CN106161037A - Digital signature method and device - Google Patents

Abstract

The present disclosure relates to a digital signature method and device, and belongs to the field of network technology. The method includes: adding a file to be signed in the task queue through a first designated account, the first designated account has permission to copy files; obtaining the file to be signed from the task queue through a second designated account, The second designated account has digital signature authority; the key is read by the second designated account, and the file to be signed is signed to obtain a signed file. This disclosure separates the signing process from the compiling process, the compiling process is not performed on the signing server, and the signing process is performed by the second designated account with access key authority on the signing server, thereby reducing the possibility of private key leakage and ensuring Key security.

Description

Digital signature method and device

technical field

The present disclosure relates to the field of network technology, in particular to a digital signature method and device.

Background technique

In today's era of advanced network technology, data exchange between servers and terminals is frequent. In order to prevent a malicious third party from modifying data or posing as a sender's server to falsify data, a digital signature technology is produced.

For example, taking the application upgrade scenario in the Android system as an example, an account with compile permissions can compile on the server to obtain the upgrade file, and then read the key, so that the server can sign the upgrade file according to the key and obtain the upgrade data Bag. If a certain terminal needs to be upgraded, the upgrade data package can be obtained, and the signature can be verified by the key of the server to confirm that the upgrade data package comes from the server, and the upgrade can be performed based on the upgrade data package.

Contents of the invention

In order to solve the problems existing in related technologies, the present disclosure provides a digital signature method and device. Described technical scheme is as follows:

According to a first aspect of an embodiment of the present disclosure, a digital signature method is provided, the method comprising:

Add the file to be signed in the task queue through the first designated account, and the first designated account has the right to copy the file;

Obtain the file to be signed from the task queue through a second designated account, where the second designated account has digital signature authority;

The key is read by the second specified account, and the file to be signed is signed to obtain a signed file.

In a possible implementation manner, before adding the file to be signed in the task queue through the first specified account, the method further includes:

performing key authentication through the first designated account and the compilation server;

When the key authentication is passed, establish an access connection with the compilation server;

copying the file to be signed from the compiling server through the first designated account when monitoring the compiling completion of the compiling server through the access connection.

In a possible implementation manner, the obtaining the file to be signed from the task queue through the second specified account includes:

monitor the task queue through the second specified account;

When it is detected that the file to be signed is added to the task queue, the file to be signed is acquired from the task queue.

In a possible implementation manner, the file to be signed carries a file identifier, and the key is read through the second designated account to sign the file to be signed, and after obtaining the signed file, the method further include:

The signed file is saved in a designated area, and the signed file carries the file identifier, so that the compiling server acquires the signed file from the designated area according to the file identifier.

In a possible implementation manner, the network access authority of the first designated account and the second designated account on the signature server is the authority to access the compilation server, and the access authority of the signature server is oriented to The compile server.

According to a second aspect of an embodiment of the present disclosure, a digital signature device is provided, and the device includes:

The adding module is used to add the file to be signed in the task queue through the first designated account, and the first designated account has the permission to copy the file;

An acquisition module, configured to acquire the file to be signed from the task queue through a second designated account, where the second designated account has digital signature authority;

A signature module, configured to read the key through the second specified account, sign the file to be signed, and obtain a signed file.

In a possible implementation manner, the device further includes:

An authentication module, configured to perform key authentication through the first designated account and the compilation server;

An establishment module, configured to establish an access connection with the compilation server when the key authentication is passed;

The copying module is configured to copy the file to be signed from the compilation server through the first specified account when monitoring the completion of compilation by the compilation server through the access connection.

In a possible implementation manner, the acquisition module includes: a monitoring submodule and an acquisition submodule;

The monitoring submodule is configured to monitor the task queue through the second specified account;

The acquiring submodule is configured to acquire the file to be signed from the task queue when it is detected that the file to be signed is added to the task queue.

In a possible implementation manner, the device further includes:

The saving module is configured to save the signed file in a designated area, the signed file carries the file identifier, and enables the compiling server to obtain the signed file from the designated area according to the file identifier.

In a possible implementation manner, the network access authority of the first designated account and the second designated account on the signature server is the authority to access the compilation server, and the access authority of the signature server is oriented to The compile server.

