WO2022105113A1

WO2022105113A1 - Key-update-based encryption method, apparatus and device, and storage medium

Info

Publication number: WO2022105113A1
Application number: PCT/CN2021/090175
Authority: WO
Inventors: 盘兵
Original assignee: 平安科技（深圳）有限公司
Priority date: 2020-11-17
Filing date: 2021-04-27
Publication date: 2022-05-27
Also published as: CN112202557B; CN112202557A

Abstract

The present application relates to the field of information security, and provides a key-update-based encryption method, apparatus and device, and a storage medium, which are used for improving the security and reliability of a communication encryption mechanism. The key-update-based encryption method comprises: by means of an advanced encryption standard key, encrypting post information that is a service post, so as to obtain first encrypted post information; generating first key information according to old asymmetric key expiration information; encrypting the first key information by means of an effective asymmetric public key of a receiver to obtain second key information; sending the second key information to a receiving end, such that the receiving end obtains key confirmation and update information on the basis of a key update request; and when the key confirmation and update information sent by the receiving end is received, according to a new asymmetric key and the effective time, performing encryption triggering processing on the post information that is a key update post, so as to obtain second encrypted post information. In addition, the present application further relates to blockchain technology, and post information can be stored in a blockchain.

Description

Encryption method, device, device and storage medium based on key update

This application claims the priority of the Chinese patent application filed on November 17, 2020 with the application number 202011284393.5 and the invention titled "Encryption method, device, device and storage medium based on key update distribution", all of which are The contents are incorporated by reference in the application.

technical field

The present application relates to the field of information encryption and decryption of information security, and in particular, to an encryption method, device, device and storage medium based on key update.

Background technique

With the development of Internet of Things technology and computer technology, the communication security of information has become the direction of much attention, and communication security has also become an important field of information security, especially for the financial industry, customer information, transaction information or other sensitive information The leakage may cause more direct and significant economic losses. From this, it can be seen that a safe and reliable cooperative communication mechanism is the cornerstone of the smooth development of the business.

At present, in the communication of partners in the financial industry, various professional institutions will use various types of encryption mechanisms to encrypt communication messages, update and To ensure that in the case of leakage of communication packets, intruders cannot easily crack the password to obtain information.

The inventor realizes that due to the fact that the encryption mechanisms adopted by various professional institutions fail to coordinate the deficiencies among the encryption algorithms when they use multiple encryption algorithms, they have not considered the need for communication messages of various types. Therefore, the security reliability of the existing communication encryption mechanism is low.

SUMMARY OF THE INVENTION

The present application provides an encryption method, device, device and storage medium based on key update, which are used to improve the security and reliability of a communication encryption mechanism.

A first aspect of the present application provides an encryption method based on key update, which includes: acquiring sent message information, and when the sent message information is a service message and a key update completion instruction is received, obtaining a high-level key update completed encrypting the standard key, and calling the preset message encryption mechanism based on the advanced encryption standard, and encrypting the sent message information through the advanced encryption standard key to obtain the first encrypted sent message information; when the sent message information is When the key update is sent, the old asymmetric key expiration information of the sending information is obtained, and first key information is generated according to the old asymmetric key expiration information, and the first key information includes new non-symmetric key information. Symmetric key, and the effective time of the new asymmetric key; obtain the recipient's asymmetric public key that has taken effect, and encrypt the first key information with the recipient's asymmetric public key to obtain second key information; send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end, based on the key update request, perform key confirmation and key update on the second key information, and obtain key confirmation update information; when receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and the valid time, and perform trigger encryption processing on the sent message information to obtain second encrypted sent message information.

A second aspect of the present application provides an encryption device based on key update, comprising a memory, a processor, and computer-readable instructions stored on the memory and executable on the processor, the processor executing the When the computer-readable instruction is described, the following steps are implemented: obtaining the sending message, when the sending message is a business sending message, and receiving the key update completion instruction, obtaining the advanced encryption standard key after the key update is completed, and calling the preset The message encryption mechanism based on the Advanced Encryption Standard, encrypts the sent message information through the Advanced Encryption Standard key, and obtains the first encrypted message message; when the message message is a key update message, obtain the message Expiration information of the old asymmetric key of the sent message, first key information is generated according to the expiry information of the old asymmetric key, and the first key information includes the new asymmetric key and the new asymmetric key. The effective time of the symmetric key; obtain the effective asymmetric public key of the receiver, and encrypt the first key information through the receiver asymmetric public key to obtain the second key information; The new key confirmation interface, sends the second key information and the key update request to the receiving end, so that the receiving end performs the keying of the second key information based on the key update request. Confirmation and key update to obtain key confirmation update information; when receiving the key confirmation update information sent by the receiving end, trigger the sent message according to the new asymmetric key and the effective time Encryption processing is performed to obtain second encrypted sent message information.

A third aspect of the present application provides a computer-readable storage medium, where computer instructions are stored in the computer-readable storage medium, and when the computer instructions are executed on the computer, the computer is caused to perform the following steps: acquiring the sent message, The sent message information is a business message, and when receiving the key update completion instruction, obtain the advanced encryption standard key after the key update is completed, and call the preset message encryption mechanism based on the advanced encryption standard, through the advanced encryption standard key, encrypt the sent message information to obtain the first encrypted message sent message; when the sent message information is a key update message, obtain the old asymmetric key expiration information of the sent message information, according to the old Asymmetric key expiration information, generate first key information, the first key information includes a new asymmetric key, and the effective time of the new asymmetric key; obtain the effective recipient asymmetric public key and encrypt the first key information through the receiver's asymmetric public key to obtain the second key information; through the preset new key confirmation interface, the second key information and The key update request is sent to the receiving end, so that the receiving end performs key confirmation and key update on the second key information based on the key update request, and obtains key confirmation update information; When the key confirmation update information sent by the receiving end is performed, according to the new asymmetric key and the effective time, trigger encryption processing is performed on the sent message information to obtain second encrypted sent message information.

