US 10,951,595 B2Granted

Method, system and apparatus for storing website private key plaintext

AssigneeBeijing Baidu Netcom Science Technology Co., Ltd.

InventorsWei Qi, Jian Ouyang, Yong Wang, Yichen Tu, Sijie Yang

Life of this patent

Estimating the term…

Loading patent…

Abstract

The present application discloses a method, system and apparatus for storing a website private key plaintext. A specific implementation of the method includes: receiving a public key sent from a terminal configured to perform encryption and decryption, wherein the public key is generated at random by the terminal; encrypting a website private key plaintext by using the public key to generate a website private key ciphertext, wherein the website private key plaintext is pre-acquired; and sending the website private key ciphertext to the terminal, so that the terminal decrypts the website private key ciphertext by using the private key to generate the website private key plaintext and store the website private key plaintext in the terminal. This implementation improves the security of storage of the website private key plaintext.

Claims17

Dependent claims

A method for storing a website private key plaintext, applied on a server, comprising:

receiving a first public key sent from a first terminal, the first terminal being configured to perform encryption and decryption, a first key pair being randomly generated by the first terminal, the key pair comprising the first public key and a first private key;
encrypting the website private key plaintext of a website by using the first public key to generate a website private key ciphertext, wherein the website private key plaintext is pre-acquired;
sending the website private key ciphertext to the first terminal, wherein the first terminal decrypts said website private key ciphertext by using the first private key to generate the website private key plaintext and stores the website private key plaintext in the first terminal, wherein the sending the website private key ciphertext to the first terminal comprises:
in response to a received instruction to delete the website private key plaintext, sending to the first terminal a website private key identifier corresponding to the website private key ciphertext obtained through encryption of the website private key plaintext to be deleted, wherein the first terminal searches for the website private key plaintext corresponding to the website private key identifier;
and deletes the stored website private key plaintext and a corresponding relationship between the website private key plaintext and the website private key identifier;
receiving a website ciphertext and the website private key identifier sent from a second terminal, wherein the second terminal is a user terminal, and said website private key identifier is obtained by performing calculation on the website private key ciphertext by using Message-Digest Algorithm 5;
sending said website ciphertext and said website private key identifier sent from the second terminal to the first terminal, wherein the first terminal finds the stored website private key plaintext corresponding to the website private key identifier and generates a website plaintext by decrypting the website ciphertext with the found website private key plaintext, the corresponding relationship between the website private key plaintext and the website private key identifier being prestored in the first terminal;
and
receiving said website plaintext sent from the first terminal.

6 more elements

A method for storing a website private key plaintext, applied to a terminal configured to perform encryption and decryption, comprising:

generating a first key pair randomly, wherein the first key pair comprises a first public key and a first private key;
sending the first public key to a server;
receiving a website private key ciphertext sent from the server, wherein the website private key ciphertext is generated by the server by encrypting the website private key plaintext with the first public key, and the website private key plaintext is pre-acquired, wherein the receiving the website private key ciphertext sent from the server comprises:
receiving, from the server, a website private key identifier corresponding to the website private key ciphertext obtained through encryption of the website private key plaintext to be deleted, wherein the website private key identifier is sent from the server after the server receives an instruction for deleting the website private key plaintext;
searching for the website private key plaintext corresponding to the website private key identifier;
and deleting the website private key plaintext and a corresponding relationship between the website private key plaintext and the website private key identifier;
decrypting the website private key ciphertext by using the first private key, to generate the website private key plaintext;
storing the website private key plaintext;
receiving a website ciphertext and the website private key identifier sent from the server, wherein the website ciphertext and the website private key identifier are received by the server and sent from a user terminal;
searching for the website private key plaintext corresponding to the website private key identifier, the corresponding relationship between the website private key plaintext and the website private key identifier being stored in the terminal configured to perform encryption and decryption;
decrypting the website ciphertext by using the website private key plaintext, to generate a website plaintext;
and
sending the website plaintext to the server.

10 more elements

A system for storing a website private key plaintext, comprising:

a server, configured to receive a first public key sent from a first terminal, the first terminal being configured to perform encryption and decryption, a first key pair being randomly generated by the first terminal, the first key pair comprising the first public key and a first private key, encrypt a website private key plaintext of a website by using the first public key to generate a website private key ciphertext, and send the website private key ciphertext to the first terminal, wherein the website private key plaintext is pre-acquired;
the first terminal, configured to generate the first key pair randomly, send the first public key to the server, receive the website private key ciphertext sent from the server, decrypt the website private key ciphertext by using the first private key to generate the website private key plaintext, and store the website private key plaintext, wherein the first key pair comprises the first public key and the first private key;
the server is further configured to receive a website ciphertext and a website private key identifier sent from a user terminal, a corresponding relationship between the website private key identifier and the website private key plaintext being stored in the first terminal, send the website ciphertext and the website private key identifier to the first terminal, and then receive a website plaintext sent from the first terminal;
the first terminal is further configured to receive the website ciphertext and the website private key identifier sent from the server, search for the website private key plaintext corresponding to the website private key identifier, decrypt the website ciphertext by using the website private key plaintext to generate the website plaintext, and then send the website plaintext to the server;
the server is further configured to send to the first terminal the website private key identifier corresponding to the website private key ciphertext obtained through encryption of the website private key plaintext to be deleted in response to a received instruction to delete the website private key plaintext;
and
the first terminal is further configured to receive, from the server, the website private key identifier corresponding to the website private key ciphertext obtained through encryption of the website private key plaintext to be deleted, search for the website private key plaintext corresponding to the website private key identifier, and delete the website private key plaintext and correspondence relationship between the website private key plaintext and the website private key identifier.

4 more elements

An apparatus for storing a website private key plaintext, comprising:

at least one processor;
and
a memory storing non-transitory computer readable instructions, which when executed by the at least one processor, cause the at least one processor to perform operations, the operations comprising:
receiving a first public key sent from a first terminal, the first terminal being configured to perform encryption and decryption, a first key pair being randomly generated by the first terminal, the first key pair comprising the first public key and a first private key;
encrypting the website private key plaintext of a website by using the first public key to generate a website private key ciphertext, wherein the website private key plaintext is pre-acquired;
and
sending the website private key ciphertext to the first terminal, wherein the first terminal decrypts the website private key ciphertext by using the first private key to generate the website private key plaintext and store the website private key plaintext in the first terminal, wherein the sending the website private key ciphertext to the first terminal comprises:
in response to a received instruction to delete the website private key plaintext, sending to the first terminal a website private key identifier corresponding to the website private key ciphertext obtained through encryption of the website private key plaintext to be deleted, wherein the first terminal searches for the website private key plaintext corresponding to the website private key identifier;
and deletes the website private key plaintext and a corresponding relationship between the website private key plaintext and the website private key identifier;
receiving a website ciphertext and the website private key identifier sent from a second terminal, wherein the second terminal is a user terminal, and said website private key identifier is obtained by performing calculation on the website private key ciphertext by using Message-Digest Algorithm 5;
sending the website ciphertext and the website private key identifier sent from the second terminal to the first terminal configured to perform encryption and decryption, wherein the first terminal finds the stored website private key plaintext corresponding to the website private key identifier and generates a website plaintext by decrypting the website ciphertext with the found website private key plaintext, the corresponding relationship between the website private key plaintext and the website private key identifier being prestored in the first terminal;
and
receiving the website plaintext sent from the first terminal.

10 more elements

An apparatus for storing a website private key plaintext, comprising:

at least one processor;
and
a memory storing non-transitory computer readable instructions, which when executed by the at least one processor, cause the at least one processor to perform operations, the operations comprising:
generating a first key pair randomly, wherein the first key pair comprises a first public key and a first private key;
sending the first public key to a server;
receiving a website private key ciphertext sent from the server, wherein the website private key ciphertext is generated by the server by encrypting the website private key plaintext with the first public key, and the website private key plaintext is pre-acquired, wherein the receiving the website private key ciphertext sent from the server comprises:
receiving, from the server, a website private key identifier corresponding to the website private key ciphertext obtained through encryption of the website private key plaintext to be deleted, wherein the website private key identifier is sent from the server after the server receives an instruction for deleting the website private key plaintext;
searching for the website private key plaintext corresponding to the website private key identifier;
and deleting the website private key plaintext and a corresponding relationship between the website private key plaintext and the website private key identifier;
decrypting the website private key ciphertext by using the first private key, to generate the website private key plaintext;
storing the website private key plaintext;
receiving a website ciphertext and a website private key identifier sent from the server, wherein the website ciphertext and the website private key identifier are received by the server and sent from a user terminal;
searching for the website private key plaintext corresponding to the website private key identifier, the corresponding relationship between the website private key plaintext and the website private key identifier being stored in the terminal configured to perform encryption and decryption;
decrypting the website ciphertext by using the website private key plaintext, to generate a website plaintext;
and
sending the website plaintext to the server.

13 more elements

Dependencies are inferred from the claim text.

Facts

Application: 15/618,655Filed 9 Jun 2017
Priority: CN 201610976635.431 Oct 2016
Published: US 2018/0124023 A13 May 2018
Granted: 16 Mar 2021
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

H04L 63/0435
Wherein the data content is protected, e.g. by encrypting or encapsulating the payload: wherein the sending and receiving network entities apply…
H04L 9/006
Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols: involving public key…
H04L 9/0618
The encryption apparatus using shift registers or memories for block-wise or stream coding, e.g. DES systems or RC4; Hash functions;…
H04L 9/3271
Including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity…: using…