According to a third aspect of an embodiment of the present disclosure, there is provided a digital signature device, the device comprising: a processor; a memory for storing instructions executable by the processor; wherein the processor is configured to:

Add the file to be signed in the task queue through the first designated account, and the first designated account has the right to copy the file;

Obtain the file to be signed from the task queue through a second designated account, where the second designated account has digital signature authority;

The key is read by the second specified account, and the file to be signed is signed to obtain a signed file.

The technical solutions provided by the embodiments of the present disclosure may include the following beneficial effects:

The method and device provided in this embodiment, by separating the signing process from the compiling process, the compiling process is not performed on the signing server, and the signing process is performed by the second designated account with access key authority on the signing server, thereby reducing the private key. The possibility of leakage ensures the security of the key.

In a possible implementation manner, key authentication is performed between the compiling server and the signing server, which prevents a third party from forging an identity and defrauding the key of the signing server, and improves the security of the key.

In a possible implementation, the network authority of the account on the signature server is limited to access to the compilation server, and the access authority of the signature server is oriented to the compilation server, preventing third parties from stealing keys or modifying files through network means, and improving the network security of the signature server sex.

It is to be understood that both the foregoing general description and the following detailed description are exemplary and not restrictive of the present disclosure.

Description of drawings

The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the disclosure and together with the description serve to explain the principles of the disclosure.

Fig. 1 is a flowchart of a digital signature method shown according to an exemplary embodiment;

Fig. 2 is a flowchart of a digital signature method shown according to an exemplary embodiment;

Fig. 3 is a block diagram of a digital signature device according to an exemplary embodiment;

Fig. 4 is a block diagram of a digital signature device according to an exemplary embodiment;

Fig. 5 is a block diagram of a digital signature device according to an exemplary embodiment;

Fig. 6 is a block diagram of a digital signature device according to an exemplary embodiment;

Fig. 7 is a block diagram of a digital signature device 700 according to an exemplary embodiment.

detailed description

In order to make the purpose, technical solutions and advantages of the present disclosure clearer, the present disclosure will be described in further detail below in conjunction with the implementation manners and accompanying drawings. Here, the exemplary embodiments of the present disclosure and their descriptions are used to explain the present disclosure, but not to limit the present disclosure.

Fig. 1 is a flowchart of a digital signature method shown according to an exemplary embodiment. As shown in Fig. 1, the digital signature method is used in a signature server, including the following steps:

In step 101, the file to be signed is added to the task queue through the first designated account, and the first designated account has the right to copy the file.

In step 102, the file to be signed is obtained from the task queue through a second designated account, and the second designated account has digital signature authority.

In step 103, read the key through the second designated account, sign the file to be signed, and obtain the signed file.

In related technologies, all accounts with compiling authority have access to the key at the same time. If any account leaks the key, it may cause a third party to obtain the key. Poor security of the key may lead to a malicious third party based on illegal acquisition. The key forges the signature, so as to send some forged files to other terminals, and when the terminal receives the forged file, if the signature verification passes, it will also consider it to be a legal file, resulting in the security of the terminal cannot be guaranteed.

In the embodiment of the present disclosure, by separating the signing process from the compiling process, the compiling process is not performed on the signing server, and the signing process is performed by a second designated account with access key authority on the signing server, thereby reducing the possibility of private key leakage To ensure the security of the key.

In a possible implementation, the method further includes: performing key authentication with the compilation server through the first designated account; when the key authentication is passed, establishing an access connection with the compilation server; When completed, the file to be signed is copied from the compiling server through the first designated account.

In a possible implementation manner, the method includes: monitoring the task queue through the second specified account; when it is detected that a file to be signed is added to the task queue, acquiring the file to be signed from the task queue.

In a possible implementation manner, the method further includes: saving the signed file in a designated area, the signed file carrying a file identifier, so that the compiling server obtains the signed file from the designated area according to the file identifier.

In a possible implementation manner, the network access rights of the first designated account and the second designated account on the signature server are rights to access the compilation server, and the access rights of the signature server are oriented to the compilation server.

All the above optional technical solutions may be combined in any way to form optional embodiments of the present disclosure, which will not be repeated here.