A fourth aspect of the present application provides an encryption device based on key update, including: an update encryption module for acquiring sent message information, and when the sent message information is a business message and a key update completion instruction is received, obtain the encryption The Advanced Encryption Standard key after the key update is completed, and call the preset message encryption mechanism based on the Advanced Encryption Standard to encrypt the sent message information through the Advanced Encryption Standard key to obtain the first encrypted sent message information; A generating module, configured to obtain the old asymmetric key expiration information of the sent message when the sent message is a key update message, and generate first key information according to the old asymmetric key expiration information , the first key information includes the new asymmetric key and the effective time of the new asymmetric key; the encryption module is used to obtain the effective asymmetric public key of the recipient, and through the recipient's non-symmetric key a symmetric public key, for encrypting the first key information to obtain second key information; a sending module for sending the second key information and the key update request through a preset new key confirmation interface Send it to the receiving end, so that the receiving end performs key confirmation and key update on the second key information based on the key update request, and obtains key confirmation update information; triggering the encryption module for when When receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and the effective time, trigger encryption processing on the sent message to obtain second encrypted sent message.

In the technical solution provided by the present application, when the sent message is a business message and the key update completion instruction is received, the Advanced Encryption Standard key after the key update is completed is obtained, and the preset AESS-based message is called. The encryption mechanism encrypts the sent message through the Advanced Encryption Standard key to obtain the first encrypted sent message; when the sent message is a key update message, the old asymmetric key expiration information of the sent message is obtained, and according to the old asymmetric key Key expiration information, generate first key information, the first key information includes the new asymmetric key and the effective time of the new asymmetric key; obtain the effective asymmetric public key of the receiver, and pass the receiver The asymmetric public key encrypts the first key information to obtain the second key information; through the preset new key confirmation interface, the second key information and the key update request are sent to the receiving end, so that the receiving end can receive the second key information. Based on the key update request, the terminal performs key confirmation and key update on the second key information, and obtains key confirmation update information; when receiving the key confirmation update information sent by the receiving end, it performs key confirmation and update information according to the new asymmetric key and At the effective time, trigger encryption processing on the sent message to obtain the second encrypted sent message. In the embodiment of the present application, the sent message information is encrypted by using the advanced encryption standard key, and the first key information is generated according to the old asymmetric key expiration information, so as to realize the privacy protection processing of communication messages of various sending message types. , send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end performs key confirmation and key update on the second key information based on the key update request , realizes the automatic security update and easy distribution of the key, and triggers the encryption processing of the sent message according to the effective time and the new asymmetric key, which avoids the influence of the abnormal key update interaction process on the normal processing of the business. In the case of ensuring that the new asymmetric key is updated successfully synchronously, the number of communications is reduced, and the operation is simple, thereby improving the security and reliability of the communication encryption mechanism.

Description of drawings

1 is a schematic diagram of an embodiment of an encryption method based on key update in an embodiment of the present application;

2 is a schematic diagram of another embodiment of an encryption method based on key update in an embodiment of the present application;

3 is a schematic diagram of an embodiment of an encryption device based on key update in an embodiment of the present application;

4 is a schematic diagram of another embodiment of an encryption device based on key update in an embodiment of the present application;

FIG. 5 is a schematic diagram of an embodiment of an encryption device based on key update in an embodiment of the present application.

Detailed ways

The present application provides an encryption method, device, device and storage medium based on key update, which improves the security and reliability of the communication encryption mechanism.

In order to make those skilled in the art better understand the solutions of the present application, the embodiments of the present application will be described below with reference to the accompanying drawings in the embodiments of the present application.

The terms "first", "second", "third", "fourth", etc. (if any) in the description and claims of this application and the above-mentioned drawings are used to distinguish similar objects and are not necessarily used to describe a specific order or sequence. It is to be understood that data so used may be interchanged under appropriate circumstances so that the embodiments described herein can be practiced in sequences other than those illustrated or described herein. Furthermore, the terms "comprising" or "having" and any variations thereof are intended to cover non-exclusive inclusion, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those expressly listed steps or units, but may include other steps or units not expressly listed or inherent to these processes, methods, products or devices.

Referring to FIG. 1, a flowchart of an encryption method based on key update provided by an embodiment of the present application specifically includes:

101. Acquire the sent message information. When the sent message information is a business message, and the key update completion instruction is received, obtain the Advanced Encryption Standard key after the key update is completed, and call the preset Advanced Encryption Standard-based message encryption mechanism , encrypting the sent message by using the Advanced Encryption Standard key to obtain the first encrypted sent message.

It can be understood that the execution body of the present application may be an encryption device based on key update, and may also be a terminal or a server, which is not specifically limited here. The embodiments of the present application are described by taking the server of the sender as an execution subject as an example.

Among them, the business sending message is used to indicate the sending of business data. The Advanced Encryption Standard key is an (advanced encryption standard, AES) key. When the server receives and accepts the AES key update request, it determines the time of the received AES key update request as the Advanced Encryption Standard key update time, or determines the key update date in the AES key update request as the Advanced Encryption Standard key update time. The time when the encryption standard key is initiated and updated. The update period in the time when the advanced encryption standard key is initiated must be the preset low-peak business period. The time when the advanced encryption standard key is initiated and updated includes the update date and update period initiated by the advanced encryption standard key. .

The server generates a new AES key during the time when the Advanced Encryption Standard key is initiated and updated, and after generating the new AES key, triggers a key update completion instruction, that is, the updated Advanced Encryption Standard key. When the server receives the encrypted request of the sent message, it parses the encrypted request of the sent message, obtains the sent message, and identifies the type of the sent message. The message encryption mechanism based on the advanced encryption standard is installed, and the message information is converted into a JS object notation (JavaScript object notation, JSON) string, the initial string is obtained, and the initial string is converted into 8-bit (universal character set/unicode) transform format, UTF-8) string to obtain the target string, encrypt the target string with the Advanced Encryption Standard key to obtain the encrypted sending information, encode the encrypted sending information through the Base64 encoding algorithm, and obtain the first encrypted sending information .

102. When the sent message is a key update message, obtain the old asymmetric key expiration information of the sent message, and generate first key information according to the old asymmetric key expiration information, where the first key information includes the new asymmetric key. Symmetric key, and the effective time of the new asymmetric key.

