+

WO2018076365A1 - Procédé et dispositif de négociation de clés - Google Patents

Procédé et dispositif de négociation de clés Download PDF

Info

Publication number
WO2018076365A1
WO2018076365A1 PCT/CN2016/104113 CN2016104113W WO2018076365A1 WO 2018076365 A1 WO2018076365 A1 WO 2018076365A1 CN 2016104113 W CN2016104113 W CN 2016104113W WO 2018076365 A1 WO2018076365 A1 WO 2018076365A1
Authority
WO
WIPO (PCT)
Prior art keywords
key
ciphertext
terminal device
cloud server
random number
Prior art date
Application number
PCT/CN2016/104113
Other languages
English (en)
Chinese (zh)
Inventor
刘复鑫
Original Assignee
美的智慧家居科技有限公司
美的集团股份有限公司
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by 美的智慧家居科技有限公司, 美的集团股份有限公司 filed Critical 美的智慧家居科技有限公司
Priority to PCT/CN2016/104113 priority Critical patent/WO2018076365A1/fr
Publication of WO2018076365A1 publication Critical patent/WO2018076365A1/fr

Links

Images

Classifications

    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/40—Network security protocols
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L12/00—Data switching networks
    • H04L12/28—Data switching networks characterised by path configuration, e.g. LAN [Local Area Networks] or WAN [Wide Area Networks]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Definitions

