CN106453426A - Symmetric encryption and decryption method and system based on key space-time fragmentation storage - Google Patents
Symmetric encryption and decryption method and system based on key space-time fragmentation storage Download PDFInfo
- Publication number
- CN106453426A CN106453426A CN201611144255.0A CN201611144255A CN106453426A CN 106453426 A CN106453426 A CN 106453426A CN 201611144255 A CN201611144255 A CN 201611144255A CN 106453426 A CN106453426 A CN 106453426A
- Authority
- CN
- China
- Prior art keywords
- time
- space
- cipher key
- generation module
- terminal
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/06—Network architectures or network communication protocols for network security for supporting key management in a packet data network
- H04L63/068—Network architectures or network communication protocols for network security for supporting key management in a packet data network using time-dependent keys, e.g. periodically changing keys
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0435—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
- H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
- H04L63/0478—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload applying multiple layers of encryption, e.g. nested tunnels or encrypting the content with a first key and then with at least a second key
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/10—Protocols in which an application is distributed across nodes in the network
- H04L67/1097—Protocols in which an application is distributed across nodes in the network for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/06—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols the encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions; Pseudorandom sequence generators
- H04L9/0643—Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0872—Generation of secret information including derivation or calculation of cryptographic keys or passwords using geo-location information, e.g. location data, time, relative position or proximity to other entities
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Power Engineering (AREA)
- Storage Device Security (AREA)
- Mobile Radio Communication Systems (AREA)
Abstract
The invention relates to the encryption and decryption technology, and discloses a symmetric encryption and decryption method and system based on key space-time fragmentation storage for guaranteeing the security of keys to improve the security of data transmission. The symmetric encryption and decryption system comprises a terminal and a server; the terminal comprises a time key segment generation module, a space key segment generation module, a fixed key segment generation module and a verification module; the server comprises a time key segment generation module, a space key segment generation module, a fixed key segment generation module and a verification module, which are the same as those of the terminal, wherein the time key segment generation modules, the space key segment generation modules and the fixed key segment generation modules are distributed in different servers. The symmetric encryption and decryption method and system disclosed by the invention is suitable for high security data transmission.
Description
Technical field
The present invention relates to encryption and decryption technology and in particular to based on key space-time fragmentation storage symmetrical encipher-decipher method and
System.
Background technology
With the development of Internet technology, the communication between terminal server is very frequent.By capturing terminal kimonos
The message at business device end is analyzed counting, and finds that mass data does not all take encipherment protection measure, is directly plaintext transmission.Cause
This, encrypted transmission message is extremely important.Take encrypted transmission, in order to ensure encryption and decryption efficiency, generally use symmetric cryptography mode.
And the key safety of symmetric cryptography, it is that symmetric cipher secure is most important.How to store and obtain symmetric cryptographic key, especially
It is the safety of terminal key storage, prevent it from being obtained the key being to ensure that key and symmetric cipher secure by decompiling.
Content of the invention
The technical problem to be solved is:A kind of symmetrical encryption and decryption based on the storage of key space-time fragmentation is proposed
Method and system, ensure the safety of key, thus improving the safety of data transfer.
The technical solution adopted for the present invention to solve the technical problems is:
Based on the symmetrical encrypting and deciphering system of key space-time fragmentation storage, it includes terminal server end;
Described terminal includes:Time cipher key sections generation module, space cipher key sections generation module, fixed key section generation module
And correction verification module;
Described server end includes and terminal identical time cipher key sections generation module, space cipher key sections generation module, solid
Determine cipher key sections generation module and correction verification module, wherein, time cipher key sections generation module, space cipher key sections generation module, fixation are close
Key section generation module adopts distributed arrangement in different server;
Described time cipher key sections generation module, for intercepting current time as parameter, through algorithm be converted into by letter,
Numeral and spcial character composition 20 time cipher key sections, using this cipher key sections as symmetric cryptographic key Zeitigung attribute;
Described space cipher key sections generation module, for being presently in the longitude of position and latitude as parameter, warp using terminal
Cross the 32 bit space cipher key sections that algorithm is converted into being made up of letter, numeral and spcial character, using this cipher key sections as symmetric cryptography
The spatialization attribute of key;
Described fixed key section generation module, close for generating the fixation being made up of 8 character strings with service attribute
Key section, and for forming key, and calling symmetric encipherment algorithm to bright time cipher key sections, space cipher key sections, fixed key section
Literary composition is encrypted, or ciphertext is decrypted;
Described correction verification module, for generating time check code and space check code, and to present system time and terminal warp
Latitude data is verified.