Wherein, the key update message is a message that changes the business relationship, resulting in the update of the service password or the need to update the key periodically. The old asymmetric key expiration information is the old (ron rivest, adi shamir, leonard adleman, RSA) key expiration information. The new asymmetric key is the new (ron rivest, adi shamir, leonard adleman, RSA) key.

When the server receives and accepts the asymmetric key update request, it parses the asymmetric key update request, and obtains the old asymmetric key expiration information of the sent message and the asymmetric key update time. The update period in the update time must be the preset low-peak period of business, and the asymmetric key update time includes the update date and update period initiated by the asymmetric key, or the date on which the asymmetric key update request is accepted is determined as the asymmetric key. The update date when the key is initiated. When the message is a key update message, a new asymmetric key is generated by the preset RSA key generation algorithm or RSA key generation tool, and the validity period of the new asymmetric key, The effective time and the batch number are set to obtain the first key information, wherein the effective time is later than the update date in the asymmetric key initiation update time.

After the server obtains the first key information, it stores the first key information in the preset storage space and the disaster recovery center, and updates the current state of the key process node to be synchronized.

103. Obtain the valid asymmetric public key of the recipient, and encrypt the first key information by using the recipient's asymmetric public key to obtain the second key information.

The server obtains the currently valid asymmetric public key of the recipient, encrypts the first key information with the recipient's asymmetric public key, and obtains the second key information. After the server obtains the second key information, it can The key information is stored in the preset storage space, or after the second key information is fragmented, the fragmented second key information is stored in the preset blockchain according to the preset storage strategy , the storage strategy includes storage ratio and storage area, which improves the security of accessing the second key information. Wherein, after obtaining the second key information, the server may also check the integrity of the second key information, so as to improve the encryption integrity of the second key information.

104. Send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end performs key confirmation and encryption on the second key information based on the key update request. The key is updated, and the key confirmation update information is obtained.

The server sends the second key information and the key update request to the receiving end through the KeyExchange interface of the new key confirmation interface, so that the receiving end uses the currently valid RSA private key of the receiving party to pair the second key with the receiving end based on the key update request. decrypt the key information, obtain the decryption result, and determine whether the decryption result is successful; if so, obtain the new asymmetric key information decrypted by the second key information, and store the new asymmetric key information on the ground to Implement key confirmation and key update for the second key information, and update the current key state to be valid; if not, generate key confirmation update failure information, and send the key confirmation update failure information to the server. Among them, regarding the ground storage of the new asymmetric key information by the receiving end, the validity period, effective time and batch number of the new asymmetric key information can be stored in different storage areas to improve the security of access.

105. When receiving the key confirmation update information sent by the receiving end, perform trigger encryption processing on the sent message according to the new asymmetric key and the effective time to obtain the second encrypted sent message.

When the server receives the key confirmation update information sent by the receiver, it determines whether the current time is the effective time, and if so, triggers the effective instruction, so that the server encrypts the sent message with the new asymmetric key based on the effective instruction. Obtain the second encrypted sent message information, if not, continue to monitor the effective time until the effective time, trigger the effective instruction, so that the server encrypts the sent message with the new asymmetric key based on the effective instruction, and obtains the second encrypted message Post information.

According to the new asymmetric key and the effective time, the server performs trigger encryption processing on the sent message, and after obtaining the second encrypted sent message, it can also: send the first encrypted sent message and/or the second encrypted sent message to the receiving end, and Monitor whether the decrypted information sent by the receiver is received at the preset time, and if not received, encrypt the first encrypted message with the original password before the new password updated in the first encrypted message and/or the second encrypted message. The sending information and/or the second encrypted sending information are encrypted to obtain the first re-encrypted sending information and/or the second re-encrypted sending information, and the first re-encrypted sending information and/or the second re-encrypted sending information can improve the Flexibility of encryption with existing communication encryption mechanisms.

Wherein, in another embodiment, after the server encodes the encrypted sent message information through the Base64 encoding algorithm, the server can also encrypt the encoded encrypted sent message information through the new asymmetric key and encryption method in the above steps 102-105. , and obtain the first encrypted message information.

In the embodiment of the present application, the sent message information is encrypted by using the advanced encryption standard key, and the first key information is generated according to the old asymmetric key expiration information, so as to realize the privacy protection processing of communication messages of various sending message types. , send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end performs key confirmation and key update on the second key information based on the key update request , realizes the automatic security update and easy distribution of the key, and triggers the encryption processing of the sent message according to the effective time and the new asymmetric key, avoiding the influence of the abnormal key update interaction process on the normal processing of the business. The handling of interaction exceptions provides sufficient response processing time, improves the availability of security encryption, reduces the number of communications while ensuring the successful synchronization of the new asymmetric key update, and is easy to operate, thereby improving the security and reliability of the communication encryption mechanism. sex.

Referring to FIG. 2, another flowchart of the encryption method based on key update provided by the embodiment of the present application specifically includes:

201. Obtain the message sent, when the message sent is a business message, and the key update completion instruction is received, obtain the Advanced Encryption Standard key after the key update is completed, and invoke a preset Advanced Encryption Standard-based message encryption mechanism , encrypting the sent message by using the Advanced Encryption Standard key to obtain the first encrypted sent message.

The execution process of step 201 is similar to the execution process of the foregoing step 101, and details are not repeated here.

202. When the sent message is a key update message, obtain the old asymmetric key expiration information of the sent message, and generate first key information according to the old asymmetric key expiration information, where the first key information includes the new asymmetric key. Symmetric key, and the effective time of the new asymmetric key.

Specifically, when the sent message is a key update message, the server obtains the old asymmetric key expiration information and the asymmetric key update time of the sent message, and the Advanced Encryption Standard key based on the key update completion instruction to initiate the update time, the old asymmetric key expiration information includes the preset trigger date; determine whether the asymmetric key update time is the same as the advanced encryption standard key update time; if the asymmetric key update time is the same as the advanced encryption standard key update time If the update time is inconsistent, a new key generation rule is obtained, and the first key information is generated by using the new key generation rule and the preset trigger date.

