TWI706658B

• Main Authors: LIN, XIAO-DAN, GU, SHENG-CAI, FANG, HAI-FENG, XIAO, SHU-TING
• Format: Patent
• Language: Chinese
• Published: 01.10.2020
• Subjects: ELECTRIC COMMUNICATION TECHNIQUE; ELECTRICITY; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

This specification provides a cryptographic operation method, a method for creating a working key, a cryptographic service platform, and a cryptographic service device. Among security modules connected to the cryptographic service platform, the key management function is provided by a primary security module. The primary security module is configured to generate a key. Both the primary security module and a secondary security module can provide the cryptographic operation function required by the cryptographic service platform. Each security module independently generates its own master key, a working key of a business system is generated by the primary security module, and the cryptographic service platform stores a working key ciphertext encrypted by the master key of the primary security module and a working key ciphertext encrypted separately by the master key of each secondary security module. Plaintexts of the master keys and the working key as sensitive security parameters will not exceed the boundarie