As optimizing further, the current time precision that described time cipher key sections generation module is intercepted is 1000ms, that is,
The time cipher key sections being generated in current time to the time period delay 1000ms are identical.
As optimizing further, the space cipher key sections generation module of described server end is previously according to the current institute of each terminal
The longitude of place position and latitude generate space cipher key sections, and are saved in the corresponding number of space cipher key sections generation module place server
According in storehouse, and correspond associated storage with space check code.
As optimizing further, described time check code is:Terminal by sha256 encryption is carried out to present system time,
Take the check value acquired in first 45 of ciphertext after encryption;
Described space check code is:The longitude and latitude of its present position of terminal-pair takes 2 after arithmetic point, is carried out with " & " symbol
Connect, then carry out sha256 encryption, take the check value acquired in first 45 of ciphertext after encryption.
As optimizing further, described present system time is verified, refer to:
Server, after receiving the incoming time check code of terminal, carries out sha256 to server present system time and adds
Close, take front 45 acquisition check values of ciphertext after encryption, the time check code incoming with terminal is compared, if unanimously, enters
Enter the follow-up process of deciphering, if inconsistent, cannot be carried out deciphering, and prompt terminal.
As optimizing further, described terminal longitude and latitude degrees of data is verified, refer to:
Server, after receiving the incoming space check code of terminal, takes according to this terminal corresponding longitude and latitude degrees of data of storage
2 after arithmetic point, it is attached with " & " symbol, then carries out sha256 encryption, take front 45 acquisition check values of ciphertext after encryption
The space check code incoming with terminal is compared, if unanimously, obtains corresponding space cipher key sections according to space check code.
Additionally, present invention also offers a kind of symmetrical encipher-decipher method based on the storage of key space-time fragmentation, it includes
Implemented below step:
The information that A, terminal will send is combined by prescribed form, the plaintext after combination is encrypted, encryption side
Formula is:Space cipher key sections generation module is called to generate space cipher key sections first, when recalling the generation of time cipher key sections generation module
Between cipher key sections, call correction verification module to generate space check code and time check code simultaneously;Fixed key section is finally called to generate mould
Block generates fixed key section, and general space cipher key sections and time cipher key sections generate symmetric key, calls algorithm by plain text encryption
Become ciphertext, and send jointly to server together with time check code and space check code;
After B, server receive the request of terminal transmission, first time check code is verified, if time check code is not
Correct then not decipher, and prompt terminal adjustment time and server sync, if correctly, verify terminal longitude and latitude degrees of data, school
Test by rear, carry out subsequent decryption flow process, deciphering flow process is:When the time cipher key sections generation module of invoking server first generates
Between cipher key sections, then corresponding space cipher key sections are extracted according to space check code, are finally generated by fixed key section generation module
Fixed key section, and integrating time cipher key sections and space cipher key sections generate symmetric key, call algorithm that ciphertext is decrypted, obtain
Take in plain text;
After the completion of C, server are processed according to the plaintext that deciphering obtains, response message is combined into response report by prescribed form
Literary composition, and response message is encrypted, cipher mode is:Allocating time cipher key sections generation module generates the time according to current time
Cipher key sections, then the space cipher key sections with using when deciphering before, and generated after fixed key section by fixed key section generation module
Time cipher key sections, space cipher key sections and fixed key section are carried out integrating and generates symmetric key, call algorithm that response message is entered
Row is encrypted and is fed back to terminal;
After D, the terminal response message after receiving encryption, message is decrypted, manner of decryption is:First according to current
System time allocating time cipher key sections generation module generates time cipher key sections;Longitude and latitude is obtained according to residing geographical position, calls
Space cipher key sections generation module generates space key;After the last generation fixed key section by fixed key section generation module, integrate
Time cipher key sections, space cipher key sections and fixed key section generate counterpart keys, call algorithm that the response message after encryption is carried out
Deciphering.