For example, the preset trigger date is n days before the expiration of the old asymmetric key. For example, the expiration date of the old asymmetric key in the old asymmetric key expiration information is October 20, and n is 3, then The preset trigger date is October 17th, and the server obtains the old asymmetric key expiration information of the sent message and the asymmetric key update time A (A includes the update date A1 and update time A2), and based on the key update completion After the advanced encryption standard key of the instruction initiates the update time B (B includes the update date B1 and the update time B2), judge whether A is equal to B, and if (A=B, that is, A1=B1, A2=B2), stop updating the new The execution of asymmetric key generation and update, if not (A≠B, that is, A1≠B1, A2≠B2 or A1=B1, A2≠B2 or A1≠B1, A2=B2), according to the new key generation rules and Preset the trigger date, generate the first key information, and the new key generation rule is to trigger the new key generation and update instruction on the preset trigger date, so that a new asymmetric key can be generated, and the new asymmetric key can be generated according to the preset rules. The key validity period, effective time and batch number are set, which realizes the staggering of asymmetric key and Advanced Encryption Standard key update, avoids the conflict and confusion of various types of key updates, and improves the efficiency and efficiency of key update. accuracy.

Specifically, if the time when the asymmetric key is initiated and updated is inconsistent with the time when the advanced encryption standard key is initiated and updated, the server obtains a new key generation rule, and triggers a new key generation and update instruction through the preset trigger date; Instructions and new key generation rules, generate a new asymmetric key for the message sent, as well as the validity period and batch number of the new asymmetric key, and obtain the new asymmetric key information; initiate the update time and preset according to the asymmetric key During the off-peak period of business, the effective time of the new asymmetric key in the new asymmetric key information is configured to obtain the first key information.

For example, if the asymmetric key-initiated update time A (A includes the update date A1 and the update time A2) is inconsistent with the Advanced Encryption Standard key-initiated update time B (B includes the update date B1 and the update time B2) (A≠B, that is, A1 ≠B1, A2≠B2 or A1=B1, A2≠B2 or A1≠B1, A2=B2), then the server calls the preset timer to time the trigger time of the preset trigger date. The new key generation and update instruction, according to the new key generation update instruction, use the asymmetric key generation algorithm or asymmetric key generation tool (script) to generate the new asymmetric key of the sent message, and configure the new asymmetric key. The validity period and batch number are obtained, and the new asymmetric key information is obtained. The preset business low-peak period is 02:00-06:00, and the update date of the asymmetric key update time is October 20, then the new asymmetric key The effective time of the new asymmetric key in the key information is set to the period of 02:00-06:00 later than October 23 (that is, the effective time is greater than the update date when the asymmetric key initiates the update time + 3), so as to obtain the first a key information.

203. Obtain the valid asymmetric public key of the recipient, and encrypt the first key information by using the recipient's asymmetric public key to obtain the second key information.

The execution process of step 203 is similar to the execution process of the foregoing step 103, and details are not repeated here.

204. Send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end performs key confirmation and encryption on the second key information based on the key update request. The key is updated, and the key confirmation update information is obtained.

Specifically, the server sends the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver obtains the receiver's asymmetric private key based on the key update request; The asymmetric private key is used to decrypt and store the second key information on the ground to obtain new decrypted key information, which includes the batch number; Key encryption agreement information; through the preset hypertext transmission protocol, the new key encryption agreement information is assembled with the response message, and the key confirmation update information is obtained.

For example, the server sends the second key information and the key update request to the receiving end through the KeyExchange interface of the new key confirmation interface, so that the receiving end decrypts the second key information through the currently valid RSA private key of the receiver , obtain the decryption new key information, and generate the new key encryption agreement information confirmMsg by the batch number and the preset field "CONFIRMED" in the decryption new key information in the form of "batch number + CONFIRMED", through the hypertext transmission protocol (Hyper text transfer protocol, HTTP), assemble the new key encryption protocol information into a response message, so as to obtain the key confirmation update information.

205. When receiving the key confirmation update information sent by the receiving end, perform decryption and correctness analysis on the key confirmation update information in turn to obtain new key update completion information.

Specifically, when receiving the key confirmation update information sent by the receiver, the server parses the key confirmation update information to obtain the parsing information, and decrypts the parsing information through the new asymmetric key to obtain a new key encryption agreement information; determine whether the new key encryption agreement information is consistent with the preset value; if the new key encryption agreement information is consistent with the preset value, generate the new key update completion information of the second key information; if the new key encryption agreement information is consistent with the preset value If the information is inconsistent with the preset value, the target new key encryption agreement information is iteratively obtained until the target new key encryption agreement information is consistent with the preset value, and the new key update completion information is obtained.

For example, the preset value may be at least one of a field and a field value, and the preset value includes the batch number and confirmation field of the new asymmetric key. When receiving the key confirmation update information sent by the receiving end, Parse the key confirmation update information to obtain the parsing information, and decrypt the parsing information through the new asymmetric key to obtain the new key encryption agreement information, and determine whether the batch number in the new key encryption agreement information is stored with the server. The batch number of the new asymmetric key is the same, and whether the CONFIRMED field in the new key encryption agreement information is a field agreed by the server (confirmation field), if so, generate the new key update completion information of the second key information , indicating that the receiver has received the correct new asymmetric key and updated the current state of the new key to be valid;

If not, generate new asymmetric key information according to the old asymmetric key expiration information, obtain the valid recipient's asymmetric public key, encrypt the new asymmetric key information with the recipient's asymmetric public key, and obtain Encrypted information, through the preset new key confirmation interface, the encrypted information and the key update request are sent to the receiving end, so that the receiving end performs key confirmation and key update on the encrypted information based on the key update request, and obtains a new key. Key confirmation update information, when receiving the new key confirmation update information sent by the receiver, parse the new key confirmation update information in turn to obtain new parsing information, and use the new asymmetric key to pair the new key confirmation update information. Analyze the information for decryption, obtain the target new key encryption agreement information, determine whether the target new key encryption agreement information is consistent with the preset value, and repeat the execution process of the above operation steps repeatedly until the target new key encryption agreement information is consistent with the preset value. If the value is the same, the new key update completion information is obtained.