  • the present application relates to the field of information security technologies, and in particular, to a key negotiation method and apparatus.
  • SSL Secure Sockets Layer
  • SSL Secure Sockets Layer
  • the purpose of the present application is to solve at least one of the above technical problems to some extent.
  • the first object of the present application is to propose a key negotiation method, which can complete the two-way identity authentication of the terminal device and the cloud server, and establish a reliable secure connection, thereby reducing the cost and improving the data transmission. Safe and efficient.
  • a second object of the present application is to propose another method of key agreement.
  • a third object of the present application is to propose a key agreement apparatus.
  • a fourth object of the present application is to propose another key agreement apparatus.
  • a fifth object of the invention is to propose an apparatus.
  • a sixth object of the invention is to propose another device.
  • a seventh object of the present invention is to provide a nonvolatile computer storage medium.
  • An eighth object of the present invention is to provide another non-volatile computer storage medium.
  • the first aspect of the present application provides a key negotiation method, including the following steps: generating a first random number, applying a first public key of a cloud server to the first random number and a terminal device.
  • the identification information is encrypted to generate a first ciphertext;
  • the key negotiation request is sent to the cloud server, where the key negotiation request includes: the first ciphertext and the second public key of the terminal device, so as to After the first server decrypts the first ciphertext, the cloud server verifies the legality of the terminal device according to the identifier information and the second public key, and receives the cloud server to verify the terminal device.
  • the encrypted first ciphertext is sent to the cloud server by the terminal device, and is decrypted by the cloud server, and the legality of the terminal device is verified according to the identifier information and the second public key, and
  • the decrypted data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • the key negotiation method in the embodiment of the present application further has the following additional technical features:
  • the identifier information is a MAC address of the terminal device
  • the key negotiation request further includes: a hash value of the first ciphertext, so that the cloud server application office After decrypting the first ciphertext, the first private key verifies the legality of the terminal device according to the MAC address, the hash value, and the second public key.
  • the applying the session key to encrypt the first character string negotiated in advance with the cloud server including: generating a random length of a preset length by using a random number generator according to a preset period. Splicing the random number with the first character string to generate a second character string; applying the session key to encrypt the second character string, and transmitting the third character string to the cloud server a key confirmation response of the ciphertext, wherein the cloud server applies the session key to decrypt the third ciphertext, and determines whether the key negotiation is successful according to whether the first string is included in the decryption result.
  • the second aspect of the present application provides another key negotiation method, including the following steps: receiving a key negotiation request sent by a terminal device, where the key negotiation request includes: a first ciphertext And the second public key of the terminal device; the first private key of the application cloud server is used to decrypt the first ciphertext to obtain the first random number and the identification information of the terminal device, and the pre-stored query is performed according to the identifier information and the second public key.
  • the license database verifies the legality of the terminal device; if the license database includes the identification information and the second public key, applying the second public key to encrypt the session key, and sending the session key to the terminal device a key agreement response including a second ciphertext, wherein the session key includes the first random number; and receiving, by the terminal device, the second private key to decrypt the second ciphertext to obtain the first a key confirmation response including a third ciphertext sent after the random number, applying the session key to decrypt the third ciphertext to obtain a decryption result; and detecting whether the decryption result includes The first string of the pre-negotiated terminal device determines whether the key negotiation is successful.
  • the key negotiation method in the embodiment of the present application receives the encrypted first ciphertext sent by the terminal device, decrypts the ciphertext, and then verifies the legality of the terminal device according to the identifier information and the second public key, and performs data decryption. again
  • the encryption is simultaneously sent to the terminal device, and then the terminal device decrypts the second ciphertext after receiving the second ciphertext to verify the identity.
  • the two-way identity authentication of the terminal device and the cloud server can be completed, and a reliable and secure connection is established, which reduces the cost, which improves the security of the data transmission and is highly efficient.
  • the key negotiation method in the embodiment of the present application further has the following additional technical features:
  • the applying the second public key to encrypt the session key comprises: generating a second random number, and splicing the second random number with the first random number to generate a session a key; the session key is encrypted by applying the second public key.
  • the third aspect of the present application provides a key agreement apparatus, including: an encryption module, configured to generate a first random number, and apply a first public key of a cloud server to the first random number and The identification information of the terminal device is encrypted to generate a first ciphertext; the sending module is configured to send a key negotiation request to the cloud server, where the key negotiation request includes: the first ciphertext and the terminal device a second public key, after the cloud server applies the first private key to decrypt the first ciphertext, and verifies the legality of the terminal device according to the identifier information and the second public key; And a key agreement response including the second ciphertext sent by the second public key after the second public key is encrypted, and the session key is included, after the cloud server is configured to verify that the terminal device is legal.
  • a decryption module configured to apply the second private key to decrypt the second ciphertext, and when the first random number is obtained, apply the session key pair in advance
  • the first string negotiated by the cloud server is encrypted, and a key confirmation response including the third ciphertext is sent to the cloud server, where the cloud server applies the session key to the third ciphertext.
  • Decryption processing is performed, and whether the key negotiation is successful is determined according to whether the first character string is included in the decryption result.
  • the key agreement apparatus of the embodiment of the present invention sends the encrypted first ciphertext to the cloud server through the terminal device, decrypts the cloud file through the cloud server, and verifies the legality of the terminal device according to the identifier information and the second public key, and The decrypted data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • the two-way identity authentication of the terminal device and the cloud server can be completed, and a reliable and secure connection is established, which reduces the cost, which improves the security of the data transmission and is highly efficient.
  • the key agreement apparatus of the embodiment of the present application further has the following additional technical features:
  • the identifier information is a MAC address of the terminal device
  • the key negotiation request further includes: a hash value of the first ciphertext, so that the cloud server application office After decrypting the first ciphertext, the first private key verifies the legality of the terminal device according to the MAC address, the hash value, and the second public key.
  • the decrypting module is configured to: generate a random number of a preset length by using a random number generator according to a preset period; and perform splicing processing on the random number and the first character string to generate a first a second string; the second string is encrypted by applying the session key, and a key confirmation response including the third ciphertext is sent to the cloud server, where the cloud server applies the session secret Decrypting the third ciphertext by the key, and rooting Whether the key negotiation is successful is determined according to whether the first string is included in the decrypted result.
  • the fourth aspect of the present application provides another key agreement apparatus, which includes: a receiving module, configured to receive a key negotiation request sent by a terminal device, where the key negotiation The request includes: a first ciphertext and a second public key of the terminal device; the query module is configured to decrypt the first ciphertext by using the first private key of the cloud server to obtain the first random number and the identifier information of the terminal device, according to the Determining the legality of the terminal device by using the identifier information and the second public key query pre-stored license database; the first processing module is configured to: when the license database includes the identifier information and the second public key, Applying the second public key to encrypt the session key, and sending a key agreement response including the second ciphertext to the terminal device, where the session key includes the first random number; and the second processing module, Receiving a key confirmation response including the third ciphertext sent by the terminal device after the second private key is decrypted by the second private key to obtain the first
  • the key negotiation apparatus in the embodiment of the present application receives the encrypted first ciphertext sent by the terminal device, and decrypts the second ciphertext according to the identification information and the second public key.
  • the legality, and the decrypted data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • the two-way identity authentication of the terminal device and the cloud server can be completed, and a reliable and secure connection is established, which reduces the cost, which improves the security of the data transmission and is highly efficient.
  • the key agreement apparatus of the embodiment of the present application further has the following additional technical features:
  • the first processing module is configured to: generate a second random number, splicing the second random number and the first random number to generate a session key; and applying the second The public key encrypts the session key.
  • An embodiment of the fifth aspect of the present invention provides an apparatus, including: one or more processors; a memory; one or more programs, the one or more programs being stored in the memory when When the plurality of processors are executed, performing the following steps: generating a first random number, encrypting the first random number and the identification information of the terminal device by using the first public key of the cloud server to generate a first ciphertext; and sending the first ciphertext to the cloud
  • the server sends a key negotiation request, where the key negotiation request includes: the first ciphertext and the second public key of the terminal device, so that the cloud server applies the first private key to decrypt the first
  • the ciphertext verifying the legality of the terminal device according to the identifier information and the second public key
  • after receiving the cloud server to verify that the terminal device is legal applying the second public key to the session key a key agreement response including a second ciphertext sent after encryption, wherein the session key includes the first random number; and applying the second private key to solve the second cip
  • the device in the embodiment of the present application sends the encrypted first ciphertext to the cloud server through the terminal device, decrypts the cloud device through the cloud server, and verifies the legality of the terminal device according to the identifier information and the second public key, and obtains the decryption result.
  • the data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • a sixth aspect of the present invention provides an apparatus, including: one or more processors; a memory; one or more programs, the one or more programs being stored in the memory when When the multiple processors are executed, the following steps are performed: receiving a key negotiation request sent by the terminal device, where the key negotiation request includes: a first ciphertext and a second public key of the terminal device; and a first application cloud server
  • the private key decrypts the first ciphertext to obtain the first random number and the identification information of the terminal device, and queries the pre-stored license database according to the identifier information and the second public key to verify the legality of the terminal device;
  • the license database includes the identifier information and the second public key, and the second public key is used to encrypt the session key, and the key agreement response including the second ciphertext is sent to the terminal device, where
  • the session key includes the first random number; and the receiving, by the terminal device, the second private key is used to decrypt the second ciphertext to obtain the first random number, and the
  • the device of the embodiment of the present application receives the encrypted first ciphertext sent by the terminal device, decrypts the ciphertext, and then verifies the legality of the terminal device according to the identifier information and the second public key, and performs the decrypted data again.
  • the encryption is simultaneously sent to the terminal device, and then the terminal device decrypts the second ciphertext after receiving the second ciphertext to verify the identity.
  • a seventh aspect of the present invention provides a non-volatile computer storage medium storing one or more programs, when the one or more programs are executed by a device, causing the device Performing the following steps: generating a first random number, encrypting the first random number and the identification information of the terminal device by using the first public key of the cloud server to generate a first ciphertext; and sending a key negotiation request to the cloud server,
  • the key negotiation request includes: the first ciphertext and the second public key of the terminal device, so that the cloud server applies the first private key to decrypt the first ciphertext, according to the Determining the legality of the terminal device by using the identifier information and the second public key; after receiving the cloud server to verify that the terminal device is legal, the second public key is used to encrypt the session key and then sent a key agreement response of the ciphertext, wherein the session key includes the first random number; applying the second private key to decrypt the second ciphertext, if obtained The first random number is used to en
  • the non-volatile computer storage medium of the embodiment of the present application sends the encrypted first ciphertext to the cloud server through the terminal device, decrypts the cloud file through the cloud server, and verifies the legality of the terminal device according to the identifier information and the second public key. And encrypting the decrypted data again, sending it to the terminal device, and then decrypting the second ciphertext after the terminal device receives the second ciphertext to verify the identity.
  • the two-way identity authentication of the terminal device and the cloud server can be completed, and a reliable and secure connection is established, which reduces the cost, which improves the security of the data transmission and is highly efficient.
  • An eighth aspect of the present invention provides a non-volatile computer storage medium storing one or more programs, when the one or more programs are executed by one device, causing the device The following steps are performed: receiving a key negotiation request sent by the terminal device, where the key negotiation request includes: a first ciphertext and a second public key of the terminal device; and decrypting the first by using a first private key of the cloud server Obtaining the first random number and the identification information of the terminal device, and verifying the legality of the terminal device according to the identifier information and the second public key querying the pre-stored license database; if the license database includes the identifier information And the second public key, the second public key is used to encrypt the session key, and the key agreement response including the second ciphertext is sent to the terminal device, where the session key includes the first a random number; receiving a key including the third ciphertext sent by the terminal device after the second private key is decrypted by the second private key to obtain the first random number In response to applying the third
  • the non-volatile computer storage medium of the embodiment of the present application receives the encrypted first ciphertext sent by the terminal device, decrypts the ciphertext, and then verifies the legality of the terminal device according to the identification information and the second public key, and decrypts the The data is obtained for another encryption, and is simultaneously transmitted to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • the two-way identity authentication of the terminal device and the cloud server can be completed, and a reliable and secure connection is established, which reduces the cost, which improves the security of the data transmission and is highly efficient.
  • FIG. 3 is a schematic diagram of a key agreement method according to an embodiment of the present application.
  • FIG. 4 is a schematic structural diagram of a key agreement apparatus according to an embodiment of the present application.
  • FIG. 5 is a schematic structural diagram of a key agreement apparatus according to another embodiment of the present application.
  • the CA certificate is used on the device side, and the device is authenticated by encrypting and decrypting the public and private keys of the device.
  • the terminal device sends a connection request to the server, and the server sends its own CA certificate and information related to the CA certificate to the terminal device, and the terminal device checks whether the CA certificate sent by the server is issued by the CA center trusted by the server. .
  • the SSL protocol is executed.
  • the terminal device compares the information of the CA certificate, such as the domain name and public key, with the information previously sent by the server.
  • the authentication server is legal only when the information is consistent.
  • the server selects a password scheme with the highest degree of encryption from the password scheme sent by the terminal device, and notifies the terminal device after adding the password of the terminal device, and the terminal device selects the password scheme for the password scheme.
  • a call key which is then sent to the server using the server's public key.
  • the server receives the information sent by the terminal device, decrypts the private key to obtain the session key, and the server and the browser exchange information according to the password symmetric scheme.
  • the present application proposes a key negotiation method, which can complete the two-way identity authentication of the terminal device and the cloud server, and establish a reliable secure connection, thereby reducing the cost, which improves the security and efficiency of data transmission. high. details as follows:
  • FIG. 1 is a flow chart of a method of key agreement in accordance with one embodiment of the present application.
  • the key negotiation method includes:
  • Step 110 Generate a first random number, and apply the first public key of the cloud server to encrypt the first random number and the identification information of the terminal device to generate a first ciphertext.
  • the first random number of the preset length may be generated by the random number generator.
  • the preset length can be rooted Set as needed, such as 5 strings, 10 strings, and so on.
  • the random number may be one or more of letters, numbers, special symbols, and the like.
  • the terminal device may obtain its own identification information, and may perform an encryption operation on the obtained first random number and the identification information by using the first public key of the cloud server that is stored in advance to generate the first ciphertext.
  • the identifier information may be a MAC (Media Access Control) address, or may be an International Mobile Equipment Identity (IMEI), or may be other device identification information, and may be performed according to actual application requirements. Select settings.
  • MAC Media Access Control
  • IMEI International Mobile Equipment Identity
  • the first public key is a key that is pre-agreed with the cloud server and can encrypt the plaintext.
  • the cloud server may pre-generate a pair of permanent first private key and first public key pair by using an asymmetric algorithm, and store it on the cloud server, and the cloud server sends the first public key to the terminal device. Therefore, when the terminal device initiates the connection establishment request to the cloud server, the cloud server can verify the identity of the terminal device by using the first private key to ensure that the illegal terminal device establishes a connection with the cloud server, thereby further improving the security of data transmission.
  • Step 120 Send a key negotiation request to the cloud server, where the key negotiation request includes: the first ciphertext and the second public key of the terminal device, so that the cloud server applies the first public key to decrypt the first ciphertext, according to the identifier.
  • the information and the second public key verify the legitimacy of the terminal device.
  • the cloud server may use the first private key to decrypt the first ciphertext to obtain the first random number. And identification information.
  • the identification information is the MAC address of the terminal device
  • the validity of the terminal device is verified according to the MAC and the second public key by checking the license database at the same time to confirm whether the license server has generated the MAC and the second public key.
  • the key negotiation request further includes a hash value of the first ciphertext, so that the cloud server applies the first public key to decrypt the first ciphertext, and then verifies the terminal device according to the MAC address, the hash value, and the second public key. legality.
  • the cloud server may use the terminal device as an illegal terminal device, and no longer perform the process. Subsequent verification.
  • Step 130 After receiving the cloud server to verify that the terminal device is legal, the second public key is used to encrypt the session key and then send a key agreement response including the second ciphertext, where the session key includes the first random number.
  • the cloud server uses the received second public key to encrypt the session key including the first random number to obtain a second operation.
  • the ciphertext is then sent to the terminal device.
  • the cloud server may further generate a second random number, the first random number and the second random number.
  • the number is spliced to obtain spliced data, and the spliced data is encrypted by using the received second public key to obtain a second ciphertext.
  • the second ciphertext is then sent to the terminal device. That is to say, the second ciphertext further includes a second random number generated by the cloud server.
  • the first random number must be included in the session key, and the second random number or other data may be added to further improve security.
  • Step 140 The second public key is used to decrypt the second ciphertext. If the first random number is obtained, the session key is used to encrypt the first character string negotiated in advance with the cloud server, and the third server is sent to the cloud server. The key confirmation response of the file is used for decrypting the third ciphertext by the cloud server application session key, and determining whether the key negotiation is successful according to whether the first string is included in the decryption result.
  • the terminal device decrypts the second private key of the terminal device, and after the decryption succeeds, compares the generated first random number with the decrypted plaintext information. If the comparison result includes the first random number, the terminal device confirms that the cloud server passes the authentication.
  • the application session key encrypts the first character string negotiated in advance with the cloud server, and sends a key confirmation response including the third ciphertext to the cloud server for the cloud server application.
  • the session key decrypts the third ciphertext, and determines whether the key negotiation is successful according to whether the first string is included in the decryption result.
  • the encrypting the first character string negotiated in advance with the cloud server by using the session key may be understood as firstly generating a random number of a preset length by using a random number generator according to a preset period.
  • the random number is spliced with the first character string to generate a second character string.
  • the application session key encrypts the second character string, and sends a key confirmation response including the third ciphertext to the cloud server, so that the cloud server applies the session key to decrypt the third ciphertext, and decrypts according to the decryption process. Whether the result contains the first string determines whether the key negotiation is successful.
  • the preset period can be set as needed, for example, 10 minutes, 20 minutes, and the like.
  • the preset length can be set as needed, for example, 5 strings, 10 strings, and the like.
  • the random number may be one or more of letters, numbers, special symbols, and the like.
  • the splicing process can be understood as “random number + first character string”, and can also be understood as “first character string + random number”, and can also be understood as random characters arbitrarily inserted into each character of the first character string. Wait.
  • the result of encrypting the second character string by using a session key pre-negotiated with the cloud server may be used as the third ciphertext by, for example, an MD5 encryption algorithm, a DES encryption algorithm, an RSA encryption algorithm, or the like.
  • the third ciphertext is sent to the cloud server, and the cloud server uses the corresponding decryption.
  • the algorithm performs decryption processing on the third ciphertext by using a session key pre-negotiated with the terminal device.
  • the encrypted first ciphertext is sent to the cloud server by the terminal device, and is decrypted by the cloud server, and the legality of the terminal device is verified according to the identifier information and the second public key, and
  • the decrypted data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • FIG. 2 is a flow chart of a method of key agreement in accordance with another embodiment of the present application.
  • the key negotiation method includes:
  • Step 210 Receive a key negotiation request sent by the terminal device, where the key negotiation request includes: a first ciphertext and a second public key of the terminal device.
  • Step 220 The first private key of the cloud server is used to decrypt the first ciphertext to obtain the first random number and the identification information of the terminal device, and the pre-stored license database is queried according to the identifier information and the second public key to verify the legality of the terminal device.
  • the cloud server may use the first private key to decrypt the first ciphertext, and obtain the first random number and the identification information of the terminal device.
  • step 110 For details of the identification information, refer to step 110, which is not described in detail here.
  • the validity of the terminal device can be verified according to the MAC and the second public key by simultaneously querying the license database to confirm whether the license server has generated the MAC and the second public key.
  • the cloud server may use the terminal device as an illegal terminal device, and no longer perform the process. Subsequent verification.
  • Step 230 If the license database includes the identifier information and the second public key, encrypt the session key by applying the second public key, and send a key agreement response including the second ciphertext to the terminal device, where the session key includes the first random number.
  • Step 240 The receiving terminal device applies a second private key to decrypt the second ciphertext to obtain a key acknowledgment response including the third ciphertext after the first random number is obtained, and decrypts the third ciphertext by using the session key to obtain the decryption result.
  • the license database includes the identifier information and the second public key, and the session key including the first random number is encrypted by using the received second public key to obtain a second ciphertext, and then the second ciphertext is sent to Terminal Equipment.
  • a second random number may be generated, the second random number is spliced with the first random number to generate a session key, and the session key is encrypted by applying a second public key.
  • the cloud server sends a key agreement response including the second ciphertext to the terminal device. Therefore, the receiving terminal device uses the second private key to decrypt the second ciphertext to obtain the key acknowledgment response including the third ciphertext after the first random number is obtained, and decrypts the third ciphertext by using the session key to obtain the decrypted result.
  • Step 250 Detect whether the decryption result includes whether the first string determined in advance with the terminal device determines whether the key negotiation is successful.
  • the third ciphertext is sent to the cloud server, and the cloud server uses the corresponding decryption.
  • the algorithm performs decryption processing on the third ciphertext by using a session key pre-negotiated with the terminal device.
  • the key information that is negotiated with the terminal device is applied to encrypt or decrypt the interaction information. That is, after the key negotiation ends, the interaction information may be processed by using the key information negotiated with the terminal device, which may be one or more of encryption and decryption.
  • the key negotiation method in the embodiment of the present application receives the encrypted first ciphertext sent by the terminal device, decrypts the ciphertext, and then verifies the legality of the terminal device according to the identifier information and the second public key, and performs data decryption.
  • the encryption is simultaneously sent to the terminal device, and then the terminal device decrypts the second ciphertext after it receives the second ciphertext to verify the identity.
  • FIG. 3 is a schematic diagram of a key agreement method according to an embodiment of the present application.
  • the smart terminal can send a key negotiation request to the cloud server by means of a wireless connection (WIFI, Bluetooth, ZigBee, etc.), wherein the key negotiation request includes the first ciphertext and the second public key.
  • a wireless connection WIFI, Bluetooth, ZigBee, etc.
  • the first ciphertext is obtained by encrypting the first random number R1 and the MAC address of the terminal device by using the first public key of the cloud server.
  • the key negotiation request may be decrypted to obtain corresponding plaintext information, that is, the first random number R1, the MAC address of the terminal device, and the second public key of the terminal device.
  • the cloud server may further generate a second random number R2, and then encrypt the first random number R1 and the second random number R2 obtained by using the second public key to obtain a second ciphertext, and send the second ciphertext to the terminal device.
  • the terminal device may use the second private key to decrypt the second ciphertext, and after the decryption succeeds, send the encrypted authentication pass information to the cloud server, where the authentication pass information is sent. It may be that the pre-set confirmation information ("OK" or the like in FIG. 3) is encrypted and generated based on the first random number R1 and the second random number R2.
  • the cloud server decrypts the information to obtain pre-set character information, and then establishes a secure communication connection according to the authentication pass information.
  • the encrypted first ciphertext is sent to the cloud server by the terminal device, and is decrypted by the cloud server, and the legality of the terminal device is verified according to the identifier information and the second public key, and
  • the decrypted data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • the two-way identity of the terminal device and the cloud server can be completed. Proof and establish a reliable and secure connection, which reduces costs, which improves the security and efficiency of data transmission.
  • the present application also proposes a key agreement apparatus.
  • FIG. 4 is a schematic structural diagram of a key agreement apparatus according to an embodiment of the present application.
  • the key agreement apparatus may include an encryption module 41, a sending module 42, a response module 43, and a decryption module 44.
  • the cryptographic module 41 is configured to generate a first random number, and apply the first public key of the cloud server to encrypt the first random number and the identification information of the terminal device to generate the first ciphertext.
  • the sending module 42 is configured to send a key negotiation request to the cloud server, where the key negotiation request includes: the first ciphertext and the second public key of the terminal device, so that the cloud server applies the first private key to decrypt the first ciphertext, The validity of the terminal device is verified according to the identification information and the second public key.
  • the response module 43 is configured to receive a key agreement response that includes the second ciphertext after the cloud server verifies that the terminal device is legal, and the second public key is used to encrypt the session key, where the session key includes the first random number.
  • the decryption module 44 is configured to use the second private key to decrypt the second ciphertext.
  • the application session key encrypts the first string negotiated in advance with the cloud server, and sends the first string to the cloud server.
  • the key confirmation response of the third ciphertext is used for decrypting the third ciphertext by the cloud server application session key, and determining whether the key negotiation is successful according to whether the first string is included in the decryption result.
  • the identifier information is a MAC address of the terminal device
  • the key negotiation request further includes: a hash value of the first ciphertext, so that the cloud server applies the first private key to decrypt the first ciphertext. After that, the validity of the terminal device is verified according to the MAC address, the hash value, and the second public key.
  • the decrypting module 44 is configured to generate a random number of a preset length by using a random number generator according to a preset period, and perform a splicing process on the random number and the first character string to generate a second character string. Encrypting the second character string by using the session key, and sending a key confirmation response including the third ciphertext to the cloud server, so that the cloud server applies the session key to decrypt the third ciphertext, and according to whether the decryption result is The first string is included to determine if the key negotiation is successful.
  • the key agreement device provided by the embodiment of the present invention corresponds to the key agreement method provided by the foregoing first embodiment. Therefore, the implementation manner of the foregoing key negotiation method is also applicable to the key agreement device provided in this embodiment. This embodiment will not be described in detail.
  • the key agreement apparatus of the embodiment of the present invention sends the encrypted first ciphertext to the cloud server through the terminal device, decrypts the cloud file through the cloud server, and verifies the legality of the terminal device according to the identifier information and the second public key, and The decrypted data is encrypted again, sent to the terminal device, and then decrypted after the terminal device receives the second ciphertext to verify the identity.
  • the two-way identity of the terminal device and the cloud server can be completed. Proof and establish a reliable and secure connection, which reduces costs, which improves the security and efficiency of data transmission.
  • FIG. 5 is a schematic structural diagram of a key agreement apparatus according to another embodiment of the present application.
  • the key agreement apparatus may include: a receiving module 51, a querying module 52, a first processing module 53, a second processing module 54, and a detecting module 55.
  • the receiving module 51 is configured to receive a key negotiation request sent by the terminal device, where the key negotiation request includes: a first ciphertext and a second public key of the terminal device.
  • the query module 52 is configured to use the first private key of the cloud server to decrypt the first ciphertext to obtain the first random number and the identification information of the terminal device, and query the pre-stored license database according to the identifier information and the second public key to verify the legality of the terminal device.
  • the first processing module 53 is configured to: when the license database includes the identifier information and the second public key, apply the second public key to encrypt the session key, and send a key agreement response including the second ciphertext to the terminal device, where the session is dense
  • the key includes a first random number.
  • the second processing module 54 is configured to receive a key confirmation response including a third ciphertext sent by the terminal device after the second private cipher is decrypted by the second private cipher, and decrypt the third ciphertext by using the session key to obtain the decryption. result.
  • the detecting module 55 is configured to detect whether the decryption result includes whether the first string determined in advance with the terminal device determines whether the key negotiation is successful.
  • the first processing module 53 is configured to generate a second random number, splicing the second random number with the first random number to generate a session key, and applying the second public key to the session key. encryption.
  • the key agreement device provided by the embodiment of the present invention corresponds to the key negotiation method provided in the foregoing second embodiment. Therefore, the implementation of the foregoing key negotiation method is also applicable to the key agreement device provided in this embodiment. This embodiment will not be described in detail.
  • the key agreement apparatus of the embodiment of the present invention receives the encrypted first ciphertext sent by the terminal device, decrypts the ciphertext, and then verifies the legality of the terminal device according to the identifier information and the second public key, and performs data decryption.
  • the encryption is simultaneously sent to the terminal device, and then the terminal device decrypts the second ciphertext after it receives the second ciphertext to verify the identity.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Mobile Radio Communication Systems (AREA)

