentioned asymmetric key usage method. FIG. 10 is a schematic structural diagram of a private key using device in an asymmetric key corresponding to FIG. 3 provided by an embodiment of this specification.

As shown in FIG. 10, the asymmetric key using device may include:

The key acquisition module 410 is configured to acquire more than a predetermined number of user private key component ciphertexts from the same device, and the user private key component ciphertext is generated according to the private key generation method in the above-mentioned asymmetric key;

The decryption module 420 is configured to use a predetermined decryption algorithm to decrypt the ciphertext of the user private key component greater than the predetermined number to obtain the corresponding user private key component plaintext greater than the predetermined number, wherein the predetermined decryption method corresponds to the user to be decrypted Corresponding to the predetermined decryption method used when the private key component ciphertext is encrypted;

The arithmetic module 430 is configured to use the corresponding plaintext of the user private key component greater than a predetermined number to perform the target calculation,

Wherein, the predetermined number represents the number of user private key components required to execute the target operation among the plurality of user private key components.

Optionally, the arithmetic module 430 is specifically configured to: use the user private key components greater than a predetermined number to sign in plain text to obtain a signature result.

Optionally, the arithmetic module 430 is specifically configured to: decrypt the information to be decrypted in plaintext using the user private key component greater than a predetermined number to obtain a decryption result, wherein the information to be decrypted is used with the user's private key The information obtained after encryption of the user's public key corresponding to the key.

Based on the same idea, the embodiment of this specification also provides a device corresponding to the method of generating and using the private key in the above-mentioned asymmetric key.

FIG. 11 is a schematic structural diagram of a device for generating and/or using a private key in an asymmetric key according to an embodiment of the specification. As shown in FIG. 11, the device 500 may include:

At least one processor 510; and,

A memory 530 communicatively connected with the at least one processor; wherein,

The memory 530 stores instructions 520 executable by the at least one processor 510, and the instructions are executed by the at least one processor 510, so that the at least one processor 510 can:

Obtain an asymmetric key generation request;

Generating a user private key according to the asymmetric key generation request, where the user private key includes multiple user private key components;

Using a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components use different predetermined encryption methods To encrypt;

The ciphertexts of the multiple user private key components are stored in the same device.

According to an embodiment, the device 500 may include:

At least one processor 510; and,

The memory 530 stores instructions 520 executable by the at least one processor 510, and the instructions are executed by the at least one processor 510, so that the at least one processor can:

Obtaining more than a predetermined number of user private key component ciphertexts from the same device, wherein the user private key component ciphertext is obtained according to the aforementioned private key generation method in the user asymmetric key;

Using a predetermined decryption method, decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than a predetermined number, wherein the predetermined decryption method and the user private key component ciphertext to be decrypted are Corresponding to the encryption method used during encryption;

Use the corresponding plaintext of the user private key component greater than a predetermined number to execute the target calculation,

Wherein, the predetermined number represents the minimum number of user private key components required to perform the target operation among the plurality of user private key components.

It will be understood that although the terms "first", "second", "third", etc., "1-1/第(1,1)", "1-2/第(1,2) are used herein, )", "1-3/第(1,3)", etc., to describe various parts, but these parts should not be limited by these terms. These terms are only used to distinguish one part from another. Therefore, without departing from the teaching of this article, the "first..." discussed here can also be referred to as "second..."; "1-1/第(1,1)..." can also be It is called "1-2/section (1,2)...".

The above describes specific embodiments of this specification. In some cases, the actions or steps described in the claims can be executed in a different order from the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown in order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the device and equipment embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and the relevant parts can be referred to the part of the description of the method embodiments.

The devices, equipment, and methods provided in the embodiments of this specification are corresponding. Therefore, the devices and equipment also have beneficial technical effects similar to the corresponding methods. Since the beneficial technical effects of the methods have been described in detail above, they will not be omitted here. To repeat the beneficial technical effects of corresponding devices and equipment.