206. Trigger a new key validating instruction according to the new key updating completion information and valid time, and perform trigger encryption processing on the sent message according to the new key validating instruction and the new asymmetric key to obtain second encrypted sending message.

Specifically, the server invokes the preset timer through the new key update completion information, and executes the timing task based on the effective time; when the timing task counts to the effective time, triggers the new key effective instruction; The symmetric key is used to encrypt the sent message to obtain the second encrypted sent message.

For example, if the effective time is October-February 03:00, when the server receives the new key update completion information, it calls the preset timer to execute the timing task based on the effective time. When the timing task counts to October-February 03:00 When the new key is valid, the new key validating instruction is triggered, and the sent message is encrypted by the new key validating instruction and the new asymmetric key, and the second encrypted sending message is obtained.

The encryption method based on key update in the embodiment of the present application is described above, and the encryption device based on key update in the embodiment of the present application is described below. Please refer to FIG. 3 , the encryption device based on key update in the embodiment of the present application is described. One embodiment includes:

The update encryption module 301 is used to obtain the sent message information, when the sent message information is a business sent message and the key update completion instruction is received, obtain the advanced encryption standard key after the key update is completed, and call the preset based on the advanced encryption standard The message encryption mechanism of the device encrypts the message sent by the Advanced Encryption Standard Key to obtain the first encrypted message sent;

The generating module 302 is configured to obtain the old asymmetric key expiration information of the sent message when the sent message is a key update message, and generate first key information, the first key according to the old asymmetric key expiration information The information includes the new asymmetric key, and the effective time of the new asymmetric key;

The encryption module 303 is configured to obtain the valid asymmetric public key of the recipient, and encrypt the first key information through the recipient's asymmetric public key to obtain the second key information;

The sending module 304 is configured to send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end encrypts the second key information based on the key update request. Key confirmation and key update, get key confirmation update information;

The trigger encryption module 305 is configured to, when receiving the key confirmation update information sent by the receiving end, perform trigger encryption processing on the sent message according to the new asymmetric key and the effective time to obtain the second encrypted sent message.

The function implementation of each module in the above-mentioned key update-based encryption apparatus corresponds to each step in the above-mentioned key update-based encryption method embodiment, and the functions and implementation processes thereof will not be repeated here.

In the embodiment of the present application, the sent message information is encrypted by using the advanced encryption standard key, and the first key information is generated according to the old asymmetric key expiration information, so as to realize the privacy protection processing of communication messages of various sending message types. , send the second key information and the key update request to the receiving end through the preset new key confirmation interface, so that the receiving end performs key confirmation and key update on the second key information based on the key update request , realizes the automatic security update and easy distribution of the key, and triggers the encryption processing of the sent message according to the effective time and the new asymmetric key, avoiding the influence of the abnormal key update interaction process on the normal processing of the business. The handling of interaction exceptions provides sufficient response processing time, improves the availability of security encryption, reduces the number of communications while ensuring the successful synchronization of the new asymmetric key update, and is easy to operate, thereby improving the security and reliability of the communication encryption mechanism sex.

Referring to FIG. 4, another embodiment of the encryption device based on key update in the embodiment of the present application includes:

Trigger encryption module 305, for when receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and the effective time, trigger encryption processing on the sent message to obtain the second encrypted sent message;

Wherein, the trigger encryption module 305 specifically includes:

The decryption analysis unit 3051 is used to perform decryption and correctness analysis on the key confirmation update information in turn when receiving the key confirmation update information sent by the receiver to obtain new key update completion information;

The trigger encryption unit 3052 is used to trigger the new key validation instruction through the new key update completion information and valid time, and perform trigger encryption processing on the sent message according to the new key validation instruction and the new asymmetric key to obtain the second key. Encrypted message.

Optionally, the generating module 302 can also be specifically used for:

The obtaining unit 3021 is configured to obtain the old asymmetric key expiration information and the asymmetric key update time of the sent message information, and the Advanced Encryption Standard key based on the key update completion instruction when the sent message information is a key update message The update time is initiated, and the old asymmetric key expiration information includes the preset trigger date;

Judging unit 3022, for judging whether the asymmetric key initiation update time is consistent with the Advanced Encryption Standard key initiation update time;

The generating unit 3023 is configured to obtain a new key generation rule if the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, and generate the first key by using the new key generation rule and the preset trigger date information.

Optionally, the generating unit 3023 can also be specifically used for:

If the time when the asymmetric key is initiated and updated is inconsistent with the time when the advanced encryption standard key is initiated and updated, a new key generation rule is obtained, and a new key generation and update instruction is triggered by the preset trigger date;

Through the new key generation update instruction and the new key generation rule, generate the new asymmetric key of the message information, as well as the validity period and batch number of the new asymmetric key, and obtain the new asymmetric key information;

The effective time of the new asymmetric key in the new asymmetric key information is configured according to the time when the asymmetric key is initiated and updated and the preset service low-peak period, to obtain the first key information.

Optionally, the sending module 304 may also be specifically used for:

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver obtains the receiver's asymmetric private key based on the key update request;

Decrypt and store the second key information through the receiver's asymmetric private key to obtain new decrypted key information, which includes the batch number;

Splicing the preset field and the batch number to obtain the new key encryption agreement information;

Through the preset hypertext transmission protocol, the response message is assembled to the new key encryption agreement information, and the key confirmation update information is obtained.

Optionally, the decryption analysis unit 3051 can also be specifically used for:

When receiving the key confirmation update information sent by the receiver, parse the key confirmation update information to obtain the parsing information, and decrypt the parsing information through the new asymmetric key to obtain the new key encryption agreement information;

Determine whether the new key encryption agreement information is consistent with the preset value;

If the new key encryption agreement information is consistent with the preset value, generating new key update completion information of the second key information;

If the new key encryption agreement information is inconsistent with the preset value, the target new key encryption agreement information is iteratively acquired until the target new key encryption agreement information is consistent with the preset value, and the new key update completion information is obtained.