Abstract

L'invention concerne un procédé et un dispositif de négociation de clés. Le procédé comporte les étapes consistant à: générer un premier nombre aléatoire, et utiliser une première clé publique d'un serveur en nuage pour chiffrer le premier nombre aléatoire et identification information concernant un dispositif terminal de façon à générer un premier texte chiffré; envoyer, au serveur en nuage, une demande de négociation de clés comportant le premier texte chiffré et une deuxième clé publique du dispositif terminal; recevoir une réponse de négociation de clés comportant un deuxième texte chiffré et émise par le serveur en nuage après avoir utilisé la deuxième clé publique pour chiffrer une clé de session comportant le premier nombre aléatoire et après avoir vérifié que le dispositif terminal est légitime; et utiliser une deuxième clé privée pour déchiffrer le deuxième texte chiffré, et lorsque le premier nombre aléatoire est obtenu, utiliser la clé de session pour chiffrer une première chaîne de caractères négociée à l'avance avec le serveur en nuage, et envoyer une réponse d'accusé de réception de clé comportant un troisième texte chiffré au serveur en nuage. Au moyen du procédé, une authentification bidirectionnelle d'identité d'un dispositif terminal et d'un serveur en nuage peut être réalisée, et une connexion fiable et sécurisée est établie, réduisant ainsi le coût et améliorant la sécurité d'une transmission de données, et le procédé présente un rendement élevé.
PCT/CN2016/104113 2016-10-31 2016-10-31 Procédé et dispositif de négociation de clés WO2018076365A1 (fr)

Priority Applications (1)

Application Number Priority Date Filing Date Title
PCT/CN2016/104113 WO2018076365A1 (fr) 2016-10-31 2016-10-31 Procédé et dispositif de négociation de clés

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
PCT/CN2016/104113 WO2018076365A1 (fr) 2016-10-31 2016-10-31 Procédé et dispositif de négociation de clés

Publications (1)

Publication Number Publication Date
WO2018076365A1 true WO2018076365A1 (fr) 2018-05-03

Family

ID=62023049

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2016/104113 WO2018076365A1 (fr) 2016-10-31 2016-10-31 Procédé et dispositif de négociation de clés