Fig. 2 is a flow chart of a digital signature method according to an exemplary embodiment. As shown in Fig. 2 , the embodiment of the present disclosure relates to an interaction process between a signature server and a compilation server, including the following steps:

In step 200, the signature server conducts key authentication with the compilation server through the first designated account.

The inventor realized that in related technologies, the process of compiling and signing is carried out on the same server, and the compiling authority is associated with the signing authority, so that the account with compiling authority on the server can also obtain the key, and the security of the key is poor, so , in the embodiment of the present disclosure, the process of compiling and signing is implemented on two servers respectively, one of which server may be a compiling server for compiling, and the other server may be a signing server for signing to isolate Compilation permission and signing permission.

In the embodiment of the present disclosure, the key authentication is used for mutually authenticating identities between the compiling server and the signing server through a key algorithm. For example, key authentication can use RSA key algorithm (Ron Rivest, Adi Shamir, Leonard Adleman). The signature server stores the public key in the first designated account, and the compilation server stores the private key. The compilation server sends a connection request, and the signature server uses the public key. After key authentication, an access connection is established with the compilation server.

Wherein, the first designated account is a type of account on the signature server, one or more accounts of this type are allowed to exist on the signature server, and the first designated account only has the right to copy files from the compilation server. The embodiment of the present disclosure does not further limit the first designated account. For example, the first specified account may be a work account in the Linux server.

In a possible implementation, in order to improve the security of the file to be signed, in addition to allowing the first designated account to have the right to copy the file from the compilation server, other operation rights of the first designated account are prohibited, thereby preventing the file to be signed from being copied by the first designated account. Specify account modification.

In step 201, when the key authentication passes, the signature server establishes an access connection with the compilation server.

It should be noted that establishing an access connection based on key authentication can ensure that the identities of the compiling server and the signing server are true, and prevent a third party from impersonating one of the two and defrauding the data of the other.

In the embodiment of the present disclosure, the key authentication in step 200 and step 201 is an optional step, which can ensure that the compilation process and the signing process are more secure when connecting. In fact, the embodiment of the present disclosure can also directly perform the steps below step 202. In order to solve the problem of poor key security in related technologies.

In step 202, the compiling server performs compiling process.

In the embodiment of the present disclosure, since the signature server needs to obtain the file to be signed from the compilation server, the signature server can monitor through the access connection to obtain the compilation progress of the compilation server in real time.

In step 203, when the signature server detects that the compiling server has completed compiling through the access connection, it copies the file to be signed from the compiling server through the first designated account, and the file to be signed carries a file identifier.

Since the compiling and signing processes are separated in the embodiment of the present disclosure, the signature server needs to monitor the compiling progress of the compiling server in order to obtain the file to be signed. When the compiling is completed, the file to be signed is copied from the compiling server through the first designated account. Wherein, the file identifier can uniquely identify each file to be signed. Therefore, during the interaction process between the compilation server and the signature server, the file identifier is used to distinguish each file to be signed. For example, the file identifier may be the name of the file to be signed obtained through a naming rule, which is not limited in this embodiment of the present disclosure.

In step 204, the signature server adds the file to be signed in the task queue through the first specified account.

It should be noted that the task queue is a storage area where the signature server saves the files to be signed, and the signature server adds the copied files to be signed to the storage area through the first designated account. The storage area can adopt different storage methods, for example, a queue storage method can be used, and the storage can be performed according to the order of saving. The embodiment of the present disclosure does not limit the storage manner of the task queue.

In step 205, when the signature server detects that the file to be signed has been added to the task queue through the second designated account, the second designated account has digital signature authority, and acquires the file to be signed from the task queue.

In order to avoid the same account having multiple permissions, resulting in low security of the signature process, in the embodiment of the present disclosure, the permissions involved in the signature process are further separated, and the operation of obtaining the file to be signed from the compilation server is assigned to the first designated account to complete, and the The operation of obtaining the file to be signed from the task queue is assigned to the second designated account for completion.

Since there is no direct relationship between the first designated account and the second designated account, the signature server needs to listen to the task queue through the second designation, that is, the storage area where the file to be signed is stored, so as to know whether the file to be signed is added to the storage area. For example, the storage area may follow the first-in-first-out principle. When multiple files to be signed are sequentially stored in the storage area, the signature server obtains the files to be stored first from the designated area according to the storage order through the second designated account. Sign the document. The embodiment of the present disclosure does not limit the order of obtaining the files to be signed.

