CN108400868A - Storage method, device and the mobile terminal of seed key - Google Patents

Abstract

The present invention is applicable to the technical field of information security, and provides a seed key storage method, device, mobile terminal, and computer-readable storage medium, including: dividing the seed key into at least two parts of seed key information according to preset rules; At least a part of the seed key information is saved by the user and/or a third party, and the rest, at least a part of the seed key information is saved in the mobile terminal. The invention can increase the difficulty of cracking the seed key and improve the security of the seed key.

Description

Seed key storage method, device and mobile terminal

technical field

The invention belongs to the technical field of information security, and in particular relates to a seed key storage method, device, mobile terminal and computer-readable storage medium.

Background technique

The dynamic password is an unpredictable combination of random numbers generated according to a special algorithm, and each key can only be used once. It is currently widely used in online banking, online games, e-commerce and other fields. In the prior art, the dynamic password is generated at the mobile terminal, usually the seed key required for generating the dynamic password is stored in the mobile terminal. However, storing the seed key in the mobile terminal is easy to be parsed or copied by others, thereby causing the seed key to be cracked by others, and the security is low.

Therefore, it is necessary to propose a new technical solution to solve the above technical problems.

Contents of the invention

In view of this, the present invention provides a seed key storage method, device, mobile terminal and computer-readable storage medium, so as to increase the difficulty of cracking the seed key and improve the security of the seed key.

A first aspect of the present invention provides a method for storing a seed key, including:

dividing the seed key into at least two parts of seed key information according to preset rules;

At least a part of the seed key information is stored by the user and/or a third party, and the rest, at least a part of the seed key information is stored in the mobile terminal.

A second aspect of the present invention provides a seed key storage device, including:

A seed key division module, configured to divide the seed key into at least two parts of seed key information according to preset rules;

The first information processing module is configured to store at least a part of the seed key information by the user and/or a third party, and store the rest, at least a part of the seed key information, in the mobile terminal.

A third aspect of the present invention provides a mobile terminal, including a memory, a processor, and a computer program stored in the memory and operable on the processor. When the processor executes the computer program, the following is implemented: The steps of the method described in the first aspect above.

A fourth aspect of the present invention provides a computer-readable storage medium, the computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the steps of the method described in the above-mentioned first aspect are implemented.

Compared with the prior art, the present invention has the beneficial effect that the present invention divides the seed key into at least two parts of seed key information according to preset rules, and at least part of the seed key information is distributed by the user and/or a third party Keep records, and save the rest, at least a part of the seed key information, in the mobile terminal. The solution of the present invention divides the seed key into at least two parts, at least one part is saved by the user and/or a third party, and the other part is saved by the mobile terminal, thereby realizing the separate storage of the seed key and increasing the chance of the seed key being cracked. Difficulty, improving the security of the seed key.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention, the following will briefly introduce the accompanying drawings that need to be used in the descriptions of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only of the present invention. For some embodiments, those of ordinary skill in the art can also obtain other drawings based on these drawings without paying creative efforts.

FIG. 1 is a schematic diagram of the implementation flow of the seed key storage method provided by Embodiment 1 of the present invention;

Fig. 2 is a schematic diagram of the implementation flow of the storage method of the seed key provided by the second embodiment of the present invention;

FIG. 3 is a schematic diagram of a storage device for a seed key provided in Embodiment 3 of the present invention;

FIG. 4 is a schematic diagram of a mobile terminal provided in Embodiment 4 of the present invention;

FIG. 5 is a schematic diagram of a mobile terminal provided by Embodiment 5 of the present invention.

Detailed ways

In the following description, specific details such as specific system structures and technologies are presented for the purpose of illustration rather than limitation, so as to thoroughly understand the embodiments of the present invention. It will be apparent, however, to one skilled in the art that the invention may be practiced in other embodiments without these specific details. In other instances, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the present invention with unnecessary detail.

It should be understood that when used in this specification and the appended claims, the term "comprising" indicates the presence of described features, integers, steps, operations, elements and/or components, but does not exclude one or more other features. , whole, step, operation, element, component and/or the presence or addition of a collection thereof.