Country Status (1)

Country Link
WO (1) WO2018076365A1 (fr)

Cited By (124)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109376021A (zh) * 2018-09-26 2019-02-22 深圳壹账通智能科技有限公司 接口调用的响应方法及服务器
CN109379176A (zh) * 2018-12-10 2019-02-22 湖北工业大学 一种抗口令泄露的认证与密钥协商方法
CN110011958A (zh) * 2018-12-13 2019-07-12 平安科技（深圳）有限公司 信息加密方法、装置、计算机设备及存储介质
CN110224816A (zh) * 2019-05-15 2019-09-10 如般量子科技有限公司 基于密钥卡和序列号的抗量子计算应用系统以及近距离节能通信方法和计算机设备
CN110266485A (zh) * 2019-06-28 2019-09-20 宁波奥克斯电气股份有限公司 一种基于NB-IoT的物联网安全通信控制方法
CN110378753A (zh) * 2019-07-29 2019-10-25 秒针信息技术有限公司 一种广告投放策略确定方法及装置
CN110796443A (zh) * 2019-10-28 2020-02-14 飞天诚信科技股份有限公司 一种构造磁道数据的方法及终端
CN110830243A (zh) * 2019-10-18 2020-02-21 中国第一汽车股份有限公司 对称密钥分发方法、装置、车辆及存储介质
CN110868294A (zh) * 2019-12-09 2020-03-06 北京智宝云科科技有限公司 一种密钥更新方法、装置及设备
CN110912872A (zh) * 2019-11-04 2020-03-24 国网思极神往位置服务（北京）有限公司 基于北斗电力应用的新能源电厂调度数据采集系统
CN111031352A (zh) * 2019-12-02 2020-04-17 北京奇艺世纪科技有限公司 音视频加密方法、安全处理方法、装置及存储介质
CN111065092A (zh) * 2019-12-30 2020-04-24 江苏全链通信息科技有限公司 5g通信信息加解密方法、设备及存储介质
CN111082935A (zh) * 2019-12-31 2020-04-28 江苏芯盛智能科技有限公司 一种媒体密钥生成方法、装置及基于媒体密钥的终端
CN111127014A (zh) * 2019-12-25 2020-05-08 中国银联股份有限公司 交易信息处理方法、服务器、用户终端、系统及存储介质
CN111130750A (zh) * 2018-10-30 2020-05-08 长城汽车股份有限公司 车辆can安全通信方法及系统
CN111177739A (zh) * 2019-10-28 2020-05-19 腾讯云计算（北京）有限责任公司 一种数据处理方法、信息交互系统及计算机存储介质
CN111385793A (zh) * 2018-12-30 2020-07-07 上海银基信息安全技术股份有限公司 指令发送方法、系统、电子设备及存储介质
CN111405082A (zh) * 2020-03-23 2020-07-10 Oppo（重庆）智能科技有限公司 一种设备连接方法、电子设备及终端、存储介质
CN111404952A (zh) * 2020-03-24 2020-07-10 中国南方电网有限责任公司 变电站数据加密传输方法、装置、计算机设备和存储介质
CN111416718A (zh) * 2020-03-13 2020-07-14 浙江华消科技有限公司 通讯密钥的接收方法及装置、发送方法及装置
CN111431717A (zh) * 2020-03-31 2020-07-17 兴唐通信科技有限公司 一种卫星移动通信系统的加密方法
CN111526160A (zh) * 2020-05-26 2020-08-11 中国联合网络通信集团有限公司 保密信息的处理方法及服务器
CN111586070A (zh) * 2020-05-15 2020-08-25 北京中油瑞飞信息技术有限责任公司 三相计量设备通信方法、装置、三相计量设备及存储介质
CN111586055A (zh) * 2020-05-09 2020-08-25 天合光能股份有限公司 储能系统基于des随机令牌实现通讯安全的方法
CN111600854A (zh) * 2020-04-29 2020-08-28 北京智芯微电子科技有限公司 智能终端与服务端建立安全通道的方法
CN111614637A (zh) * 2020-05-08 2020-09-01 郑州信大捷安信息技术股份有限公司 一种基于软件密码模块的安全通信方法及系统
CN111698225A (zh) * 2020-05-28 2020-09-22 国家电网有限公司 一种适用于电力调度控制系统的应用服务认证加密方法
CN111723384A (zh) * 2019-03-22 2020-09-29 阿里巴巴集团控股有限公司 数据处理方法、系统及设备
CN111740985A (zh) * 2020-06-19 2020-10-02 国动物联网有限公司 一种tcp长连接安全验证加密方法
CN111786778A (zh) * 2020-06-12 2020-10-16 视联动力信息技术股份有限公司 一种密钥更新的方法和装置
CN112052018A (zh) * 2020-09-09 2020-12-08 北京文香信息技术有限公司 一种应用程序的安装方法及装置
CN112087419A (zh) * 2020-07-25 2020-12-15 北京蜂云科创信息技术有限公司 一种车载终端数据传输安全防护方法和设备
CN112118210A (zh) * 2019-06-20 2020-12-22 阿里巴巴集团控股有限公司 一种认证密钥配置方法、设备、系统及存储介质
CN112134694A (zh) * 2020-08-11 2020-12-25 北京智芯微电子科技有限公司 数据交互方法、主站、终端及计算机可读存储介质
CN112149140A (zh) * 2019-06-28 2020-12-29 北京百度网讯科技有限公司 预测方法、装置、设备及存储介质
CN112152963A (zh) * 2019-06-26 2020-12-29 国民技术股份有限公司 一种智能锁、安全平台及其认证方法
CN112311533A (zh) * 2019-07-29 2021-02-02 中国电信股份有限公司 终端身份认证方法、系统以及存储介质
CN112332940A (zh) * 2020-11-06 2021-02-05 北京东土科技股份有限公司 一种基于时间同步网络的数据传输方法及相关设备
CN112422275A (zh) * 2020-10-26 2021-02-26 深圳Tcl新技术有限公司 Uart通信中的秘钥协商方法、系统、设备及计算机存储介质
CN112436936A (zh) * 2020-11-11 2021-03-02 安徽量安通信息科技有限公司 一种具备量子加密功能的云存储方法及系统
CN112448808A (zh) * 2019-08-29 2021-03-05 斑马智行网络(香港)有限公司 通信方法、设备、接入点、服务器、系统及存储介质
CN112487380A (zh) * 2020-12-16 2021-03-12 江苏国科微电子有限公司 一种数据交互方法、装置、设备及介质
CN112511295A (zh) * 2020-11-12 2021-03-16 银联商务股份有限公司 接口调用的认证方法、装置、微服务应用和密钥管理中心
CN112533213A (zh) * 2019-09-17 2021-03-19 中移(苏州)软件技术有限公司 一种密钥协商方法、装置、终端及存储介质
CN112612976A (zh) * 2020-12-18 2021-04-06 深圳前海微众银行股份有限公司 数据处理方法、装置、设备及存储介质
CN112822016A (zh) * 2021-01-25 2021-05-18 厦门市易联众易惠科技有限公司 在区块链上进行数据授权的方法及区块链网络
CN112839062A (zh) * 2021-04-20 2021-05-25 北京天维信通科技有限公司 夹杂鉴权信号的端口隐藏方法和装置、设备
CN112929166A (zh) * 2021-02-03 2021-06-08 中国人民解放军火箭军工程大学 一种基于Modbus-TCP协议的主站、从站及数据传输系统
CN112948867A (zh) * 2021-03-29 2021-06-11 建信金融科技有限责任公司 加密报文的生成与解密方法、装置及电子设备
CN112995120A (zh) * 2019-12-18 2021-06-18 北京国双科技有限公司 一种数据监测方法及装置
CN113014376A (zh) * 2019-12-21 2021-06-22 浙江宇视科技有限公司 一种用户与服务器之间安全认证的方法
CN113010293A (zh) * 2021-03-19 2021-06-22 广州万协通信息技术有限公司 一种多线程并发数据加解密处理方法、装置及存储介质
CN113055340A (zh) * 2019-12-26 2021-06-29 华为技术有限公司 鉴权方法及设备
CN113099443A (zh) * 2019-12-23 2021-07-09 阿里巴巴集团控股有限公司 设备认证方法、装置、设备和系统
CN113141333A (zh) * 2020-01-18 2021-07-20 佛山市云米电器科技有限公司 入网设备的通信方法、设备、服务器、系统及存储介质
CN113194465A (zh) * 2021-04-20 2021-07-30 歌尔股份有限公司 终端间的ble连接验证方法、装置及可读存储介质
CN113207121A (zh) * 2021-03-31 2021-08-03 中国电力科学研究院有限公司 一种智能配电网通信系统密钥管理方法及系统
CN113254957A (zh) * 2019-11-26 2021-08-13 支付宝(杭州)信息技术有限公司 基于隐私信息保护的数据查询方法、装置、设备及系统
CN113395406A (zh) * 2021-06-23 2021-09-14 中国电力科学研究院有限公司 一种基于电力设备指纹的加密认证方法及系统
CN113422683A (zh) * 2021-03-04 2021-09-21 上海数道信息科技有限公司 一种边云协同数据传输方法、系统、存储介质及终端
CN113572743A (zh) * 2021-07-02 2021-10-29 深圳追一科技有限公司 数据加密、解密方法、装置、计算机设备和存储介质
CN113591113A (zh) * 2021-07-29 2021-11-02 华控清交信息科技(北京)有限公司 一种隐私计算方法、装置、系统及电子设备
CN113613227A (zh) * 2021-08-09 2021-11-05 青岛海尔科技有限公司 蓝牙设备的数据传输方法和装置、存储介质及电子装置
CN113674456A (zh) * 2021-08-19 2021-11-19 中国建设银行股份有限公司 开锁方法、装置、电子设备和存储介质
CN113676478A (zh) * 2021-08-20 2021-11-19 北京奇艺世纪科技有限公司 一种数据处理方法及相关设备
CN113691958A (zh) * 2021-09-02 2021-11-23 北卡科技有限公司 一种基于sm9的v2x身份认证方法
CN113852459A (zh) * 2021-08-13 2021-12-28 中央财经大学 密钥协商方法、设备及计算机可读存储介质
CN113902069A (zh) * 2021-09-18 2022-01-07 瀚辰科技有限公司 一种基于nfc天线的信鸽足环及其识别方法
CN114022259A (zh) * 2021-11-11 2022-02-08 陕西华春网络科技股份有限公司 一种基于公钥指定和身份验证的招标方法和装置
CN114051031A (zh) * 2021-11-16 2022-02-15 中国电信股份有限公司 基于分布式身份的加密通讯方法、系统、设备及存储介质
WO2022037379A1 (fr) * 2020-08-20 2022-02-24 飞天诚信科技股份有限公司 Dispositif électronique et procédé associé pour protéger un paquet de données initial
CN114095256A (zh) * 2021-11-23 2022-02-25 广州市诺的电子有限公司 基于边缘计算的终端认证方法、系统、设备及存储介质
CN114139180A (zh) * 2021-11-29 2022-03-04 厦门熵基科技有限公司 一种密钥处理的方法及装置
CN114142995A (zh) * 2021-11-05 2022-03-04 支付宝(杭州)信息技术有限公司 面向区块链中继通信网络的密钥安全分发方法及装置
CN114172745A (zh) * 2022-01-19 2022-03-11 中电华瑞技术有限公司 一种物联网安全协议系统
CN114205083A (zh) * 2021-12-22 2022-03-18 中国电信股份有限公司 基于SRv6的安全认证方法、网络节点和认证系统
CN114221784A (zh) * 2021-11-12 2022-03-22 招银云创信息技术有限公司 数据传输方法和计算机设备
CN114244513A (zh) * 2021-12-31 2022-03-25 日晷科技(上海)有限公司 密钥协商方法、设备及存储介质
CN114244630A (zh) * 2022-02-15 2022-03-25 北京指掌易科技有限公司 一种通信方法、装置、设备以及存储介质
CN114297618A (zh) * 2021-12-28 2022-04-08 北京深思数盾科技股份有限公司 授权码生成方法、身份认证方法、终端、服务器及介质
CN114338184A (zh) * 2021-12-29 2022-04-12 中国电信股份有限公司 通信加密方法、装置、非易失性存储介质及处理器
CN114363088A (zh) * 2022-02-18 2022-04-15 京东科技信息技术有限公司 用于请求数据的方法和装置
CN114362946A (zh) * 2022-03-10 2022-04-15 北京得瑞领新科技有限公司 密钥协商方法及系统
CN114389804A (zh) * 2021-12-30 2022-04-22 中国电信股份有限公司 一种智能终端控制方法、装置、电子设备及存储介质
CN114398602A (zh) * 2022-01-11 2022-04-26 国家计算机网络与信息安全管理中心 一种基于边缘计算的物联网终端身份认证方法
CN114419765A (zh) * 2022-01-18 2022-04-29 上汽通用五菱汽车股份有限公司 Nfc卡实现车辆安全控制的方法、装置及可读存储介质
CN114422251A (zh) * 2022-01-21 2022-04-29 晋商博创（北京）科技有限公司 基于云的多因子口令处理方法、装置及存储介质
CN114448613A (zh) * 2021-12-21 2022-05-06 北京邮电大学 通信系统的物理层密钥生成方法、装置和电子设备
CN114650175A (zh) * 2022-03-21 2022-06-21 网宿科技股份有限公司 一种验证方法及装置
CN114662087A (zh) * 2022-05-20 2022-06-24 广州万协通信息技术有限公司 一种多端验证的安全芯片固件更新方法及装置
CN114697956A (zh) * 2022-01-26 2022-07-01 深圳市三诺数字科技有限公司 一种基于双链路的安全通信方法、及其相关设备
CN114697000A (zh) * 2020-12-28 2022-07-01 深圳Tcl新技术有限公司 配网方法、装置、终端及计算机可读存储介质
CN114756887A (zh) * 2021-01-08 2022-07-15 普天信息技术有限公司 一种敏感信息块在文件中的加密存储方法及装置
CN114817956A (zh) * 2022-04-19 2022-07-29 珠海全志科技股份有限公司 一种usb通信对象验证方法、系统、装置及存储介质
CN114884659A (zh) * 2022-07-08 2022-08-09 北京智芯微电子科技有限公司 密钥协商方法、网关、终端设备、存储介质
CN114900348A (zh) * 2022-04-28 2022-08-12 福建福链科技有限公司 一种区块链传感器数据验证的方法及终端
CN114915416A (zh) * 2022-04-20 2022-08-16 中金金融认证中心有限公司 用于对文件进行加密的方法、解密验证的方法及相关产品
CN114978554A (zh) * 2022-07-29 2022-08-30 广州匠芯创科技有限公司 一种软件授权认证系统及方法
CN115037552A (zh) * 2022-06-29 2022-09-09 北京大甜绵白糖科技有限公司 鉴权方法、装置、设备及存储介质
CN115102745A (zh) * 2022-06-16 2022-09-23 慧之安信息技术股份有限公司 一种基于轻量级的物联网终端身份安全认证方法
CN115134177A (zh) * 2022-09-02 2022-09-30 国网瑞嘉(天津)智能机器人有限公司 连网加密通信方法及装置、服务端设备和终端设备
CN115174195A (zh) * 2022-06-30 2022-10-11 中国第一汽车股份有限公司 一种数据库文件处理方法、加密端和解密端
CN115250450A (zh) * 2021-04-28 2022-10-28 大唐移动通信设备有限公司 一种获取组通信密钥的方法及设备
CN115314204A (zh) * 2022-10-11 2022-11-08 南京易科腾信息技术有限公司 随机数生成方法、装置及存储介质
CN115348066A (zh) * 2022-08-05 2022-11-15 昆仑数智科技有限责任公司 数据加密传输方法、装置及电子设备、存储介质
CN115348076A (zh) * 2022-08-12 2022-11-15 天翼数字生活科技有限公司 一种基于属性加密的设备安全认证方法及其相关装置
CN115426182A (zh) * 2022-09-01 2022-12-02 中国联合网络通信集团有限公司 信息找回方法、装置和电子设备
CN115499199A (zh) * 2022-09-14 2022-12-20 重庆长安汽车股份有限公司 车辆的安全通信方法、装置、车辆及存储介质
CN115577019A (zh) * 2022-12-07 2023-01-06 杭州恒生数字设备科技有限公司 口语测试方法、装置、设备及存储介质
CN115603940A (zh) * 2022-08-29 2023-01-13 湖南云箭智能科技有限公司（Cn） 一种板卡双向入网认证方法、装置及板卡
CN115668858A (zh) * 2020-05-29 2023-01-31 华为技术有限公司 密钥协商方法、装置和系统
CN115834167A (zh) * 2022-11-14 2023-03-21 国网福建省电力有限公司龙岩供电公司 一种用于网络数据的加密传输方法及系统
CN115913602A (zh) * 2022-03-22 2023-04-04 中国电力科学研究院有限公司 一种计量箱内电能表组网互联通信方法及系统
CN115933993A (zh) * 2023-01-04 2023-04-07 山东省地质矿产勘查开发局八〇一水文地质工程地质大队(山东省地矿工程勘察院) 一种岩溶裂隙网络型含水介质的防污功能评价系统及方法
CN115941183A (zh) * 2023-02-27 2023-04-07 紫光同芯微电子有限公司 一种生物信息的处理方法和相关装置
CN116032577A (zh) * 2022-12-19 2023-04-28 北京成鑫盈通科技有限公司 实现终端设备端到端的数据安全传输系统、传输方法、介质及终端
CN116055207A (zh) * 2023-01-31 2023-05-02 深圳市圣驼储能技术有限公司 一种物联网通讯数据的加密方法及系统
CN116208949A (zh) * 2023-05-05 2023-06-02 北京智芯微电子科技有限公司 通信报文的加密传输方法、系统及发送终端、接收终端
CN117118756A (zh) * 2023-10-23 2023-11-24 中关村芯海择优科技有限公司 数据交互方法、装置、计算机设备及计算机可读存储介质
CN117176479A (zh) * 2023-11-02 2023-12-05 北京安博通科技股份有限公司 一种旁路解密国密流量审计的方法、装置及电子设备
WO2024027070A1 (fr) * 2022-08-03 2024-02-08 中国电力科学研究院有限公司 Procédé et système d'authentification de dispositif terminal basés sur une clé publique d'identification et support de stockage lisible par ordinateur
CN117744038A (zh) * 2023-12-24 2024-03-22 中信出版集团股份有限公司 一种数字内容的版权保护系统和方法
CN118101298A (zh) * 2024-03-14 2024-05-28 北京数软科技有限公司 数据加密传输方法、装置、计算机设备、介质及程序产品
TWI871236B (zh) * 2024-05-15 2025-01-21 中華電信股份有限公司 基於後量子密碼學的金鑰協商系統及方法

Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060095771A1 (en) * 2004-11-02 2006-05-04 Guido Appenzeller Security device for cryptographic communications
CN101771535A (zh) * 2008-12-30 2010-07-07 上海茂碧信息科技有限公司 终端和服务器之间的双向认证方法
CN105656941A (zh) * 2016-03-14 2016-06-08 美的集团股份有限公司 身份认证装置和方法
CN105871920A (zh) * 2016-06-08 2016-08-17 美的集团股份有限公司 终端与云服务器的通讯系统及方法、终端、云服务器
CN105959189A (zh) * 2016-06-08 2016-09-21 美的集团股份有限公司 家电设备及其与云服务器和终端的通讯系统及方法、终端

Patent Citations (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20060095771A1 (en) * 2004-11-02 2006-05-04 Guido Appenzeller Security device for cryptographic communications
CN101771535A (zh) * 2008-12-30 2010-07-07 上海茂碧信息科技有限公司 终端和服务器之间的双向认证方法
CN105656941A (zh) * 2016-03-14 2016-06-08 美的集团股份有限公司 身份认证装置和方法
CN105871920A (zh) * 2016-06-08 2016-08-17 美的集团股份有限公司 终端与云服务器的通讯系统及方法、终端、云服务器
CN105959189A (zh) * 2016-06-08 2016-09-21 美的集团股份有限公司 家电设备及其与云服务器和终端的通讯系统及方法、终端

Cited By (196)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN109376021A (zh) * 2018-09-26 2019-02-22 深圳壹账通智能科技有限公司 接口调用的响应方法及服务器
CN111130750B (zh) * 2018-10-30 2023-09-12 长城汽车股份有限公司 车辆can安全通信方法及系统
CN111130750A (zh) * 2018-10-30 2020-05-08 长城汽车股份有限公司 车辆can安全通信方法及系统
CN109379176A (zh) * 2018-12-10 2019-02-22 湖北工业大学 一种抗口令泄露的认证与密钥协商方法
CN109379176B (zh) * 2018-12-10 2021-12-03 湖北工业大学 一种抗口令泄露的认证与密钥协商方法
CN110011958A (zh) * 2018-12-13 2019-07-12 平安科技（深圳）有限公司 信息加密方法、装置、计算机设备及存储介质
CN110011958B (zh) * 2018-12-13 2023-04-07 平安科技（深圳）有限公司 信息加密方法、装置、计算机设备及存储介质
CN111385793A (zh) * 2018-12-30 2020-07-07 上海银基信息安全技术股份有限公司 指令发送方法、系统、电子设备及存储介质
CN111723384A (zh) * 2019-03-22 2020-09-29 阿里巴巴集团控股有限公司 数据处理方法、系统及设备
CN111723384B (zh) * 2019-03-22 2024-04-02 阿里巴巴集团控股有限公司 数据处理方法、系统及设备
CN110224816B (zh) * 2019-05-15 2023-09-05 如般量子科技有限公司 基于密钥卡和序列号的抗量子计算应用系统以及近距离节能通信方法和计算机设备
CN110224816A (zh) * 2019-05-15 2019-09-10 如般量子科技有限公司 基于密钥卡和序列号的抗量子计算应用系统以及近距离节能通信方法和计算机设备
CN112118210A (zh) * 2019-06-20 2020-12-22 阿里巴巴集团控股有限公司 一种认证密钥配置方法、设备、系统及存储介质
CN112118210B (zh) * 2019-06-20 2023-09-01 阿里巴巴集团控股有限公司 一种认证密钥配置方法、设备、系统及存储介质
CN112152963B (zh) * 2019-06-26 2024-04-09 国民技术股份有限公司 一种智能锁、安全平台及其认证方法
CN112152963A (zh) * 2019-06-26 2020-12-29 国民技术股份有限公司 一种智能锁、安全平台及其认证方法
CN110266485B (zh) * 2019-06-28 2022-06-24 宁波奥克斯电气股份有限公司 一种基于NB-IoT的物联网安全通信控制方法
CN112149140B (zh) * 2019-06-28 2023-06-27 北京百度网讯科技有限公司 预测方法、装置、设备及存储介质
CN112149140A (zh) * 2019-06-28 2020-12-29 北京百度网讯科技有限公司 预测方法、装置、设备及存储介质
CN110266485A (zh) * 2019-06-28 2019-09-20 宁波奥克斯电气股份有限公司 一种基于NB-IoT的物联网安全通信控制方法
CN110378753B (zh) * 2019-07-29 2022-05-17 秒针信息技术有限公司 一种广告投放策略确定方法及装置
CN112311533A (zh) * 2019-07-29 2021-02-02 中国电信股份有限公司 终端身份认证方法、系统以及存储介质
CN110378753A (zh) * 2019-07-29 2019-10-25 秒针信息技术有限公司 一种广告投放策略确定方法及装置
CN112448808A (zh) * 2019-08-29 2021-03-05 斑马智行网络(香港)有限公司 通信方法、设备、接入点、服务器、系统及存储介质
CN112533213B (zh) * 2019-09-17 2022-06-10 中移(苏州)软件技术有限公司 一种密钥协商方法、装置、终端及存储介质
CN112533213A (zh) * 2019-09-17 2021-03-19 中移(苏州)软件技术有限公司 一种密钥协商方法、装置、终端及存储介质
CN110830243A (zh) * 2019-10-18 2020-02-21 中国第一汽车股份有限公司 对称密钥分发方法、装置、车辆及存储介质
CN110830243B (zh) * 2019-10-18 2023-06-09 中国第一汽车股份有限公司 对称密钥分发方法、装置、车辆及存储介质
CN110796443A (zh) * 2019-10-28 2020-02-14 飞天诚信科技股份有限公司 一种构造磁道数据的方法及终端
CN110796443B (zh) * 2019-10-28 2023-09-19 飞天诚信科技股份有限公司 一种构造磁道数据的方法及终端
CN111177739B (zh) * 2019-10-28 2023-11-03 腾讯云计算（北京）有限责任公司 一种数据处理方法、信息交互系统及计算机存储介质
CN111177739A (zh) * 2019-10-28 2020-05-19 腾讯云计算（北京）有限责任公司 一种数据处理方法、信息交互系统及计算机存储介质
CN110912872A (zh) * 2019-11-04 2020-03-24 国网思极神往位置服务（北京）有限公司 基于北斗电力应用的新能源电厂调度数据采集系统
CN113254957A (zh) * 2019-11-26 2021-08-13 支付宝(杭州)信息技术有限公司 基于隐私信息保护的数据查询方法、装置、设备及系统
CN113254957B (zh) * 2019-11-26 2022-04-08 支付宝(杭州)信息技术有限公司 基于隐私信息保护的数据查询方法、装置、设备及系统
CN111031352A (zh) * 2019-12-02 2020-04-17 北京奇艺世纪科技有限公司 音视频加密方法、安全处理方法、装置及存储介质
CN111031352B (zh) * 2019-12-02 2022-10-18 北京奇艺世纪科技有限公司 音视频加密方法、安全处理方法、装置及存储介质
CN110868294A (zh) * 2019-12-09 2020-03-06 北京智宝云科科技有限公司 一种密钥更新方法、装置及设备
CN110868294B (zh) * 2019-12-09 2023-03-24 北京智宝云科科技有限公司 一种密钥更新方法、装置及设备
CN112995120A (zh) * 2019-12-18 2021-06-18 北京国双科技有限公司 一种数据监测方法及装置
CN113014376B (zh) * 2019-12-21 2022-06-14 浙江宇视科技有限公司 一种用户与服务器之间安全认证的方法
CN113014376A (zh) * 2019-12-21 2021-06-22 浙江宇视科技有限公司 一种用户与服务器之间安全认证的方法
CN113099443A (zh) * 2019-12-23 2021-07-09 阿里巴巴集团控股有限公司 设备认证方法、装置、设备和系统
CN113099443B (zh) * 2019-12-23 2024-05-17 阿里巴巴集团控股有限公司 设备认证方法、装置、设备和系统
CN111127014B (zh) * 2019-12-25 2023-09-19 中国银联股份有限公司 交易信息处理方法、服务器、用户终端、系统及存储介质
CN111127014A (zh) * 2019-12-25 2020-05-08 中国银联股份有限公司 交易信息处理方法、服务器、用户终端、系统及存储介质
CN113055340A (zh) * 2019-12-26 2021-06-29 华为技术有限公司 鉴权方法及设备
CN113055340B (zh) * 2019-12-26 2023-09-26 华为技术有限公司 鉴权方法及设备
CN111065092A (zh) * 2019-12-30 2020-04-24 江苏全链通信息科技有限公司 5g通信信息加解密方法、设备及存储介质
CN111082935A (zh) * 2019-12-31 2020-04-28 江苏芯盛智能科技有限公司 一种媒体密钥生成方法、装置及基于媒体密钥的终端
CN111082935B (zh) * 2019-12-31 2022-07-12 江苏芯盛智能科技有限公司 一种媒体密钥生成方法、装置及基于媒体密钥的终端
CN113141333A (zh) * 2020-01-18 2021-07-20 佛山市云米电器科技有限公司 入网设备的通信方法、设备、服务器、系统及存储介质
CN111416718A (zh) * 2020-03-13 2020-07-14 浙江华消科技有限公司 通讯密钥的接收方法及装置、发送方法及装置
CN111405082A (zh) * 2020-03-23 2020-07-10 Oppo（重庆）智能科技有限公司 一种设备连接方法、电子设备及终端、存储介质
CN111404952B (zh) * 2020-03-24 2022-06-14 中国南方电网有限责任公司 变电站数据加密传输方法、装置、计算机设备和存储介质
CN111404952A (zh) * 2020-03-24 2020-07-10 中国南方电网有限责任公司 变电站数据加密传输方法、装置、计算机设备和存储介质
CN111431717A (zh) * 2020-03-31 2020-07-17 兴唐通信科技有限公司 一种卫星移动通信系统的加密方法
CN111600854B (zh) * 2020-04-29 2022-03-08 北京智芯微电子科技有限公司 智能终端与服务端建立安全通道的方法
CN111600854A (zh) * 2020-04-29 2020-08-28 北京智芯微电子科技有限公司 智能终端与服务端建立安全通道的方法
CN111614637A (zh) * 2020-05-08 2020-09-01 郑州信大捷安信息技术股份有限公司 一种基于软件密码模块的安全通信方法及系统
CN111586055A (zh) * 2020-05-09 2020-08-25 天合光能股份有限公司 储能系统基于des随机令牌实现通讯安全的方法
CN111586070A (zh) * 2020-05-15 2020-08-25 北京中油瑞飞信息技术有限责任公司 三相计量设备通信方法、装置、三相计量设备及存储介质
CN111526160A (zh) * 2020-05-26 2020-08-11 中国联合网络通信集团有限公司 保密信息的处理方法及服务器
CN111698225A (zh) * 2020-05-28 2020-09-22 国家电网有限公司 一种适用于电力调度控制系统的应用服务认证加密方法
CN115668858A (zh) * 2020-05-29 2023-01-31 华为技术有限公司 密钥协商方法、装置和系统
CN111786778A (zh) * 2020-06-12 2020-10-16 视联动力信息技术股份有限公司 一种密钥更新的方法和装置
CN111740985A (zh) * 2020-06-19 2020-10-02 国动物联网有限公司 一种tcp长连接安全验证加密方法
CN112087419B (zh) * 2020-07-25 2022-07-29 北京蜂云科创信息技术有限公司 一种车载终端数据传输安全防护方法和设备
CN112087419A (zh) * 2020-07-25 2020-12-15 北京蜂云科创信息技术有限公司 一种车载终端数据传输安全防护方法和设备
CN112134694B (zh) * 2020-08-11 2024-01-23 北京智芯微电子科技有限公司 数据交互方法、主站、终端及计算机可读存储介质
CN112134694A (zh) * 2020-08-11 2020-12-25 北京智芯微电子科技有限公司 数据交互方法、主站、终端及计算机可读存储介质
WO2022037379A1 (fr) * 2020-08-20 2022-02-24 飞天诚信科技股份有限公司 Dispositif électronique et procédé associé pour protéger un paquet de données initial
CN112052018A (zh) * 2020-09-09 2020-12-08 北京文香信息技术有限公司 一种应用程序的安装方法及装置
CN112052018B (zh) * 2020-09-09 2024-02-20 安徽文香科技股份有限公司 一种应用程序的安装方法及装置
CN112422275A (zh) * 2020-10-26 2021-02-26 深圳Tcl新技术有限公司 Uart通信中的秘钥协商方法、系统、设备及计算机存储介质
CN112332940B (zh) * 2020-11-06 2024-03-12 北京东土科技股份有限公司 一种基于时间同步网络的数据传输方法及相关设备
CN112332940A (zh) * 2020-11-06 2021-02-05 北京东土科技股份有限公司 一种基于时间同步网络的数据传输方法及相关设备
CN112436936A (zh) * 2020-11-11 2021-03-02 安徽量安通信息科技有限公司 一种具备量子加密功能的云存储方法及系统
CN112436936B (zh) * 2020-11-11 2022-11-01 安徽量安通信息科技有限公司 一种具备量子加密功能的云存储方法及系统
CN112511295A (zh) * 2020-11-12 2021-03-16 银联商务股份有限公司 接口调用的认证方法、装置、微服务应用和密钥管理中心
CN112511295B (zh) * 2020-11-12 2022-11-22 银联商务股份有限公司 接口调用的认证方法、装置、微服务应用和密钥管理中心
CN112487380B (zh) * 2020-12-16 2024-04-05 江苏国科微电子有限公司 一种数据交互方法、装置、设备及介质
CN112487380A (zh) * 2020-12-16 2021-03-12 江苏国科微电子有限公司 一种数据交互方法、装置、设备及介质
CN112612976A (zh) * 2020-12-18 2021-04-06 深圳前海微众银行股份有限公司 数据处理方法、装置、设备及存储介质
CN114697000A (zh) * 2020-12-28 2022-07-01 深圳Tcl新技术有限公司 配网方法、装置、终端及计算机可读存储介质
CN114756887A (zh) * 2021-01-08 2022-07-15 普天信息技术有限公司 一种敏感信息块在文件中的加密存储方法及装置
CN112822016B (zh) * 2021-01-25 2023-04-28 厦门市易联众易惠科技有限公司 在区块链上进行数据授权的方法及区块链网络
CN112822016A (zh) * 2021-01-25 2021-05-18 厦门市易联众易惠科技有限公司 在区块链上进行数据授权的方法及区块链网络
CN112929166A (zh) * 2021-02-03 2021-06-08 中国人民解放军火箭军工程大学 一种基于Modbus-TCP协议的主站、从站及数据传输系统
CN112929166B (zh) * 2021-02-03 2022-10-04 中国人民解放军火箭军工程大学 一种基于Modbus-TCP协议的主站、从站及数据传输系统
CN113422683A (zh) * 2021-03-04 2021-09-21 上海数道信息科技有限公司 一种边云协同数据传输方法、系统、存储介质及终端
CN113010293A (zh) * 2021-03-19 2021-06-22 广州万协通信息技术有限公司 一种多线程并发数据加解密处理方法、装置及存储介质
CN113010293B (zh) * 2021-03-19 2023-08-22 广州万协通信息技术有限公司 一种多线程并发数据加解密处理方法、装置及存储介质
CN112948867A (zh) * 2021-03-29 2021-06-11 建信金融科技有限责任公司 加密报文的生成与解密方法、装置及电子设备
CN113207121A (zh) * 2021-03-31 2021-08-03 中国电力科学研究院有限公司 一种智能配电网通信系统密钥管理方法及系统
CN113194465A (zh) * 2021-04-20 2021-07-30 歌尔股份有限公司 终端间的ble连接验证方法、装置及可读存储介质
CN112839062A (zh) * 2021-04-20 2021-05-25 北京天维信通科技有限公司 夹杂鉴权信号的端口隐藏方法和装置、设备
CN113194465B (zh) * 2021-04-20 2023-11-24 歌尔股份有限公司 终端间的ble连接验证方法、装置及可读存储介质
CN115250450A (zh) * 2021-04-28 2022-10-28 大唐移动通信设备有限公司 一种获取组通信密钥的方法及设备
CN113395406B (zh) * 2021-06-23 2024-02-13 中国电力科学研究院有限公司 一种基于电力设备指纹的加密认证方法及系统
CN113395406A (zh) * 2021-06-23 2021-09-14 中国电力科学研究院有限公司 一种基于电力设备指纹的加密认证方法及系统
CN113572743A (zh) * 2021-07-02 2021-10-29 深圳追一科技有限公司 数据加密、解密方法、装置、计算机设备和存储介质
CN113572743B (zh) * 2021-07-02 2023-07-28 深圳追一科技有限公司 数据加密、解密方法、装置、计算机设备和存储介质
CN113591113B (zh) * 2021-07-29 2024-04-05 华控清交信息科技(北京)有限公司 一种隐私计算方法、装置、系统及电子设备
CN113591113A (zh) * 2021-07-29 2021-11-02 华控清交信息科技(北京)有限公司 一种隐私计算方法、装置、系统及电子设备
CN113613227B (zh) * 2021-08-09 2023-10-24 青岛海尔科技有限公司 蓝牙设备的数据传输方法和装置、存储介质及电子装置
CN113613227A (zh) * 2021-08-09 2021-11-05 青岛海尔科技有限公司 蓝牙设备的数据传输方法和装置、存储介质及电子装置
CN113852459A (zh) * 2021-08-13 2021-12-28 中央财经大学 密钥协商方法、设备及计算机可读存储介质
CN113852459B (zh) * 2021-08-13 2024-03-19 中央财经大学 密钥协商方法、设备及计算机可读存储介质
CN113674456A (zh) * 2021-08-19 2021-11-19 中国建设银行股份有限公司 开锁方法、装置、电子设备和存储介质
CN113674456B (zh) * 2021-08-19 2023-09-22 中国建设银行股份有限公司 开锁方法、装置、电子设备和存储介质
CN113676478B (zh) * 2021-08-20 2023-09-12 北京奇艺世纪科技有限公司 一种数据处理方法及相关设备
CN113676478A (zh) * 2021-08-20 2021-11-19 北京奇艺世纪科技有限公司 一种数据处理方法及相关设备
CN113691958B (zh) * 2021-09-02 2023-06-09 北卡科技有限公司 一种基于sm9的v2x身份认证方法
CN113691958A (zh) * 2021-09-02 2021-11-23 北卡科技有限公司 一种基于sm9的v2x身份认证方法
CN113902069A (zh) * 2021-09-18 2022-01-07 瀚辰科技有限公司 一种基于nfc天线的信鸽足环及其识别方法
CN114142995B (zh) * 2021-11-05 2023-08-22 支付宝(杭州)信息技术有限公司 面向区块链中继通信网络的密钥安全分发方法及装置
CN114142995A (zh) * 2021-11-05 2022-03-04 支付宝(杭州)信息技术有限公司 面向区块链中继通信网络的密钥安全分发方法及装置
CN114022259A (zh) * 2021-11-11 2022-02-08 陕西华春网络科技股份有限公司 一种基于公钥指定和身份验证的招标方法和装置
CN114022259B (zh) * 2021-11-11 2023-08-25 陕西华春网络科技股份有限公司 一种基于公钥指定和身份验证的招标方法和装置
CN114221784A (zh) * 2021-11-12 2022-03-22 招银云创信息技术有限公司 数据传输方法和计算机设备
CN114221784B (zh) * 2021-11-12 2024-04-09 招银云创信息技术有限公司 数据传输方法和计算机设备
CN114051031B (zh) * 2021-11-16 2024-05-10 中国电信股份有限公司 基于分布式身份的加密通讯方法、系统、设备及存储介质
CN114051031A (zh) * 2021-11-16 2022-02-15 中国电信股份有限公司 基于分布式身份的加密通讯方法、系统、设备及存储介质
CN114095256B (zh) * 2021-11-23 2023-09-26 广州市诺的电子有限公司 基于边缘计算的终端认证方法、系统、设备及存储介质
CN114095256A (zh) * 2021-11-23 2022-02-25 广州市诺的电子有限公司 基于边缘计算的终端认证方法、系统、设备及存储介质
CN114139180A (zh) * 2021-11-29 2022-03-04 厦门熵基科技有限公司 一种密钥处理的方法及装置
CN114448613B (zh) * 2021-12-21 2024-01-26 北京邮电大学 通信系统的物理层密钥生成方法、装置和电子设备
CN114448613A (zh) * 2021-12-21 2022-05-06 北京邮电大学 通信系统的物理层密钥生成方法、装置和电子设备
CN114205083A (zh) * 2021-12-22 2022-03-18 中国电信股份有限公司 基于SRv6的安全认证方法、网络节点和认证系统
CN114297618A (zh) * 2021-12-28 2022-04-08 北京深思数盾科技股份有限公司 授权码生成方法、身份认证方法、终端、服务器及介质
CN114338184A (zh) * 2021-12-29 2022-04-12 中国电信股份有限公司 通信加密方法、装置、非易失性存储介质及处理器
CN114389804B (zh) * 2021-12-30 2024-04-30 中国电信股份有限公司 一种智能终端控制方法、装置、电子设备及存储介质
CN114389804A (zh) * 2021-12-30 2022-04-22 中国电信股份有限公司 一种智能终端控制方法、装置、电子设备及存储介质
CN114244513A (zh) * 2021-12-31 2022-03-25 日晷科技(上海)有限公司 密钥协商方法、设备及存储介质
CN114244513B (zh) * 2021-12-31 2024-02-09 日晷科技(上海)有限公司 密钥协商方法、设备及存储介质
CN114398602B (zh) * 2022-01-11 2024-05-10 国家计算机网络与信息安全管理中心 一种基于边缘计算的物联网终端身份认证方法
CN114398602A (zh) * 2022-01-11 2022-04-26 国家计算机网络与信息安全管理中心 一种基于边缘计算的物联网终端身份认证方法
CN114419765A (zh) * 2022-01-18 2022-04-29 上汽通用五菱汽车股份有限公司 Nfc卡实现车辆安全控制的方法、装置及可读存储介质
CN114172745A (zh) * 2022-01-19 2022-03-11 中电华瑞技术有限公司 一种物联网安全协议系统
CN114422251B (zh) * 2022-01-21 2024-02-13 晋商博创（北京）科技有限公司 基于云的多因子口令处理方法、装置及存储介质
CN114422251A (zh) * 2022-01-21 2022-04-29 晋商博创（北京）科技有限公司 基于云的多因子口令处理方法、装置及存储介质
CN114697956A (zh) * 2022-01-26 2022-07-01 深圳市三诺数字科技有限公司 一种基于双链路的安全通信方法、及其相关设备
CN114244630A (zh) * 2022-02-15 2022-03-25 北京指掌易科技有限公司 一种通信方法、装置、设备以及存储介质
CN114363088A (zh) * 2022-02-18 2022-04-15 京东科技信息技术有限公司 用于请求数据的方法和装置
CN114363088B (zh) * 2022-02-18 2024-04-16 京东科技信息技术有限公司 用于请求数据的方法和装置
CN114362946B (zh) * 2022-03-10 2022-06-07 北京得瑞领新科技有限公司 密钥协商方法及系统
CN114362946A (zh) * 2022-03-10 2022-04-15 北京得瑞领新科技有限公司 密钥协商方法及系统
CN114650175A (zh) * 2022-03-21 2022-06-21 网宿科技股份有限公司 一种验证方法及装置
CN114650175B (zh) * 2022-03-21 2024-04-02 网宿科技股份有限公司 一种验证方法及装置
CN115913602A (zh) * 2022-03-22 2023-04-04 中国电力科学研究院有限公司 一种计量箱内电能表组网互联通信方法及系统
CN114817956A (zh) * 2022-04-19 2022-07-29 珠海全志科技股份有限公司 一种usb通信对象验证方法、系统、装置及存储介质
CN114915416B (zh) * 2022-04-20 2024-05-31 中金金融认证中心有限公司 用于对文件进行加密的方法、解密验证的方法及相关产品
CN114915416A (zh) * 2022-04-20 2022-08-16 中金金融认证中心有限公司 用于对文件进行加密的方法、解密验证的方法及相关产品
CN114900348A (zh) * 2022-04-28 2022-08-12 福建福链科技有限公司 一种区块链传感器数据验证的方法及终端
CN114900348B (zh) * 2022-04-28 2024-01-30 福建福链科技有限公司 一种区块链传感器数据验证的方法及终端
CN114662087A (zh) * 2022-05-20 2022-06-24 广州万协通信息技术有限公司 一种多端验证的安全芯片固件更新方法及装置
CN114662087B (zh) * 2022-05-20 2022-09-02 广州万协通信息技术有限公司 一种多端验证的安全芯片固件更新方法及装置
CN115102745B (zh) * 2022-06-16 2023-10-27 慧之安信息技术股份有限公司 一种基于轻量级的物联网终端身份安全认证方法
CN115102745A (zh) * 2022-06-16 2022-09-23 慧之安信息技术股份有限公司 一种基于轻量级的物联网终端身份安全认证方法
CN115037552A (zh) * 2022-06-29 2022-09-09 北京大甜绵白糖科技有限公司 鉴权方法、装置、设备及存储介质
CN115174195A (zh) * 2022-06-30 2022-10-11 中国第一汽车股份有限公司 一种数据库文件处理方法、加密端和解密端
CN114884659A (zh) * 2022-07-08 2022-08-09 北京智芯微电子科技有限公司 密钥协商方法、网关、终端设备、存储介质
CN114978554A (zh) * 2022-07-29 2022-08-30 广州匠芯创科技有限公司 一种软件授权认证系统及方法
CN114978554B (zh) * 2022-07-29 2022-10-18 广州匠芯创科技有限公司 一种软件授权认证系统及方法
WO2024027070A1 (fr) * 2022-08-03 2024-02-08 中国电力科学研究院有限公司 Procédé et système d'authentification de dispositif terminal basés sur une clé publique d'identification et support de stockage lisible par ordinateur
CN115348066A (zh) * 2022-08-05 2022-11-15 昆仑数智科技有限责任公司 数据加密传输方法、装置及电子设备、存储介质
CN115348066B (zh) * 2022-08-05 2023-03-28 昆仑数智科技有限责任公司 数据加密传输方法、装置及电子设备、存储介质
CN115348076B (zh) * 2022-08-12 2024-02-06 天翼数字生活科技有限公司 一种基于属性加密的设备安全认证方法、系统及其相关装置
CN115348076A (zh) * 2022-08-12 2022-11-15 天翼数字生活科技有限公司 一种基于属性加密的设备安全认证方法及其相关装置
WO2024031868A1 (fr) * 2022-08-12 2024-02-15 天翼数字生活科技有限公司 Procédé d'authentification de la sécurité d'un dispositif sur la base d'un chiffrement d'attribut et son appareil associé
CN115603940A (zh) * 2022-08-29 2023-01-13 湖南云箭智能科技有限公司（Cn） 一种板卡双向入网认证方法、装置及板卡
CN115426182A (zh) * 2022-09-01 2022-12-02 中国联合网络通信集团有限公司 信息找回方法、装置和电子设备
CN115426182B (zh) * 2022-09-01 2024-04-30 中国联合网络通信集团有限公司 信息找回方法、装置和电子设备
CN115134177B (zh) * 2022-09-02 2022-11-18 国网瑞嘉(天津)智能机器人有限公司 连网加密通信方法及装置、服务端设备和终端设备
CN115134177A (zh) * 2022-09-02 2022-09-30 国网瑞嘉(天津)智能机器人有限公司 连网加密通信方法及装置、服务端设备和终端设备
CN115499199A (zh) * 2022-09-14 2022-12-20 重庆长安汽车股份有限公司 车辆的安全通信方法、装置、车辆及存储介质
CN115314204A (zh) * 2022-10-11 2022-11-08 南京易科腾信息技术有限公司 随机数生成方法、装置及存储介质
CN115314204B (zh) * 2022-10-11 2022-12-16 南京易科腾信息技术有限公司 随机数生成方法、装置及存储介质
CN115834167A (zh) * 2022-11-14 2023-03-21 国网福建省电力有限公司龙岩供电公司 一种用于网络数据的加密传输方法及系统
CN115577019A (zh) * 2022-12-07 2023-01-06 杭州恒生数字设备科技有限公司 口语测试方法、装置、设备及存储介质
CN116032577A (zh) * 2022-12-19 2023-04-28 北京成鑫盈通科技有限公司 实现终端设备端到端的数据安全传输系统、传输方法、介质及终端
CN115933993B (zh) * 2023-01-04 2023-05-30 山东省地质矿产勘查开发局八〇一水文地质工程地质大队(山东省地矿工程勘察院) 一种岩溶裂隙网络型含水介质的防污功能评价系统及方法
CN115933993A (zh) * 2023-01-04 2023-04-07 山东省地质矿产勘查开发局八〇一水文地质工程地质大队(山东省地矿工程勘察院) 一种岩溶裂隙网络型含水介质的防污功能评价系统及方法
CN116055207B (zh) * 2023-01-31 2023-10-03 深圳市圣驼储能技术有限公司 一种物联网通讯数据的加密方法及系统
CN116055207A (zh) * 2023-01-31 2023-05-02 深圳市圣驼储能技术有限公司 一种物联网通讯数据的加密方法及系统
CN115941183B (zh) * 2023-02-27 2023-10-13 紫光同芯微电子有限公司 一种生物信息的处理方法和相关装置
CN115941183A (zh) * 2023-02-27 2023-04-07 紫光同芯微电子有限公司 一种生物信息的处理方法和相关装置
CN116208949A (zh) * 2023-05-05 2023-06-02 北京智芯微电子科技有限公司 通信报文的加密传输方法、系统及发送终端、接收终端
CN117118756A (zh) * 2023-10-23 2023-11-24 中关村芯海择优科技有限公司 数据交互方法、装置、计算机设备及计算机可读存储介质
CN117118756B (zh) * 2023-10-23 2024-01-16 中关村芯海择优科技有限公司 数据交互方法、装置、计算机设备及计算机可读存储介质
CN117176479A (zh) * 2023-11-02 2023-12-05 北京安博通科技股份有限公司 一种旁路解密国密流量审计的方法、装置及电子设备
CN117744038A (zh) * 2023-12-24 2024-03-22 中信出版集团股份有限公司 一种数字内容的版权保护系统和方法
CN117744038B (zh) * 2023-12-24 2024-06-11 中信出版集团股份有限公司 一种数字内容的版权保护系统和方法
CN118101298A (zh) * 2024-03-14 2024-05-28 北京数软科技有限公司 数据加密传输方法、装置、计算机设备、介质及程序产品
TWI871236B (zh) * 2024-05-15 2025-01-21 中華電信股份有限公司 基於後量子密碼學的金鑰協商系統及方法