In a possible implementation manner, the signature server is a Linux server as an example for illustration, and the second designated account may be the only root account on the Linux server, which has the highest authority of the signature server, including digital signature authority. On other platforms, the second designated account may also be another type of account, and this embodiment of the present disclosure does not limit the second designated account.

In step 206, the signature server reads the key through the second designated account, signs the file to be signed, and obtains the signed file.

It should be noted that, in order to improve the security of the key, the key is stored in the signature server, and access restriction is performed on the key, and the embodiment of the present disclosure does not limit the access restriction method. For example, the authority to access the key is only open to the second designated account, so that the signature server can only read the key through the second designated account and sign the document to be signed.

Wherein, the key type is a symmetric key or an asymmetric key. A pair of symmetric keys refers to two identical keys, and a pair of asymmetric keys includes a public key and a private key, and the public key and the private key can be different. Compared with symmetric keys, asymmetric keys use two different keys and are more secure. Therefore, in this disclosed embodiment, a pair of asymmetric keys is used as an example for illustration. The public key is stored in the sending destination's terminal and is used to verify the signature. The embodiment of the present disclosure does not limit the key type.

In step 207, the signature server saves the signed file in the specified area, and the signed file carries the file identifier.

In order to prevent the compilation server from being directly associated with the second designated account, after the second designated account finishes signing, the signature server saves the signed file in the designated area. In a possible implementation manner, the designated area may be a local storage area set by the signature server, and the local storage area may be called a web area, and the embodiment of the present disclosure does not limit the storage manner of the designated area. For example, the storage area adopts a queue storage method, and the storage may be performed according to the order of saving.

In step 208, the compilation server obtains the signed file from the specified area according to the file identifier.

In the disclosed embodiment, in order to ensure the security of the key, the network access authority of the first designated account and the second designated account on the signature server is the right to access the compilation server, so that neither the first designated account nor the second designated account can pass through The signature server cannot send signed files to other network devices, and the access authority of the signature server is oriented to the compilation server, so that the compilation server has the authority to obtain signed files from the specified area. The embodiment of the present disclosure does not further limit the network access authority between the signature server and the compilation server.

In view of the fact that the accounts on the signing server may not only be the first designated account and the second designated account, for the security of signed files, in a possible implementation, the network access rights of any account on the signing server are only for the compilation server , so that all accounts on the signing server cannot send signed files to other network devices.

In order to further improve the security of signed files, in another possible implementation, the access authority of the signature server is only for the compilation server, so that only the compilation server has the authority to obtain signed files from the specified area, while other network devices No such permission.

The above restrictions on access rights and access rights can implement access control at the network level, ensuring that only the compilation server can communicate with the signature server.

It should be noted that the file identifier carried by the signed file is the same as the identifier carried by the file to be signed, so that the compilation server can obtain the signed file in the specified area according to the file identifier, that is, obtain the signed file in the local storage area . For example, the storage area may follow the principle of first-in-first-out. When multiple signed files are sequentially stored in the storage area, the compilation server obtains the signed file stored first from the specified area according to the storage order.

In the embodiment of the present disclosure, the compilation server has at least two ways to obtain signed files:

In the first method, the compilation server monitors the designated area through the access connection, and when it learns that the signed file has been saved in the designated area through monitoring, obtains the signed file corresponding to the file to be signed according to the file identifier.

In the second method, the signature server sends the storage address and file ID of the signed file in the specified area to the compilation server through the access connection, and the compilation server obtains the signed file through the storage address and file ID.

In related technologies, all accounts with compiling authority have access to the key at the same time. If any account leaks the key, it may lead to a third party obtaining the key. The security of the key is poor, which may lead to a malicious third party The key forges the signature, so as to send some forged files to other terminals, and when the terminal receives the forged file, if the signature verification passes, it will also consider it to be a legal file, resulting in the security of the terminal cannot be guaranteed.

In the embodiment of the present disclosure, by separating the signing process from the compiling process, the compiling process is not performed on the signing server, and the signing process is performed by a second designated account with access key authority on the signing server, thereby reducing the possibility of private key leakage To ensure the security of the key.

In addition, in the embodiment of the present disclosure, the key authentication is performed between the compiling server and the signature server, which prevents a third party from forging the identity and fraudulently obtaining the key of the signature server, and improves the security of the key.

In addition, in the embodiment of the present disclosure, the network authority of the account on the signature server is limited to access to the compilation server, and the access authority of the signature server is oriented to the compilation server, which realizes access control at the network level and prevents third parties from stealing keys or Modifies the file, thereby increasing the network security of the signing server.

Fig. 3 is a block diagram of a digital signature device according to an exemplary embodiment. Referring to FIG. 3 , the device includes an adding module 301 , an obtaining module 302 and a signature module 303 .

The adding module 301 is configured to add the file to be signed in the task queue through the first designated account, and the first designated account has the right to copy the file.

The obtaining module 302 is configured to obtain the file to be signed added by the adding module 301 from the task queue through a second designated account, and the second designated account has digital signature authority.

The signature module 303 is configured to read the key through the second specified account, sign the file to be signed obtained by the acquisition module 302, and obtain the signed file.

In a possible implementation manner, based on the composition of the apparatus in FIG. 3 , referring to FIG. 4 , the apparatus further includes an authentication module 304 , an establishment module 305 and a copy module 306 .

The authentication module 304 is configured to perform key authentication with the compilation server through the first designated account.

The establishment module 305 is configured to establish an access connection with the compilation server when the key authentication is passed.

The copy module 306 is configured to copy the file to be signed from the compilation server through the first designated account when the compilation server is monitored through the access connection and the compilation is completed.

In a possible implementation manner, based on the composition of the apparatus in FIG. 3 , referring to FIG. 5 , the acquisition module 302 of the apparatus includes a monitoring submodule 3021 and an acquisition submodule 3022 .

The acquiring submodule 3021 is configured to monitor the task queue through the second specified account.

The obtaining sub-module 3022 is configured to obtain the file to be signed from the task queue when it is detected that the file to be signed is added to the task queue.

In a possible implementation manner, based on the composition of the device in FIG. 3 , referring to FIG. 6 , the device further includes a saving module 307 .

The saving module 307 is configured to save the signed file in a designated area, the signed file carries a file identifier, so that the compiling server obtains the signed file from the designated area according to the file identifier.

In a possible implementation manner, the network access rights of the first designated account and the second designated account on the signature server are limited to access to the compilation server, and the access rights of the signature server are oriented to the compilation server.

All the above optional technical solutions may be combined in any way to form optional embodiments of the present disclosure, which will not be repeated here.

In the embodiment of the present disclosure, by separating the signing process from the compiling process, the compiling process is not performed on the signing server, and the signing process is performed by a second designated account with access key authority on the signing server, thereby reducing the possibility of private key leakage To ensure the security of the key.

In addition, in the embodiment of the present disclosure, the key authentication is performed between the compiling server and the signature server, which prevents a third party from forging the identity and fraudulently obtaining the key of the signature server, and improves the security of the key.

In addition, in the embodiment of the present disclosure, the network authority of the account on the signature server is limited to access to the compilation server, and the access authority of the signature server is oriented to the compilation server, which realizes access control at the network level and prevents third parties from stealing keys or Modifies the file, thereby increasing the network security of the signing server.

Regarding the apparatus in the above embodiments, the specific manner in which each module executes operations has been described in detail in the embodiments related to the method, and will not be described in detail here.

It should be noted that: the digital signature device provided by the above-mentioned embodiment only uses the division of the above-mentioned functional modules as an example to illustrate the digital signature. In practical applications, the above-mentioned function allocation can be completed by different functional modules according to needs. The internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the digital signature device and the digital signature method embodiments provided by the above embodiments belong to the same idea, and the specific implementation process thereof is detailed in the method embodiments, and will not be repeated here.

Fig. 7 is a block diagram of a digital signature device 700 according to an exemplary embodiment. For example, the apparatus 700 may be provided as a server. 7, apparatus 700 includes processing component 722, which further includes one or more processors, and a memory resource represented by memory 732 for storing instructions executable by processing component 722, such as application programs. The application program stored in memory 732 may include one or more modules each corresponding to a set of instructions. In addition, the processing component 722 is configured to execute instructions to perform the above digital signature method.