The invention has the beneficial effects as follows:
By the way of space-time fragmentation, store symmetric cryptographic key at terminal server end:Symmetric cryptographic key is eventually
End takes fragmentation to be divided into some sections, and one section is based on current time and generates through special algorithm, and one section is warp based on geographical position
Latitude scope generates through special algorithm, along with other fixed fields, is algorithmically combined into encryption key.
Server end takes the mode synchronous with terminal time to be based on the corresponding key segments of time generation, is simultaneously based on end
The geographical position at end generates corresponding key segments, along with fixed field corresponding with terminal, algorithmically synthesis and terminal one
Straight key.This ensure that symmetric cryptographic key is dynamically generated, terminal does not carry out key persistence simultaneously, and decompiling cannot
Direct access;Time key segments and space key segments and other secret agreement segment are put by server end with distributed mode
Put in different server, prevent individual server from being led to whole Key Exposure by attack.It is ensured that key from terminal to server
Safety.
Brief description
Fig. 1 encrypts for terminal to server end and sends request message, the flow process deciphered by server;
Fig. 2 is that server end sends response message to terminal encryption, by the flow process of terminal deciphering.
Specific embodiment
It is contemplated that proposing a kind of symmetrical encryption and decryption method and system based on the storage of key space-time fragmentation, ensure close
The safety of key, thus improve the safety of data transfer.
The symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation in the present invention, it includes terminal server
End;
Described terminal includes:Time cipher key sections generation module, space cipher key sections generation module, fixed key section generation module
And correction verification module;
Described server end includes and terminal identical time cipher key sections generation module, space cipher key sections generation module, solid
Determine cipher key sections generation module and correction verification module, wherein, time cipher key sections generation module, space cipher key sections generation module, fixation are close
Key section generation module adopts distributed arrangement in different server;
The function declaration of modules is as follows:
First, the cipher key sections generation module function phase of the time cipher key sections generation module server of terminal is same.Terminal or clothes
After business device triggered time cipher key sections generation module, the generation current time in system is truncated to the precision of 1000 Milliseconds.Obtain when
Between as parameter, be converted into 20 cipher key sections being made up of letter, numeral and spcial character through algorithm.This cipher key sections is as right
Claim the Zeitigung attribute of encryption key.The precision of 1000 Milliseconds, that is, delaying the time cipher key sections generating in 1000 milliseconds is phase
With.
2nd, the space cipher key sections generation module function phase of the space cipher key sections generation module server of terminal is same.Terminal
After the cipher key sections generation module of triggering space, terminal obtains longitude and the latitude being presently in position.Using longitude and latitude as ginseng
Number, is converted into 32 cipher key sections being made up of letter, numeral and spcial character through algorithm.The cipher key sections generating are by longitude and latitude
Area generation, that is, in one section of big minizone, it is identical that latitude generates space cipher key sections in one section of big minizone to the longitude of terminal.
The space cipher key sections being similarly in this interval different terminals generation are identical.Interval division is less, and the space cipher key sections of generation are just
More.
The space cipher key sections of server end are generated in the way of same with terminal, that is, using longitude and latitude as parameter, warp
Cross 32 cipher key sections that algorithm is converted into being made up of letter, numeral and spcial character.The cipher key sections generating are by longitude and latitude region
Generate, that is, in one section of big minizone, it is identical that latitude generates space cipher key sections in one section of big minizone to the longitude of terminal.Key
Duan Tiqian generates the lane database being saved in space key server, with space check code associated storage.Space key database
Store all regions cipher key sections that service need to be provided, cipher key sections are according to business and demand for security zoning, by divide
Region longitude and latitude generates each cipher key sections.