In the 1990s, the improvement of a technology can be clearly distinguished between hardware improvements (for example, improvements in circuit structures such as diodes, transistors, switches, etc.) or software improvements (improvements in method flow). However, with the development of technology, the improvement of many methods and processes of today can be regarded as a direct improvement of the hardware circuit structure. Designers almost always get the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be realized by the hardware entity module. For example, a programmable logic device (Programmable Logic Device, PLD) (for example, a Field Programmable Gate Array (Field Programmable Gate Array, FPGA)) is such an integrated circuit whose logic function is determined by the user's programming of the device. It is programmed by the designer to "integrate" a digital system on a PLD, without requiring the chip manufacturer to design and manufacture a dedicated integrated circuit chip. Moreover, nowadays, instead of manually making integrated circuit chips, this kind of programming is mostly realized with "logic compiler" software, which is similar to the software compiler used in program development and writing, but before compilation The original code must also be written in a specific programming language, which is called Hardware Description Language (HDL), and there is not only one type of HDL, but many types, such as ABEL (Advanced Boolean Expression Language) , AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description), etc., currently most commonly used It is VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. It should also be clear to those skilled in the art that only a little logic programming of the method flow in the above-mentioned hardware description languages and programming into an integrated circuit can easily obtain the hardware circuit that implements the logic method flow.

The controller can be implemented in any suitable manner. For example, the controller can take the form of, for example, a microprocessor or a processor and a computer-readable medium storing computer-readable program codes (such as software or firmware) executable by the (micro)processor. , Logic gates, switches, application specific integrated circuits (ASICs), programmable logic controllers and embedded microcontrollers. Examples of controllers include but are not limited to the following microcontrollers: ARC625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicon Labs C8051F320, the memory controller can also be implemented as part of the memory control logic. Those skilled in the art also know that, in addition to implementing the controller in a purely computer-readable program code manner, it is entirely possible to program the method steps to make the controller use logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded logic. The same function can be realized in the form of a microcontroller or the like. Therefore, such a controller can be regarded as a hardware component, and the devices included in it for realizing various functions can also be regarded as a structure within the hardware component. Or even, the device for realizing various functions can be regarded as both a software module for realizing the method and a structure within a hardware component.

The systems, devices, modules, or units explained in the above embodiments may be implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cell phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or Any combination of these devices.

For the convenience of description, when describing the above device, the functions are divided into various units and described separately. Of course, when implementing this application, the functions of each unit can be implemented in the same one or more software and/or hardware.

Those skilled in the art should understand that the embodiments of the present invention can be provided as a method, a system, or a computer program product. Therefore, the present invention may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may adopt the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes.

The present invention is described with reference to flowcharts and/or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and/or block in the flowchart and/or block diagram, and the combination of processes and/or blocks in the flowchart and/or block diagram can be implemented by computer program instructions. These computer program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing equipment to generate a machine, so that the instructions executed by the processor of the computer or other programmable data processing equipment are generated It is a device that realizes the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

In a typical configuration, the computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

The memory may include non-permanent memory in a computer readable medium, random access memory (RAM) and/or non-volatile memory, such as read-only memory (ROM) or flash memory (flash RAM). Memory is an example of computer readable media.

Computer-readable media include permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, Magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or they also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

This application may be described in the general context of computer-executable instructions executed by a computer, such as a program module. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. This application can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The foregoing descriptions are only examples of the present application, and are not used to limit the present application. For those skilled in the art, this application can have various modifications and changes. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this application shall be included in the scope of the claims of this application.

Claims

A method for generating a private key in an asymmetric key, including:

Obtain an asymmetric key generation request;

Generating a user private key according to the asymmetric key generation request, where the user private key includes multiple user private key components;

Using a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components use different predetermined encryption methods To encrypt;

The ciphertexts of the multiple user private key components are stored in the same device.
The method according to claim 1, wherein the generating a user private key according to the asymmetric key generation request specifically includes:

According to the asymmetric key generation request, an asymmetric threshold cryptographic algorithm is used to generate the user's private key.
The method according to claim 1, wherein said using a predetermined encryption method to encrypt the plurality of user private key components specifically includes:

The white box encryption algorithm is used to encrypt the multiple user private key components.
The method according to claim 3, wherein at least two of the plurality of user private key components are encrypted using different predetermined encryption methods, which specifically includes:

For any user private key component in a user private key, a white box encryption algorithm different from other user private key components in the user private key is used for encryption.
The method according to claim 4, further comprising:

Obtain another asymmetric key generation request;

Generating another user private key according to the another asymmetric key generation request, where the another user private key includes multiple user private key components;

For any user private key component in the other user private key, the same white-box encryption algorithm used by one user private key component in the one user private key is used to encrypt, and the other user private key Each user’s private key component in the key uses a different white-box encryption algorithm.

