CN116633534A - Key component verification method and device - Google Patents

Abstract

The application discloses a key component verification method and a device, wherein the method comprises the following steps: receiving a character string to be verified; splitting a character string to be verified into a key component to be verified and a first verification value, wherein the first verification value is calculated according to the correct key component; calculating to obtain a second verification value according to the key component to be verified; the first check value and the second check value are compared, and according to the comparison result, the check result of the key component to be checked is determined, so that the key component can be checked through only one input, the check step of the key component can be effectively simplified, the check efficiency of the key component is improved, and the user experience is improved.

Description

Key component verification method and device

technical field

The invention relates to the technical field of network security, in particular to a key component verification method and device.

Background technique

This section is intended to provide a background or context to embodiments of the invention that are recited in the claims. The descriptions herein are not admitted to be prior art by inclusion in this section.

The specific operation of the cipher machine is determined by two parts: one is the algorithm, and the other is the key. The key is a secret parameter used in the algorithm of the cipher machine. In order to ensure the security of the key in the cipher machine on the server side, usually the cipher machine device does not apply the key before starting to use it. In this state, the cipher machine device cannot provide services for applications. , the user uses the cipher device, and the cipher device needs to be operated to generate each key required to provide cryptographic services to the application. The general methods for generating symmetric keys include: random generation, component composite keys, etc.

For the method of synthesizing a key through key components, the traditional key component verification step specifically includes: inputting the key component for the first time, and inputting the key component for the second time, wherein the two input key components are the same; according to The key component input for the first time obtains the first key verification value, and the second key verification value is obtained according to the key component input for the second time; and then the key verification value is input, and the key verification value is respectively Compared with the first key verification value and the second key verification value, if the results are consistent, the key component verification passes. That is to say, the traditional key component verification process needs to input the key component at least twice and the key verification value once, which makes the operation process very cumbersome, reduces the verification efficiency of the key component, and affects user experience.

For the above problems, no effective solution has been proposed yet.

Contents of the invention

An embodiment of the present invention provides a key component verification method, which is used to effectively simplify the verification steps of the key component, improve the verification efficiency of the key component, and improve user experience. The method includes:

Receive the string to be verified;

Splitting the character string to be verified into key components to be verified and a first verification value, the first verification value is based on the correct key component

Quantitatively calculated;

calculating a second verification value according to the key component to be verified;

The first verification value is compared with the second verification value, and according to the comparison result, the verification result of the key component to be verified is determined.

The embodiment of the present invention also provides a key component verification device, which is used to effectively simplify the verification steps of the key component, improve the verification efficiency of the key component, and improve user experience. The device includes:

The string receiving module is used to receive the string to be verified;

A character string splitting module, configured to split the character string to be verified into a key component to be verified and a first verification value, the first verification value being calculated according to the correct key component;

The second verification value calculation module is used to calculate the second verification value according to the key component to be verified;

The comparison module is used to compare the first verification value with the second verification value, and determine the verification result of the key component to be verified according to the comparison result.

An embodiment of the present invention also provides a computer device, including a memory, a processor, and a computer program stored on the memory and operable on the processor, when the processor executes the computer program, the above key component verification method is implemented .

An embodiment of the present invention also provides a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the above key component verification method is implemented.

An embodiment of the present invention also provides a computer program product, where the computer program product includes a computer program, and when the computer program is executed by a processor, the above key component verification method is implemented.

In the embodiment of the present invention, the character string to be verified is received; the character string to be verified is split into a key component to be verified and a first verification value, and the first verification value is based on the correct key component. The key component is calculated; according to the key component to be verified, the second verification value is calculated; the first verification value is compared with the second verification value, and the key to be verified is determined according to the comparison result. The verification result of the key component.

Compared with the cumbersome key component verification steps in the prior art, the embodiment of the present invention can complete the key component verification with only one input, which can effectively simplify the key component verification steps and improve the key component verification. efficiency and improve user experience.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work. In the attached picture:

Fig. 1 is the processing flowchart of key component verification method in the embodiment of the present invention;

Fig. 2 is a flow chart of a method for comparing a first check value and a second check value in an embodiment of the present invention;

Fig. 3 is a flow chart of a specific example of the key component verification method in the embodiment of the present invention;

4 is a schematic structural diagram of a key component verification device in an embodiment of the present invention;

FIG. 5 is a schematic structural diagram of a computer device according to an embodiment of the present invention.

Detailed ways

In order to make the purpose, technical solutions and advantages of the embodiments of the present invention more clear, the embodiments of the present invention will be further described in detail below in conjunction with the accompanying drawings. Here, the exemplary embodiments and descriptions of the present invention are used to explain the present invention, but not to limit the present invention.

First, the technical terms in the embodiments of the present invention are introduced:

Key component: use the secret sharing technology to divide the key into multiple parts, each part is called a key component, and the key component is generally generated by a tool.