These cipher key sections are as the spatialization attribute of symmetric cryptographic key.
3rd, the fixed key section generation module function phase of the fixed key section generation module server of terminal is same.Terminal
Server end preserves identical cipher key sections, and cipher key sections are 8 character string compositions with service attribute.This module has assembling
The function of key, by time cipher key sections, space cipher key sections, fixed key section composition key, and calls symmetric encipherment algorithm to bright
Literary composition is encrypted, and ciphertext is decrypted.
4th, the correction verification module function phase of the correction verification module server of terminal is same.Correction verification module to present system time and
Longitude dimension is verified.Concrete effect has:
1st, sha256 encryption is carried out to present system time, take first 45 of ciphertext as check value service device.With
Server present system time carries out sha256 and encrypts and take first 45 of ciphertext to be contrasted, identical to ensure terminal and service
The time of device section always, otherwise prompt time inconsistent it is impossible to encryption and decryption.
2nd, terminal-pair longitude and latitude takes 2 after arithmetic point, is attached with " & " symbol, then carries out sha256 encryption.Take ciphertext
45 before first 45 sha256 being connected with " & " symbol as space check code service device, server storage correspondence longitude and latitude
Position ciphertext storehouse.Contrast success with server storage, obtains the space cipher key sections in counterpart keys storehouse.
3rd, sha256 encrypted cipher text length is 128, and for improving contrast, search efficiency takes first 45 to be held as check code
Longization.After tested, first 45 of the sha256 ciphertext of system time and longitude and latitude is not in identical situation.
The symmetrical encipher-decipher method being stored based on key space-time fragmentation based on said system, the present invention, is walked including following
Suddenly:
The information that A, terminal will send is combined by prescribed form (such as xml, j son etc.), to the plaintext after combination
It is encrypted, cipher mode is:Call space cipher key sections generation module to generate space cipher key sections first, recall time cipher key sections
Generation module generates time cipher key sections, calls correction verification module to generate space check code and time check code simultaneously;Finally call solid
Determine cipher key sections generation module and generate fixed key section, and general space cipher key sections and time cipher key sections generate symmetric key, call
Plain text encryption is become ciphertext by algorithm, and sends jointly to server together with time check code and space check code;
After B, server receive the request of terminal transmission, first time check code is verified, if time check code is not
Correct then not decipher, and prompt terminal adjustment time and server sync, if correctly, verify terminal longitude and latitude degrees of data, school
Test by rear, carry out subsequent decryption flow process, deciphering flow process is:When the time cipher key sections generation module of invoking server first generates
Between cipher key sections, then corresponding space cipher key sections are extracted according to space check code, are finally generated by fixed key section generation module
Fixed key section, and integrating time cipher key sections and space cipher key sections generate symmetric key, call algorithm that ciphertext is decrypted, obtain
Take in plain text;
After the completion of C, server are processed according to the plaintext that deciphering obtains, response message is pressed prescribed form (such as xml, j son
Deng) it is combined into response message, and response message is encrypted, cipher mode is:Allocating time cipher key sections generation module according to
Current time generates time cipher key sections, then the space cipher key sections with using when deciphering before, and by fixed key section generation module
After generating fixed key section, time cipher key sections, space cipher key sections and fixed key section are carried out integrating and generate symmetric key, call
Algorithm is encrypted to response message and feeds back to terminal;
After D, the terminal response message after receiving encryption, message is decrypted, manner of decryption is:First according to current
System time allocating time cipher key sections generation module generates time cipher key sections;Longitude and latitude is obtained according to residing geographical position, calls
Space cipher key sections generation module generates space key;After the last generation fixed key section by fixed key section generation module, integrate
Time cipher key sections, space cipher key sections and fixed key section generate counterpart keys, call algorithm that the response message after encryption is carried out
Deciphering.