Wherein, the number of user private key components in the other user private key is the same as the number of user private key components in the one user private key.
The method according to claim 1, wherein storing the multiple user private key component ciphertexts in the same device specifically includes:

The plurality of user private key component ciphertexts are stored in a device that has usage requirements for the user private key.
The method according to claim 1, after storing the plurality of user private key component ciphertexts in the same device, the method further comprises:

Obtaining a user private key component ciphertext greater than a predetermined number from the same device;

Using a predetermined decryption method, decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than a predetermined number, wherein the predetermined decryption method and the user private key component ciphertext to be decrypted are Corresponding to the predetermined encryption method used during encryption;

Use the corresponding plaintext of the user private key component greater than a predetermined number to execute the target calculation,

Wherein, the predetermined number represents the minimum number of user private key components required to perform the target operation among the plurality of user private key components.
The method according to claim 7, wherein said using the corresponding plaintext of user private key components greater than a predetermined number to perform the target operation specifically comprises:

Use the user private key components greater than the predetermined number to sign in plain text, and obtain the signature result.
The method according to claim 7, wherein said using the corresponding plaintext of user private key components greater than a predetermined number to perform the target operation specifically comprises:

Use the user private key component plaintext greater than the predetermined number to decrypt the information to be decrypted to obtain the decryption result,

Wherein, the information to be decrypted is information obtained after encryption using a user public key corresponding to the user private key.
A method for using the private key in an asymmetric key, including:

Obtaining more than a predetermined number of user private key component ciphertexts from the same device, wherein the user private key component ciphertext is obtained according to the method according to any one of claims 1 to 6;

Using a predetermined decryption method, decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than a predetermined number, wherein the predetermined decryption method and the user private key component ciphertext to be decrypted are Corresponding to the encryption method used during encryption;

Use the corresponding plaintext of the user private key component greater than a predetermined number to execute the target calculation,

Wherein, the predetermined number represents the minimum number of user private key components required to perform the target operation among the plurality of user private key components.
A device for generating a private key in an asymmetric key includes:

The request obtaining module is used to obtain the asymmetric key generation request;

A generating module, configured to generate a user private key according to the asymmetric key generation request, where the user private key includes multiple user private key components;

The encryption module is used to encrypt the multiple user private key components using a predetermined encryption method to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components adopt Different predetermined encryption methods to encrypt;

The storage module is used to store the ciphertexts of the multiple user private key components in the same device.
The device according to claim 11, wherein the generating module is specifically configured to:

According to the asymmetric key generation request, an asymmetric threshold cryptographic algorithm is used to generate the user's private key.
The device according to claim 11, wherein the encryption module is specifically configured to:

Use different white box encryption algorithms to encrypt the multiple user private key components.
A device for using a private key in an asymmetric key includes:

The key acquisition module is configured to acquire more than a predetermined number of user private key component ciphertexts from the same device, the user private key component ciphertext being obtained according to the method of any one of claims 1 to 6;

The decryption module is used to use a predetermined decryption algorithm to decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than the predetermined number, wherein the predetermined decryption method is consistent with the user private key component to be decrypted. Corresponding to the predetermined decryption method used when the key component ciphertext is encrypted;

The operation module is configured to use the corresponding plaintext of user private key components greater than a predetermined number to perform a target operation, where the predetermined number represents the user private key components required to perform the target operation among the plurality of user private key components. The number of key components.
A private key generating device in an asymmetric key, including:

At least one processor; and,

A memory communicatively connected with the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can:

Obtain an asymmetric key generation request;

Generating a user private key according to the asymmetric key generation request, where the user private key includes multiple user private key components;

Using a predetermined encryption method to encrypt the multiple user private key components to obtain corresponding multiple user private key component ciphertexts, wherein at least two of the multiple user private key components use different predetermined encryption methods To encrypt;

The ciphertexts of the multiple user private key components are stored in the same device.
A private key using device in an asymmetric key, including:

At least one processor; and,

A memory communicatively connected with the at least one processor; wherein,

The memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor, so that the at least one processor can:

Obtaining more than a predetermined number of user private key component ciphertexts from the same device, wherein the user private key component ciphertext is obtained according to the method according to any one of claims 1 to 6;

Using a predetermined decryption method, decrypt the user private key component ciphertext greater than a predetermined number to obtain a corresponding user private key component plaintext greater than a predetermined number, wherein the predetermined decryption method and the user private key component ciphertext to be decrypted are Corresponding to the encryption method used during encryption;

Use the corresponding plaintext of the user private key component greater than a predetermined number to execute the target calculation,

Wherein, the predetermined number represents the minimum number of user private key components required to perform the target operation among the plurality of user private key components.