Optionally, the trigger encryption unit 3052 can also be specifically used for:

Call the preset timer through the new key update completion information to execute the timing task based on the effective time;

When the timing task counts to the effective time, trigger the new key effective instruction;

Through the new key validating instruction and the new asymmetric key, the sent message information is encrypted to obtain the second encrypted sent message information.

The function implementation of each module and each unit in the above key update-based encryption device corresponds to each step in the above key update-based encryption method embodiment, and their functions and implementation processes are not repeated here.

3 to 4 above describe in detail the encryption device based on key update in the embodiment of the present application from the perspective of modular functional entities, and the following describes the encryption device based on key update in the embodiment of the present application from the perspective of hardware processing in detail. describe.

FIG. 5 is a schematic structural diagram of an encryption device based on key update provided by an embodiment of the present application. The encryption device 500 based on key update may vary greatly due to different configurations or performances, and may include one or more than one Central processing units (CPU) 510 (eg, one or more processors) and memory 520, one or more storage media 530 (eg, one or more mass storage devices) that store application programs 533 or data 532. Among them, the memory 520 and the storage medium 530 may be short-term storage or persistent storage. The program stored in the storage medium 530 may include one or more modules (not shown in the figure), and each module may include a series of instructions to operate on the key update-based encryption device 500 . Further, the processor 510 may be configured to communicate with the storage medium 530 to execute a series of instruction operations in the storage medium 530 on the encryption device 500 based on key update.

The encryption device 500 based on key update may also include one or more power supplies 540, one or more wired or wireless network interfaces 550, one or more input and output interfaces 560, and/or, one or more operating systems 531, For example Windows Server, Mac OS X, Unix, Linux, FreeBSD, etc. Those skilled in the art can understand that the structure of the encryption device based on key update shown in FIG. 5 does not constitute a limitation on the encryption device based on key update, and may include more or less components than those shown in the figure, or a combination of certain components may be included. some components, or a different arrangement of components.

The present application also provides an encryption device based on key update, comprising: a memory and at least one processor, wherein instructions are stored in the memory, the memory and the at least one processor are interconnected by a line; the at least one processor The processor invokes the instructions in the memory to cause the key update-based encryption device to perform the steps in the above-mentioned key update-based encryption method.

The present application also provides a computer-readable storage medium, and the computer-readable storage medium may be a non-volatile computer-readable storage medium or a volatile computer-readable storage medium. The computer-readable storage medium stores computer instructions, and when the computer instructions are executed on the computer, the computer performs the following steps:

Obtain the message sent, when the message sent is a business message, and the key update completion instruction is received, obtain the Advanced Encryption Standard key after the key update is completed, and call the preset message encryption mechanism based on the Advanced Encryption Standard , encrypting the sending information by using the Advanced Encryption Standard key to obtain the first encrypted sending information; when the sending information is a key update sending, the old asymmetric key for obtaining the sending information expires information, generate first key information according to the old asymmetric key expiration information, the first key information includes the new asymmetric key, and the effective time of the new asymmetric key; obtain the effective time and encrypt the first key information through the receiver's asymmetric public key to obtain the second key information; through the preset new key confirmation interface, the The second key information and the key update request are sent to the receiving end, so that the receiving end performs key confirmation and key update on the second key information based on the key update request, and obtains key confirmation Update information; when receiving the key confirmation update information sent by the receiving end, trigger encryption processing on the sent message according to the new asymmetric key and the effective time to obtain second encrypted sent message.

Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working process of the system, device and unit described above may refer to the corresponding process in the foregoing method embodiments, which will not be repeated here.

The integrated unit, if implemented in the form of a software functional unit and sold or used as an independent product, may be stored in a computer-readable storage medium. Based on this understanding, the technical solutions of the present application can be embodied in the form of software products in essence, or the parts that contribute to the prior art, or all or part of the technical solutions, and the computer software products are stored in a storage medium , including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM), random access memory (RAM), magnetic disk or optical disk and other media that can store program codes .

As mentioned above, the above embodiments are only used to illustrate the technical solutions of the present application, but not to limit them; although the present application has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand: The technical solutions described in the embodiments are modified, or some technical features thereof are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions in the embodiments of the present application.

Claims

A key update-based encryption method, comprising:

Obtain the message sent, when the message sent is a business message, and the key update completion instruction is received, obtain the Advanced Encryption Standard key after the key update is completed, and call the preset message encryption mechanism based on the Advanced Encryption Standard , encrypting the sending message by using the Advanced Encryption Standard key to obtain the first encrypted sending message;

When the sent message is a key update message, obtain the old asymmetric key expiration information of the sent message, and generate first key information according to the old asymmetric key expiration information. The key information includes the new asymmetric key and the effective time of the new asymmetric key;

Obtaining the valid asymmetric public key of the recipient, and encrypting the first key information through the recipient asymmetric public key to obtain second key information;

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver can update the second key information based on the key update request. Perform key confirmation and key update, and obtain key confirmation update information;

When receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and the effective time, trigger encryption processing on the sent message to obtain second encrypted sent message.
The encryption method based on key update according to claim 1, wherein, when the sent message is a key update sent message, the old asymmetric key expiration information of the sent message is obtained, according to the old asymmetric key expiration information. Asymmetric key expiration information, generating first key information, including:

When the sent message is a key update message, obtain the old asymmetric key expiration information and the asymmetric key update time of the sent message, and the Advanced Encryption Standard key based on the key update completion instruction Initiating update time, the old asymmetric key expiration information includes a preset trigger date;

Judging whether the asymmetric key initiation update time is consistent with the Advanced Encryption Standard key initiation update time;

If the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, obtain a new key generation rule, and generate a first key generation rule based on the new key generation rule and the preset trigger date a key information.
The encryption method based on key update according to claim 2, wherein, if the time when the asymmetric key is updated is inconsistent with the time when the advanced encryption standard key is updated, a new key generation rule is obtained, And through the new key generation rule and the preset trigger date, generate the first key information, including:

If the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, acquiring a new key generation rule, and triggering a new key generation update instruction through the preset trigger date;

Through the new key generation and update instruction and the new key generation rule, a new asymmetric key of the sent message is generated, as well as the validity period and batch number of the new asymmetric key, and a new asymmetric key is obtained. key information;