In such scheme, wherein step A and step B are encrypted for terminal to server end and are sent request message, by server
The flow process of deciphering, referring to Fig. 1, step C and step D are that server end sends response message to terminal encryption, by end to implementation steps
The flow process of end deciphering, implementation steps are referring to Fig. 2.
Claims (7)
1. the symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation is it is characterised in that include terminal server end;
Described terminal includes:Time cipher key sections generation module, space cipher key sections generation module, fixed key section generation module and school
Test module;
Described server end includes close with terminal identical time cipher key sections generation module, space cipher key sections generation module, fixation
Key section generation module and correction verification module, wherein, time cipher key sections generation module, space cipher key sections generation module, fixed key section
Generation module adopts distributed arrangement in different server;
Described time cipher key sections generation module, for intercepting current time as parameter, is converted into by alphabetical, digital through algorithm
With spcial character composition 20 time cipher key sections, using this cipher key sections as symmetric cryptographic key Zeitigung attribute;
Described space cipher key sections generation module, for terminal being presently in the longitude of position and latitude as parameter, through calculating
Method is converted into 32 bit space cipher key sections being made up of letter, numeral and spcial character, using this cipher key sections as symmetric cryptographic key
Spatialization attribute;
Described fixed key section generation module, for generating the fixed key section being made up of 8 character strings with service attribute,
And for time cipher key sections, space cipher key sections, fixed key section are formed key, and call symmetric encipherment algorithm that plaintext is carried out
Encryption, or ciphertext is decrypted;
Described correction verification module, for generating time check code and space check code, and to present system time and terminal longitude and latitude
Data is verified.
2. the symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation as claimed in claim 1 is it is characterised in that described
The current time precision that time cipher key sections generation module is intercepted is 1000ms, that is, in current time to the time delaying 1000ms
The time cipher key sections being generated in section are identical.
3. the symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation as claimed in claim 1 is it is characterised in that described
The space cipher key sections generation module of server end is presently in the longitude of position previously according to each terminal and latitude generates space
Cipher key sections, and it is saved in the corresponding lane database of space cipher key sections generation module place server, and with space check code one by one
Corresponding associated storage.
4. the symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation as claimed in claim 1 is it is characterised in that described
Time check code is:Terminal by carrying out sha256 encryption to present system time, takes acquired in first 45 of ciphertext after encryption
Check value;
Described space check code is:The longitude and latitude of its present position of terminal-pair takes 2 after arithmetic point, is attached with " & " symbol,
Carry out sha256 encryption again, take the check value acquired in first 45 of ciphertext after encryption.
5. the symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation as claimed in claim 4 is it is characterised in that described
Present system time is verified, refers to:
Server, after receiving the incoming time check code of terminal, carries out sha256 encryption to server present system time, takes
Front 45 acquisition check values of ciphertext after encryption, the time check code incoming with terminal is compared, if unanimously, enters deciphering
Follow-up process, if inconsistent, cannot be carried out deciphering, and prompt terminal.
6. the symmetrical encrypting and deciphering system based on the storage of key space-time fragmentation as claimed in claim 4 is it is characterised in that described
Terminal longitude and latitude degrees of data is verified, refers to:
Server, after receiving the incoming space check code of terminal, takes decimal according to this terminal corresponding longitude and latitude degrees of data of storage
2 after point, it is attached with " & " symbol, then carries out sha256 encryption, after taking encryption, first 45 of ciphertext obtain check value and end
Hold incoming space check code to compare, if unanimously, corresponding space cipher key sections are obtained according to space check code.