The inventors found that the traditional key component verification process needs to continuously perform multiple input operations, and one key can be divided into multiple key components. The entire verification process is very cumbersome, resulting in the verification efficiency of key components Lower and poorer user experience. In order to solve the above technical problems, the inventor proposes a key component verification method.

The specific technical solutions of the present application are introduced below. Fig. 1 is a processing flowchart of a key component verification method in an embodiment of the present invention. As shown in Figure 1, the key component verification method in the embodiment of the present invention may include:

Step 101, receiving the character string to be verified;

Step 102, splitting the character string to be verified into the key component to be verified and a first verification value, the first verification value is calculated according to the correct key component;

Step 103. Calculate and obtain a second verification value according to the key component to be verified;

Step 104: Compare the first verification value with the second verification value, and determine the verification result of the key component to be verified according to the comparison result.

In an embodiment, firstly, the character string to be verified can be received, and then the character string to be verified can be split into a key component to be verified and a first verification value, wherein the first verification value is based on the correct calculated from the key component of .

In an implementation manner of the present application, the last byte of the character string to be verified is used as the first verification value, and the remaining bytes are key components to be verified.

In an implementation manner of the present application, the key component to be verified is obtained from a complete key division, and there are multiple key components obtained from a complete key division.

In an implementation manner of the present application, the first check value is the first byte of a hash value calculated through a hash algorithm according to the correct key component.

In order to complete the verification of the key component through only one input, the corresponding hash value can be calculated through the hash algorithm according to the correct key component in advance; according to the one-way irreversible characteristic of the hash value, the hash value As a verification value, it is combined with the key component to be verified to form a string input. During specific implementation, in order to reduce the input character length, the first byte of the hash value can be selected as the first check value; for subsequent splitting, the last byte of the string can be used as the first check value.

For example, suppose the key component to be verified has 15 bytes, and the first verification value is 1 byte, then the input string is 16 bytes, and the first 15 bytes are the key to be verified Component, the 16th byte is the first check value.

After the character string to be verified is split into the key component to be verified and the first verification value, the second verification value can be calculated according to the key component to be verified.

In one embodiment of the present application, calculating the second verification value according to the key component to be verified includes: calculating the hash value through a hash algorithm according to the key component to be verified, and converting the The first byte of the above hash value is used as the second check value.

Finally, the first verification value is compared with the second verification value, and according to the comparison result, the verification result of the key component to be verified can be determined.

Fig. 2 is a flowchart of a method for comparing a first check value and a second check value in an embodiment of the present invention. As shown in Figure 2, in one embodiment of the present application, the process of comparing the first verification value and the second verification value may include:

Step 201, comparing the first verification value with the second verification value;

Step 202. When the comparison results are consistent, determine that the verification result of the key component to be verified is passed.

During specific implementation, if the comparison results of the first verification value and the second verification value are consistent, it means that the key component to be verified is the same as the correct key component, that is, the verification result of the key component to be verified Passed; if the comparison results of the first verification value and the second verification value are inconsistent, it means that the key component to be verified is not the same as the correct key component, that is, the verification result of the key component to be verified for not passing.

In order to further understand the technical solution of the present invention, a specific example of the key component verification method in the embodiment of the present invention will be introduced below in conjunction with the flow chart. Fig. 3 is a flow chart of a specific example of the key component verification method in the embodiment of the present invention. As shown in Figure 3, a specific example process of the key component verification method in the embodiment of the present invention may include:

Step 301, receiving the character string to be verified;

Step 302, splitting the character string to be verified into the key component to be verified and a first verification value, the first verification value is calculated according to the correct key component;

Step 303, according to the key component to be verified, calculate a hash value through a hash algorithm, and use the first byte of the hash value as a second verification value;

Step 304, judging whether the comparison results of the first check value and the second check value are consistent, if so, execute step 305, if not, jump to step 306;

Step 305, when the comparison results are consistent, determine that the verification result of the key component to be verified is passed;

Step 306. When the comparison results are inconsistent, determine that the verification result of the key component to be verified is not passed.

The embodiment of the present invention also provides a key component verification device, as described in the following embodiments. Since the problem-solving principle of the device is similar to that of the key component verification method, the implementation of the device can refer to the implementation of the key component verification method, and the repetition will not be repeated.

Fig. 4 is a schematic structural diagram of a key component verification device in an embodiment of the present invention. As shown in Figure 4, the key component verification device in the embodiment of the present invention may specifically include:

The character string is received module 401, is used for receiving the character string to be verified;

A character string splitting module 402, configured to split the character string to be verified into a key component to be verified and a first verification value, the first verification value is calculated according to the correct key component ;

A second verification value calculation module 403, configured to calculate a second verification value according to the key component to be verified;

The comparison module 404 is configured to compare the first verification value with the second verification value, and determine the verification result of the key component to be verified according to the comparison result.

In an implementation manner of the present application, the last byte of the character string to be verified is used as the first verification value, and the remaining bytes are key components to be verified.