Similar Documents

Publication Publication Date Title
WO2018076365A1 (fr) Procédé et dispositif de négociation de clés
CN106603485B (zh) 密钥协商方法及装置
JP6168415B2 (ja) 端末認証システム、サーバ装置、及び端末認証方法
CN103763356B (zh) 一种安全套接层连接的建立方法、装置及系统
WO2018050081A1 (fr) Procédé et appareil d'authentification d'identité de dispositif, et support de stockage
CN107454079B (zh) 基于物联网平台的轻量级设备认证及共享密钥协商方法
WO2017028593A1 (fr) Procédé pour amener un dispositif d'accès à un réseau à accéder à un point d'accès à un réseau sans fil, dispositif d'accès à un réseau, serveur d'application et support de stockage lisible par ordinateur non volatil
CN107040513B (zh) 一种可信访问认证处理方法、用户终端和服务端
JP7292263B2 (ja) デジタル証明書を管理するための方法および装置
US20140298037A1 (en) Method, apparatus, and system for securely transmitting data
WO2018127081A1 (fr) Procédé et système d'obtention d'une clé de chiffrement
CN109302412B (zh) 基于CPK的VoIP通信处理方法、终端、服务器及存储介质
WO2018045817A1 (fr) Procédé d'authentification de réseau mobile, dispositif terminal, serveur, et entité d'authentification de réseau
CN108353279B (zh) 一种认证方法和认证系统
EP3051744A1 (fr) Procédé et appareil de configuration de clé
JP6548172B2 (ja) 端末認証システム、サーバ装置、及び端末認証方法
US20140281493A1 (en) Provisioning sensitive data into third party
CN104836784B (zh) 一种信息处理方法、客户端和服务器
CN113225352A (zh) 一种数据传输方法、装置、电子设备及存储介质
CN108847938A (zh) 一种连接建立方法及装置
WO2016011588A1 (fr) Entité de gestion de mobilité, serveur domestique, terminal, et système et procédé d'authentification d'identité
US20210392004A1 (en) Apparatus and method for authenticating device based on certificate using physical unclonable function
CN105791258A (zh) 一种数据传输方法、终端及开放平台
KR100668446B1 (ko) 안전한 인증정보 이동방법
CN102916810A (zh) 传感器认证方法、系统和装置

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 16920134

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 02.10.2019)

122 Ep: pct application non-entry in european phase

Ref document number: 16920134

Country of ref document: EP

Kind code of ref document: A1

点击 这是indexloc提供的php浏览器服务，不要输入任何密码和下载