7. the symmetrical encipher-decipher method based on the storage of key space-time fragmentation is it is characterised in that comprise the following steps:
The information that A, terminal will send is combined by prescribed form, the plaintext after combination is encrypted, cipher mode is:
Call space cipher key sections generation module to generate space cipher key sections first, recall time cipher key sections generation module and generate time key
Section, calls correction verification module to generate space check code and time check code simultaneously;Fixed key section generation module is finally called to generate
Fixed key section, and general space cipher key sections and time cipher key sections generate symmetric key, call algorithm that plain text encryption is become ciphertext,
And send jointly to server together with time check code and space check code;
After B, server receive the request of terminal transmission, first time check code is verified, if time check code is incorrect
Then not decipher, and prompt terminal adjustment time and server sync, if correctly, verify terminal longitude and latitude degrees of data, verification is logical
Later, carry out subsequent decryption flow process, deciphering flow process is:It is close that the time cipher key sections generation module of invoking server first generates the time
Key section, then extracts corresponding space cipher key sections according to space check code, is finally generated by fixed key section generation module and fixes
Cipher key sections, and integrating time cipher key sections and space cipher key sections generate symmetric key, call algorithm that ciphertext is decrypted, and obtain bright
Literary composition;
After the completion of C, server are processed according to the plaintext that deciphering obtains, response message is combined into response message by prescribed form,
And response message is encrypted, cipher mode is:It is close that allocating time cipher key sections generation module generates the time according to current time
Key section, then the space cipher key sections with using when deciphering before, and incited somebody to action by after fixed key section generation module generation fixed key section
Time cipher key sections, space cipher key sections and fixed key section carry out integrating generation symmetric key, call algorithm that response message is carried out
Encrypt and feed back to terminal;
After D, the terminal response message after receiving encryption, message is decrypted, manner of decryption is:First according to current system
Time allocating time cipher key sections generation module generates time cipher key sections;Longitude and latitude is obtained according to residing geographical position, calls space
Cipher key sections generation module generates space key;After the last generation fixed key section by fixed key section generation module, integrating time
Cipher key sections, space cipher key sections and fixed key section generate counterpart keys, call algorithm that the response message after encryption is decrypted.
Priority Applications (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201611144255.0A CN106453426B (en) | 2016-12-13 | 2016-12-13 | Symmetric encryption and decryption method and system based on key space-time fragmented storage |
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN201611144255.0A CN106453426B (en) | 2016-12-13 | 2016-12-13 | Symmetric encryption and decryption method and system based on key space-time fragmented storage |
Publications (2)
Publication Number | Publication Date |
---|---|
CN106453426A true CN106453426A (en) | 2017-02-22 |
CN106453426B CN106453426B (en) | 2020-02-04 |
Family
ID=58217767
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN201611144255.0A Active CN106453426B (en) | 2016-12-13 | 2016-12-13 | Symmetric encryption and decryption method and system based on key space-time fragmented storage |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN106453426B (en) |
Cited By (5)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108667605A (en) * | 2018-04-25 | 2018-10-16 | 拉扎斯网络科技(上海)有限公司 | Data encryption and decryption method and device |
CN109462475A (en) * | 2018-11-15 | 2019-03-12 | 泰康保险集团股份有限公司 | Data ciphering method, decryption method and relevant apparatus |
CN112770320A (en) * | 2020-12-27 | 2021-05-07 | 常熟开关制造有限公司(原常熟开关厂) | Circuit breaker communication method and device based on dynamic secret key |
CN113794700A (en) * | 2021-08-30 | 2021-12-14 | 合肥致存微电子有限责任公司 | Remote USB (universal serial bus) flash disk data communication encryption method and device |
