基于硬件的密钥安全备份和恢复机制  

A Mechanism of Secure Key Backup and Key Recovery Based on Hardware

作　　者：王冕[1] 周玉洁[2] 

机构地区：[1]河南郑州信息工程大学信息工程学院信息研究系 [2]上海交通大学电子工程系

出　　处：《微计算机信息》2005年第10X期11-12,153,共3页Control & Automation

基　　金：国家"863"计划资助项目(2003AA1Z1270)。

摘　　要：本文基于Diffie-Hellman密钥协定协议和Shamir门限体制设计了一种密钥安全备份和恢复机制。该机制不需要第三方可信机构的参与,安全地实现了硬件加密设备的密钥备份和恢复。在整个密钥产生、备份、恢复过程中密钥信息没有以明文形式出现在硬件以外,密钥产生、存储在安全硬件内部,任何人都无法获得密钥的明文信息,用户通过设置口令对密钥的使用权进行保护。In this paper, we design a new mechanism of secure key backup and key recovery which based on Diffie-Hellman key protocol and Shamir Threshold Schemes. It can backup and recovery the secret keys safely which stored in the secure hardware without the assistance of a mutually trusted party. In the whole process of key generation key backup and key recovery , the key information has not been exposed outside of the hardware, the key information stroed in the secure hardware. Nobody can acquire the key information. The user can set the passwords to protect the usufruct of the key.

关 键 词：密钥备份 密钥恢复 Diffie—Hellman密钥协商 Shamir门限体制 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]