The effective time of the new asymmetric key in the new asymmetric key information is configured according to the time when the asymmetric key is initiated and updated and the preset service low-peak period, to obtain the first key information.
The encryption method based on key update according to claim 1, wherein the second key information and the key update request are sent to the receiving end through a preset new key confirmation interface, so that all The receiving end performs key confirmation and key update on the second key information based on the key update request, and obtains key confirmation update information, including:

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver obtains the receiver's asymmetric private key based on the key update request;

Decrypt and store the second key information through the receiver's asymmetric private key to obtain new decrypted key information, where the new decrypted key information includes a batch number;

splicing the preset field and the batch number to obtain the new key encryption agreement information;

Through the preset hypertext transmission protocol, a response message is assembled for the new key encryption agreement information, and the key confirmation update information is obtained.
The encryption method based on key update according to any one of claims 1-4, wherein when receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and For the effective time, trigger encryption processing on the sent message information to obtain second encrypted sent message information, including:

When receiving the key confirmation update information sent by the receiving end, perform decryption and correctness analysis on the key confirmation update information in turn to obtain new key update completion information;

According to the new key update completion information and the effective time, a new key effective instruction is triggered, and according to the new key effective instruction and the new asymmetric key, trigger encryption processing is performed on the sent message, Obtain the second encrypted message information.
The encryption method based on key update according to claim 5, wherein when receiving the key confirmation update information sent by the receiving end, the key confirmation update information is sequentially decrypted and correctness analysis is performed , get the new key update completion information, including:

When receiving the key confirmation update information sent by the receiving end, parse the key confirmation update information to obtain the parsing information, and decrypt the parsing information by using the new asymmetric key to obtain a new Key encryption agreement information;

Judging whether the new key encryption agreement information is consistent with a preset value;

If the new key encryption agreement information is consistent with the preset value, generating new key update completion information of the second key information;

If the new key encryption agreement information is inconsistent with the preset value, iteratively obtains the target new key encryption agreement information until the target new key encryption agreement information is consistent with the preset value, and the obtained new key is updated. information.
The encryption method based on key update according to claim 5, wherein the new key validation instruction is triggered according to the new key update completion information and the validation time, and according to the new key validation instruction and the new asymmetric key, triggering encryption processing on the sent message to obtain the second encrypted message sent, including:

The preset timer is invoked through the new key update completion information, and the timing task based on the effective time is executed;

When the timing task counts to the effective time, trigger a new key effective instruction;

The sending message is encrypted by using the new key validating instruction and the new asymmetric key to obtain second encrypted sending message.
An encryption device based on key update, comprising a memory, a processor, and computer-readable instructions stored on the memory and executable on the processor, which are implemented when the processor executes the computer-readable instructions Follow the steps below:

Obtain the message sent, when the message sent is a business message, and the key update completion instruction is received, obtain the Advanced Encryption Standard key after the key update is completed, and call the preset message encryption mechanism based on the Advanced Encryption Standard , encrypting the sending message by using the Advanced Encryption Standard key to obtain the first encrypted sending message;

When the sent message is a key update message, obtain the old asymmetric key expiration information of the sent message, and generate first key information according to the old asymmetric key expiration information. The key information includes the new asymmetric key, and the effective time of the new asymmetric key;

Obtaining the valid recipient's asymmetric public key, and encrypting the first key information by using the recipient's asymmetric public key to obtain second key information;

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver can update the second key information based on the key update request. Perform key confirmation and key update, and obtain key confirmation update information;

When receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and the effective time, trigger encryption processing on the sent message to obtain second encrypted sent message.
The encryption device based on key update according to claim 8, wherein the processor executes the computer-readable instructions to realize the acquisition of the old information of the sent message when the sent message is a key update sent message The asymmetric key expiration information, when generating the first key information according to the old asymmetric key expiration information, includes the following steps:

When the sent message is a key update message, obtain the old asymmetric key expiration information and the asymmetric key update time of the sent message, and the Advanced Encryption Standard key based on the key update completion instruction Initiating update time, the old asymmetric key expiration information includes a preset trigger date;

Judging whether the asymmetric key initiation update time is consistent with the Advanced Encryption Standard key initiation update time;

If the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, obtain a new key generation rule, and generate a first key generation rule based on the new key generation rule and the preset trigger date a key information.
The encryption device based on key update according to claim 9, wherein the processor executes the computer-readable instructions to implement the if the asymmetric key initiates an update time and the Advanced Encryption Standard key initiate If the update time is inconsistent, obtain a new key generation rule, and generate the first key information by using the new key generation rule and the preset trigger date, including the following steps:

If the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, acquiring a new key generation rule, and triggering a new key generation update instruction through the preset trigger date;

Through the new key generation and update instruction and the new key generation rule, a new asymmetric key of the sent message is generated, as well as the validity period and batch number of the new asymmetric key, and a new asymmetric key is obtained. key information;

The effective time of the new asymmetric key in the new asymmetric key information is configured according to the time when the asymmetric key is initiated and updated and the preset service low-peak period, to obtain the first key information.
The encryption device based on key update according to claim 8, wherein the processor executes the computer-readable instructions to implement the new key confirmation interface through the preset, and the second key information and the The key update request is sent to the receiving end, so that the receiving end performs key confirmation and key update on the second key information based on the key update request, and when the key confirmation update information is obtained, it includes the following step:

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver obtains the receiver's asymmetric private key based on the key update request;

Decrypt and store the second key information through the receiver's asymmetric private key to obtain new decrypted key information, where the new decrypted key information includes a batch number;

splicing the preset field and the batch number to obtain the new key encryption agreement information;

Through the preset hypertext transmission protocol, a response message is assembled for the new key encryption agreement information, and the key confirmation update information is obtained.
The encryption device based on key update according to any one of claims 8-11, wherein the processor executes the computer-readable instructions to realize the key confirmation update when receiving the key sent by the receiving end When the message is sent, according to the new asymmetric key and the effective time, the trigger encryption process is performed on the sent message to obtain the second encrypted sent message, including the following steps:

When receiving the key confirmation update information sent by the receiving terminal, decryption and correctness analysis are carried out successively to the key confirmation update information to obtain new key update completion information;

According to the new key update completion information and the effective time, a new key effective instruction is triggered, and according to the new key effective instruction and the new asymmetric key, trigger encryption processing is performed on the sent message, Obtain the second encrypted message information.
The encryption device based on key update according to claim 12, wherein the processor executes the computer-readable instructions to implement the process of performing the key confirmation update information sent by the receiving end to the The key confirmation update information is decrypted and correctness analysis is performed in turn, and when the new key update completion information is obtained, the following steps are included:

When receiving the key confirmation update information sent by the receiving end, parse the key confirmation update information to obtain the parsing information, and decrypt the parsing information by using the new asymmetric key to obtain a new Key encryption agreement information;

Judging whether the new key encryption agreement information is consistent with a preset value;

If the new key encryption agreement information is consistent with the preset value, generating new key update completion information of the second key information;

If the new key encryption agreement information is inconsistent with the preset value, iteratively obtains the target new key encryption agreement information until the target new key encryption agreement information is consistent with the preset value, and the obtained new key is updated. information.
The encryption device based on key update according to claim 12, wherein the processor executes the computer-readable instructions to realize the triggering of the new key through the new key update completion information and the effective time The validating instruction, and according to the new key validating instruction and the new asymmetric key, triggering encryption processing on the sending message, and obtaining the second encrypted sending message, including the following steps:

The preset timer is invoked through the new key update completion information, and the timing task based on the effective time is executed;

When the timing task counts to the effective time, trigger a new key effective instruction;

The sending message is encrypted by using the new key validating instruction and the new asymmetric key to obtain second encrypted sending message.
A computer-readable storage medium, storing computer instructions in the computer-readable storage medium, when the computer instructions are executed on a computer, the computer is made to perform the following steps:

Obtain the message sent, when the message sent is a business message, and the key update completion instruction is received, obtain the Advanced Encryption Standard key after the key update is completed, and call the preset message encryption mechanism based on the Advanced Encryption Standard , encrypting the sending message by using the Advanced Encryption Standard key to obtain the first encrypted sending message;

When the sent message is a key update message, obtain the old asymmetric key expiration information of the sent message, and generate first key information according to the old asymmetric key expiration information. The key information includes the new asymmetric key, and the effective time of the new asymmetric key;

Obtaining the valid recipient's asymmetric public key, and encrypting the first key information by using the recipient's asymmetric public key to obtain second key information;

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver can update the second key information based on the key update request. Perform key confirmation and key update, and obtain key confirmation update information;

When receiving the key confirmation update information sent by the receiving end, according to the new asymmetric key and the effective time, trigger encryption processing on the sent message to obtain second encrypted sent message.
The computer-readable storage medium of claim 15, when the computer instructions are executed on a computer, causing the computer to further perform the following steps:

When the sent message is a key update message, obtain the old asymmetric key expiration information and the asymmetric key update time of the sent message, and the Advanced Encryption Standard key based on the key update completion instruction Initiating update time, the old asymmetric key expiration information includes a preset trigger date;

Judging whether the asymmetric key initiation update time is consistent with the Advanced Encryption Standard key initiation update time;

If the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, obtain a new key generation rule, and generate a first key generation rule based on the new key generation rule and the preset trigger date a key information.
The computer-readable storage medium of claim 16, which, when executed on a computer, causes the computer to further perform the following steps:

If the asymmetric key initiation update time is inconsistent with the Advanced Encryption Standard key initiation update time, acquiring a new key generation rule, and triggering a new key generation update instruction through the preset trigger date;

Through the new key generation and update instruction and the new key generation rule, a new asymmetric key of the sent message is generated, as well as the validity period and batch number of the new asymmetric key, and a new asymmetric key is obtained. key information;

The effective time of the new asymmetric key in the new asymmetric key information is configured according to the time when the asymmetric key is initiated and updated and the preset service low-peak period, to obtain the first key information.
The computer-readable storage medium of claim 15, when the computer instructions are executed on a computer, causing the computer to further perform the following steps:

Send the second key information and the key update request to the receiver through the preset new key confirmation interface, so that the receiver obtains the receiver's asymmetric private key based on the key update request;

Decrypt and store the second key information through the receiver's asymmetric private key to obtain new decrypted key information, where the new decrypted key information includes a batch number;

splicing the preset field and the batch number to obtain the new key encryption agreement information;

Through the preset hypertext transmission protocol, a response message is assembled for the new key encryption agreement information, and the key confirmation update information is obtained.
The computer-readable storage medium of any one of claims 15-18, when the computer instructions run on a computer, cause the computer to further perform the following steps:

When receiving the key confirmation update information sent by the receiving end, perform decryption and correctness analysis on the key confirmation update information in turn to obtain new key update completion information;

According to the new key update completion information and the effective time, a new key effective instruction is triggered, and according to the new key effective instruction and the new asymmetric key, trigger encryption processing is performed on the sent message, Obtain the second encrypted message information.
A key update-based encryption device, the key update-based encryption device comprising:

The update encryption module is used to obtain the sent message, when the sent message is a business message and the key update completion instruction is received, obtain the advanced encryption standard key after the key update is completed, and call the preset based on advanced encryption a standard message encryption mechanism, encrypting the message sending information through the advanced encryption standard key to obtain the first encrypted message sending information;

A generating module, configured to obtain the old asymmetric key expiration information of the sent message when the sent message is a key update message, and generate first key information according to the old asymmetric key expiration information , the first key information includes a new asymmetric key, and the effective time of the new asymmetric key;

an encryption module, configured to obtain the valid recipient's asymmetric public key, and encrypt the first key information through the recipient's asymmetric public key to obtain second key information;

The sending module is configured to send the second key information and the key update request to the receiving end through a preset new key confirmation interface, so that the receiving end, based on the key update request, The second key information performs key confirmation and key update, and obtains key confirmation update information;

The trigger encryption module is configured to, when receiving the key confirmation update information sent by the receiving end, perform trigger encryption processing on the sent message according to the new asymmetric key and the effective time to obtain a second encryption Post information.