Device 700 may also include a power component 726 configured to perform power management of device 700 , a wired or wireless network interface 750 configured to connect device 700 to a network, and an input output (I/O) interface 758 . The apparatus 700 can operate based on an operating system stored in the memory 732, such as Windows Server ^™ , Mac OS X ^™ , Unix ^™ , Linux ^™ , FreeBSD ^™ or the like.

Other embodiments of the present disclosure will be readily apparent to those skilled in the art from consideration of the specification and practice of the invention disclosed herein. This application is intended to cover any modification, use or adaptation of the present disclosure, and these modifications, uses or adaptations follow the general principles of the present disclosure and include common knowledge or conventional technical means in the technical field not disclosed in the present disclosure . The specification and examples are to be considered exemplary only, with a true scope and spirit of the disclosure being indicated by the following claims.

It should be understood that the present disclosure is not limited to the precise constructions which have been described above and shown in the drawings, and various modifications and changes may be made without departing from the scope thereof. The scope of the present disclosure is limited only by the appended claims.

Claims (11)

1. A digital signature method, characterized in that being applied to a signature server, said method comprising: Add the file to be signed in the task queue through the first designated account, and the first designated account has the right to copy the file; Obtain the file to be signed from the task queue through a second designated account, where the second designated account has digital signature authority; The key is read by the second specified account, and the file to be signed is signed to obtain a signed file. 2. The method according to claim 1, characterized in that, before adding the file to be signed in the task queue through the first designated account, the method further comprises: performing key authentication through the first designated account and the compilation server; When the key authentication is passed, establish an access connection with the compilation server; copying the file to be signed from the compiling server through the first designated account when monitoring the compiling completion of the compiling server through the access connection. 3. The method according to claim 1, wherein the obtaining the file to be signed from the task queue through the second designated account comprises: monitor the task queue through the second designated account; When it is detected that the file to be signed is added to the task queue, the file to be signed is acquired from the task queue. 4. The method according to claim 1, wherein the file to be signed carries a file identifier, and the key is read through the second specified account to sign the file to be signed to obtain a signed After the file, the method also includes: The signed file is saved in a designated area, and the signed file carries the file identifier. 5. The method according to any one of claims 1 to 4, wherein the network access authority of the first specified account and the second specified account on the signature server is the authority to access the compilation server, and The access right of the signature server is for the compilation server. 6. A digital signature device, characterized in that it is applied to a signature server, and the device comprises: The adding module is used to add the file to be signed in the task queue through the first designated account, and the first designated account has the permission to copy the file; An acquisition module, configured to acquire the file to be signed from the task queue through a second designated account, where the second designated account has digital signature authority; A signature module, configured to read the key through the second specified account, sign the file to be signed, and obtain a signed file. 7. The device according to claim 6, further comprising: An authentication module, configured to perform key authentication through the first designated account and the compilation server; An establishment module, configured to establish an access connection with the compilation server when the key authentication is passed; The copying module is configured to copy the file to be signed from the compilation server through the first specified account when monitoring the completion of compilation by the compilation server through the access connection. 8. The device according to claim 6, wherein the acquiring module comprises: A monitoring submodule, configured to monitor the task queue through the second designated account; The acquiring submodule is configured to acquire the file to be signed from the task queue when it is detected that the file to be signed is added to the task queue. 9. The device according to claim 6, further comprising: The saving module is configured to save the signed file in a designated area, the signed file carries the file identifier, and enables the compiling server to obtain the signed file from the designated area according to the file identifier. 10. The device according to any one of claims 6 to 9, wherein the network access authority of the first specified account and the second specified account on the signature server is the authority to access the compilation server, and The access right of the signature server is for the compilation server. 11. A digital signature device, characterized in that it comprises: processor; memory for storing processor-executable instructions; Wherein, the processor is configured as: Add the file to be signed in the task queue through the first designated account, and the first designated account has the right to copy the file; Obtain the file to be signed from the task queue through a second designated account, where the second designated account has digital signature authority; The key is read by the second specified account, and the file to be signed is signed to obtain a signed file.