CN113852462A (en) * | 2021-09-27 | 2021-12-28 | 王健庭 | Method and system for creating symmetric key without distribution and management |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101466144A (en) * | 2009-01-15 | 2009-06-24 | 山东大学 | Three-dimensional space-time combined encrypt communication apparatus based on GNSS and communication method thereof |
CN105809070A (en) * | 2016-03-14 | 2016-07-27 | 贵州大学 | USB flash disk fingerprint authentication encryption method |
-
2016
- 2016-12-13 CN CN201611144255.0A patent/CN106453426B/en active Active
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN101466144A (en) * | 2009-01-15 | 2009-06-24 | 山东大学 | Three-dimensional space-time combined encrypt communication apparatus based on GNSS and communication method thereof |
CN105809070A (en) * | 2016-03-14 | 2016-07-27 | 贵州大学 | USB flash disk fingerprint authentication encryption method |
Cited By (7)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN108667605A (en) * | 2018-04-25 | 2018-10-16 | 拉扎斯网络科技(上海)有限公司 | Data encryption and decryption method and device |
CN108667605B (en) * | 2018-04-25 | 2021-02-23 | 拉扎斯网络科技(上海)有限公司 | Data encryption and decryption method and device |
CN109462475A (en) * | 2018-11-15 | 2019-03-12 | 泰康保险集团股份有限公司 | Data ciphering method, decryption method and relevant apparatus |
CN109462475B (en) * | 2018-11-15 | 2021-08-13 | 泰康保险集团股份有限公司 | Data encryption method, data decryption method and related devices |
CN112770320A (en) * | 2020-12-27 | 2021-05-07 | 常熟开关制造有限公司(原常熟开关厂) | Circuit breaker communication method and device based on dynamic secret key |
CN113794700A (en) * | 2021-08-30 | 2021-12-14 | 合肥致存微电子有限责任公司 | Remote USB (universal serial bus) flash disk data communication encryption method and device |
CN113852462A (en) * | 2021-09-27 | 2021-12-28 | 王健庭 | Method and system for creating symmetric key without distribution and management |
Also Published As
Publication number | Publication date |
---|---|
CN106453426B (en) | 2020-02-04 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
CN106453426A (en) | Symmetric encryption and decryption method and system based on key space-time fragmentation storage | |
CN110868301B (en) | Identity authentication system and method based on state cryptographic algorithm | |
EP1750389B1 (en) | System and method for updating keys used for public key cryptography | |
US6996712B1 (en) | Data authentication system employing encrypted integrity blocks | |
CN107257350B (en) | Offline authentication or payment method of wearable equipment | |
CN110401615B (en) | Identity authentication method, device, equipment, system and readable storage medium | |
CN111526023B (en) | Block chain uplink data security authentication method and system based on IPK | |
CN103684794A (en) | Communication data encryption and decryption method based on DES (Data Encryption Standard), RSA and SHA-1 (Secure Hash Algorithm) encryption algorithms | |
CN108009440A (en) | Date storage method, querying method, device, storage medium and computer equipment | |
CN108259407B (en) | Symmetric encryption method and system based on timestamp | |
CN103731270B (en) | Communication data encryption and decryption method based on BBS, RSA and SHA-1 encryption algorithm | |
CN101789865A (en) | Dedicated server used for encryption and encryption method | |
CN111586076A (en) | Remote control and telemetry information tamper-proof encryption and decryption method and system based on mixed password | |
EP2117200A1 (en) | Method and apparatus for broadcast authentication | |
CN105681470A (en) | Communication method, server and terminal based on hypertext transfer protocol | |
CN111767559B (en) | Field level encryption blockchain data | |
CN108090370A (en) | Instant messaging encryption method and system based on index | |
CN106788991A (en) | A kind of method and device of data transfer | |
CN112653719A (en) | Automobile information safety storage method and device, electronic equipment and storage medium | |
WO2023160420A1 (en) | Group message encryption method and apparatus, device and storage medium | |
CN102598575B (en) | Method and system for the accelerated decryption of cryptographically protected user data units | |
CN106385313A (en) | Random cryptograph system based on grouping encryption algorithm and realization method thereof | |
CN111586023B (en) | Authentication method, authentication equipment and storage medium | |
US10530581B2 (en) | Authenticated broadcast encryption | |
CN100431297C (en) | Method for preventing user's pin from illegal use by double verification protocol |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
C06 | Publication | ||
PB01 | Publication | ||
C10 | Entry into substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |