CN102710601B - Secure Encryption and Signature Method Based on Identity File - Google Patents

Abstract

The invention discloses a security encryption and signature method based on an identity file, the steps of which include: obtaining the configuration information of the basic setting of the client and the configuration information of the advanced encryption standard setting; registering at the server and applying for an identity file suitable for a mailbox ; The client downloads and obtains the data information of the identity file; obtains the type of task selected on the client to be executed; according to the information of the identity file, the client encrypts or decrypts the file. The secure encryption and signature method based on identity files described in the present invention can help users protect important data from being viewed or modified, and can realize secure communication on an insecure channel; at the same time, it can also prevent users from accessing The act of denying after sending a message.

Description

Secure Encryption and Signature Method Based on Identity File

technical field

The invention relates to a software system, in particular to a security encryption and signature method based on an identity file.

Background technique

This year, with the rapid development of the Internet, people began to understand and learn Internet knowledge more and more deeply. While the Internet provides people with convenience, there are many security risks. The files and information people send It is often leaked and stolen, which brings great inconvenience to people's life, study and work.

Although there are many ways of encrypting and decrypting files at present, these methods are not highly secure, and there is still the possibility of being modified and stolen when transferring files on an insecure channel, so people need a price that meets the requirements more Encryption and decryption system.

Contents of the invention

The invention mainly aims at the deficiencies of the prior art, and provides a secure encryption and signature method based on identity files with high security and simple operation.

In order to achieve the above object, the present invention provides the following technical solutions:

A security encryption and signature method based on an identity file, the steps of which include:

Obtain the configuration information of the basic settings of the client and the configuration information of the Advanced Encryption Standard settings;

Register on the server side and apply for an identity document suitable for the mailbox;

The client downloads and obtains the data information of the identity file;

Obtain information on the types of tasks that need to be performed selected on the client side;

According to the information of the identity file, the client encrypts or decrypts the file.

As a preferred embodiment of the present invention, the configuration information of the basic settings includes the type of authentication algorithm using a secure hash algorithm.

As a preferred embodiment of the present invention, the configuration information set by the Advanced Encryption Standard includes key length and operation mode.

As a preferred embodiment of the present invention, the task category includes encrypting files and signing and decrypting files and verifying signatures.

As a preferred embodiment of the present invention, the specific steps of registering on the server side and applying for an identity file suitable for a mailbox include:

The server obtains the user name, password, email, verification code information and the consent information of the user license agreement in the registration form;

Perform server-side registration processing;

After successful registration, redirect to the server-side login interface;

The server obtains and verifies the login information, and performs login;

After successful login, the server obtains and verifies the application information of the identity document;

The server side processes the application information and generates identity documents;

The server sends an application prompt message to the client.

As a preferred embodiment of the present invention, the specific steps for the client to encrypt or decrypt the file according to the information of the identity file include:

If you choose to encrypt the file and sign it, the client gets the file that needs to be encrypted;

The client obtains the recipient's email, encryption method, storage path and digital signature information;

The client obtains the corresponding identity file information;

The client encrypts the file;

If you choose to decrypt the file and verify the signature, the client gets the ciphertext file to be decrypted;

The client obtains and verifies the information of the identity file;

Determine whether the ciphertext file contains a digital signature, and if it contains a digital signature, verify the ciphertext file;

Obtain the storage location of the ciphertext file, and decrypt the ciphertext file.

As a preferred embodiment of the present invention, the encryption method includes Advanced Encryption Standard and Stream Encryption Algorithm.

It can be seen from the above technical solutions that the secure encryption and signature method based on identity files described in the present invention can help users protect important data from being viewed or modified, and can realize secure communication on an insecure channel; at the same time , It can also prevent the behavior of denying after sending and receiving information in the name of the user.

Description of drawings

Fig. 1 is a schematic structural diagram of a preferred embodiment of the security encryption and signature method based on the identity file of the present invention.

Detailed ways

The preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings, so that the advantages and features of the present invention can be more easily understood by those skilled in the art, so as to define the protection scope of the present invention more clearly.

Referring to Fig. 1, Fig. 1 is a structural schematic diagram of a preferred embodiment of the security encryption and signature method based on the identity file of the present invention.

A secure encryption and signature method based on an identity file, the steps of which include: obtaining the configuration information of the basic settings of the client and the configuration information of the Advanced Encryption Standard setting; registering and applying for an identity file suitable for a mailbox at the server; downloading the And obtain the data information of the identity file; obtain the type information of the task selected by the client to be executed; according to the information of the identity file, the client encrypts or decrypts the file.