In an implementation manner of the present application, the key component to be verified is obtained from a complete key division, and there are multiple key components obtained from a complete key division.

In an implementation manner of the present application, the first check value is the first byte of a hash value calculated through a hash algorithm according to the correct key component.

In an implementation manner of the present application, the second verification value calculation module 403 is specifically used for:

According to the key component to be verified, a hash value is obtained by calculating a hash algorithm, and the first byte of the hash value is used as a second verification value.

In one embodiment of the present application, the comparison module 404 is specifically used for:

Comparing the first check value with the second check value;

When the comparison results are consistent, it is determined that the verification result of the key component to be verified is passed.

Based on the foregoing inventive concepts, as shown in FIG. 5 , the present invention also proposes a computer device 500, including a memory 510, a processor 520, and a computer program 530 stored on the memory 510 and operable on the processor 520. When the processor 520 executes the computer program 530, the foregoing key component verification method is realized.

An embodiment of the present invention also provides a computer-readable storage medium, where a computer program is stored in the computer-readable storage medium, and when the computer program is executed by a processor, the above key component verification method is implemented.

An embodiment of the present invention also provides a computer program product, where the computer program product includes a computer program, and when the computer program is executed by a processor, the above key component verification method is implemented.

To sum up, in the embodiment of the present invention, the character string to be verified is received; the character string to be verified is split into a key component to be verified and a first verification value, and the first verification value It is calculated according to the correct key component; according to the key component to be verified, the second verification value is calculated; the first verification value and the second verification value are compared, and according to the comparison result, determine The verification result of the key component to be verified.

Compared with the cumbersome key component verification steps in the prior art, the embodiment of the present invention can complete the key component verification with only one input, which can effectively simplify the key component verification steps and improve the key component verification. efficiency and improve user experience.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

The specific embodiments described above have further described the purpose, technical solutions and beneficial effects of the present invention in detail. It should be understood that the above descriptions are only specific embodiments of the present invention and are not intended to limit the scope of the present invention. Protection scope, within the spirit and principles of the present invention, any modification, equivalent replacement, improvement, etc., shall be included in the protection scope of the present invention.

Claims (15)

1. A key component verification method, comprising:

receiving a character string to be verified;

splitting a character string to be verified into a key component to be verified and a first verification value, wherein the first verification value is calculated according to the correct key component;

calculating to obtain a second verification value according to the key component to be verified;

and comparing the first check value with the second check value, and determining a check result of the key component to be checked according to the comparison result.

2. The method of claim 1, wherein a last byte of the string to be verified is used as the first verification value and the remaining bytes are key components to be verified.

3. The method of claim 2, wherein the key component to be verified is obtained by complete key segmentation, and there are a plurality of key components obtained by complete key segmentation.

4. The method of claim 2, wherein the first check value is a first byte of a hash value calculated by a hash algorithm based on a correct key component.

5. The method of claim 1, wherein calculating a second verification value based on the key component to be verified comprises:

and according to the key component to be verified, calculating a hash value through a hash algorithm, and taking a first byte of the hash value as a second verification value.

6. The method of claim 1, wherein comparing the first check value with the second check value, and determining the check result of the key component to be checked based on the comparison result, comprises:

comparing the first check value with the second check value;

and when the comparison results are consistent, determining that the verification result of the key component to be verified is passing.

7. A key component verification apparatus, comprising:

the character string acquisition and receiving module is used for receiving the character string to be checked;

the character string splitting module is used for splitting the character string to be checked into a key component to be checked and a first check value, wherein the first check value is calculated according to the correct key component;

the second check value calculation module is used for calculating a second check value according to the key component to be checked;

and the comparison module is used for comparing the first check value with the second check value and determining the check result of the key component to be checked according to the comparison result.

8. The apparatus of claim 7, wherein a last byte of the string to be verified is used as the first verification value and the remaining bytes are key components to be verified.

9. The apparatus of claim 8, wherein the key component to be verified is derived from a complete key split, one complete key split having a plurality of key components.

10. The apparatus of claim 8, wherein the first check value is a first byte of a hash value calculated by a hash algorithm based on a correct key component.

11. The apparatus of claim 7, wherein the second check value calculation module is specifically configured to:

and according to the key component to be verified, calculating a hash value through a hash algorithm, and taking a first byte of the hash value as a second verification value.

12. The apparatus of claim 7, wherein the comparison module is specifically configured to:

comparing the first check value with the second check value;

and when the comparison results are consistent, determining that the verification result of the key component to be verified is passing.

13. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the method of any of claims 1 to 6 when executing the computer program.

14. A computer readable storage medium, characterized in that the computer readable storage medium stores a computer program which, when executed by a processor, implements the method of any of claims 1 to 6.

15. A computer program product, characterized in that the computer program product comprises a computer program which, when executed by a processor, implements the method of any of claims 1 to 6.