The configuration information of the basic settings includes the type of verification algorithm using the secure hash algorithm. The secure hash algorithm (Secure Hash Algorithm) is a character string (also Called message digest) algorithm, so that different verification algorithms can be selected according to different needs of people, which is convenient for people to use.

The configuration information set by the Advanced Encryption Standard includes key length and operation mode.

The task types include encrypting files and signing and decrypting files and verifying signatures, and the encryption and decryption processing of files are separated, which is more convenient for people to choose and use.

The specific steps of registering on the server side and applying for an identity file suitable for a mailbox include: the server side obtains the information of the user name, password, email, verification code and user ID in the registration form.

The consent information of the license agreement; perform server-side registration processing; after successful registration, redirect to the server-side login interface; the server-side obtains and verifies the login information, and logs in; after the login is successful, the server-side obtains and verifies the application for identity documents information; the server processes the application information and generates an identity document; the server sends an application prompt message to the client. In this way, the identity documents obtained through the application can be more secure, and can be prevented from being intercepted and modified in the transmission diagram.

According to the information of the identity file, the specific steps for the client to encrypt or decrypt the file include:

If you choose to encrypt the file and sign it, the client obtains the file to be encrypted; the client obtains the recipient’s email, encryption method, storage path and digital signature information; the client obtains the corresponding identity file information; Encryption processing.

If you choose to decrypt the file and verify the signature, the client obtains the ciphertext file to be decrypted; the client obtains and verifies the information of the identity file; judges whether the ciphertext file contains a digital signature, and if it contains a digital signature, verifies the ciphertext file; obtains The storage location of the ciphertext file, and decrypt the ciphertext file.

Through the digital signature, the integrity of the file is easily verified, and it also ensures that others cannot send files with your identity.

The encryption methods include Advanced Encryption Standard and Stream Encryption Algorithm.

The secure encryption and signature method based on identity files described in the present invention can help users protect important data from being viewed or modified, and can realize secure communication on an insecure channel; at the same time, it can also prevent users from accessing The act of denying after sending a message.

The above is only the specific implementation of the preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto, any person familiar with the art within the technical scope disclosed in the present invention can think of Any changes or substitutions should fall within the protection scope of the present invention.

Claims (6)

1. A security encryption and signature method based on identity documents, characterized in that the steps include: Obtain the configuration information of the basic settings of the client and the configuration information of the Advanced Encryption Standard settings; Register on the server side and apply for an identity document suitable for the mailbox; The client downloads and obtains the information of the identity file; Obtain information on the types of tasks that need to be performed selected on the client side; According to the information of the identity file, the client encrypts or decrypts the file, and the specific steps include: If you choose to encrypt the file and sign it, the client gets the file that needs to be encrypted; The client obtains the recipient's email, encryption method, storage path and digital signature information; The client obtains the information of the corresponding identity file; The client encrypts the file; If you choose to decrypt the file and verify the signature, the client gets the ciphertext file to be decrypted; The client obtains and verifies the information of the identity file; Determine whether the ciphertext file contains a digital signature, and if it contains a digital signature, verify the ciphertext file; Obtain the storage location of the ciphertext file, and decrypt the ciphertext file. 2. The identity file-based secure encryption and signature method according to claim 1, characterized in that the configuration information of the basic settings includes the type of verification algorithm using a secure hash algorithm. 3. The identity file-based secure encryption and signature method according to claim 1, wherein the configuration information set by the Advanced Encryption Standard includes a key length and an operation mode. 4. The secure encryption and signature method based on identity files according to claim 1, wherein the task category includes encrypting files and signing and decrypting files and verifying signatures. 5. The security encryption and signature method based on an identity file according to claim 1, wherein the specific steps of registering at the server and applying for an identity file applicable to a mailbox include: The server obtains the user name, password, email, verification code information and the consent information of the user license agreement in the registration form; Perform server-side registration processing; After successful registration, redirect to the server-side login interface; The server obtains and verifies the login information, and performs login; After successful login, the server obtains and verifies the application information of the identity document; The server side processes the application information and generates identity documents; The server sends an application prompt message to the client. 6. The security encryption and signature method based on identity file according to claim 1, characterized in that, the encryption method comprises Advanced Encryption Standard and Stream Encryption Algorithm.