It should also be understood that the terminology used in the description of the present invention is for the purpose of describing particular embodiments only and is not intended to be limiting of the present invention. As used in this specification and the appended claims, the singular forms "a", "an" and "the" are intended to include plural referents unless the context clearly dictates otherwise.

It should also be further understood that the term "and/or" used in the description of the present invention and the appended claims refers to any combination and all possible combinations of one or more of the associated listed items, and includes these combinations .

As used in this specification and the appended claims, the term "if" may be construed as "when" or "once" or "in response to determining" or "in response to detecting" depending on the context . Similarly, the phrase "if determined" or "if [the described condition or event] is detected" may be construed, depending on the context, to mean "once determined" or "in response to the determination" or "once detected [the described condition or event] ]” or “in response to detection of [described condition or event]”.

In a specific implementation, the mobile terminals described in the embodiments of the present invention include but are not limited to other portable devices such as mobile phones, laptop computers or tablet computers with touch-sensitive surfaces (for example, touch screen displays and/or touch pads) . It should also be appreciated that in some embodiments, the device is not a portable communication device, but a desktop computer with a touch-sensitive surface (eg, a touchscreen display and/or a touchpad).

In the ensuing discussion, a mobile terminal including a display and a touch-sensitive surface is described. However, it should be understood that a mobile terminal may include one or more other physical user interface devices such as a physical keyboard, mouse and/or joystick.

The mobile terminal supports various applications such as one or more of the following: drawing application, presentation application, word processing application, website creation application, disk burning application, spreadsheet application, game application, telephone applications, video conferencing applications, email applications, instant messaging applications, exercise support applications, photo management applications, digital camera applications, digital video camera applications, web browsing applications, digital music player applications and/or digital video player applications.

Various applications that can be executed on the mobile terminal can use at least one common physical user interface device, such as a touch-sensitive surface. One or more functions of the touch-sensitive surface and corresponding information displayed on the terminal may be adjusted and/or changed between applications and/or within the respective applications. In this way, the common physical architecture (eg, touch-sensitive surface) of the terminal can support various applications with a user interface that is intuitive and transparent to the user.

It should be understood that the sequence numbers of the steps in this embodiment do not mean the order of execution, and the execution order of each process should be determined by its functions and internal logic, and should not constitute any limitation to the implementation process of the embodiment of the present invention.

In order to illustrate the technical solutions of the present invention, specific examples are used below to illustrate.

Referring to FIG. 1 , it is a schematic diagram of the implementation flow of the seed key storage method provided by Embodiment 1 of the present invention. The seed key storage method is applied to a mobile terminal. As shown in the figure, the seed key storage method may include the following steps :

Step S101, divide the seed key into at least two parts of seed key information according to preset rules.

In the embodiment of the present invention, the preset rule may be a first preset rule or a second preset rule, and the seed key is divided into at least two parts of seed key information according to the preset rule.

The seed key can be issued to the mobile terminal by the server as a whole, or the server can issue several calculation factors for calculating the seed key to the mobile terminal, and then the mobile terminal can calculate the seed key.

If the seed key is delivered to the mobile terminal by the server as a whole, the preset rule is the first preset rule, and the mobile terminal divides the seed key into at least two parts of seed key information according to the first preset rule.

If the server sends several calculation factors for calculating the seed key to the mobile terminal, the preset rule is the second preset rule at this time, and the mobile terminal divides the several calculation factors for calculating the seed key into at least The two parts of seed key information are not limited here. The calculation factor may refer to parameters required when calculating the seed key. For example, the seed key is calculated from information such as user password, user name, and card number. At this time, the user password, user name, and card number can all be calculation factors of the seed key. Therefore, the seed key can be divided into at least two parts of seed key information by dividing the calculation factor for calculating the seed key.

Wherein, the preset rule may refer to a rule of how to divide (that is, split) the seed key set in advance by the user. The first preset rule may refer to a rule set by the user on how to divide the seed key issued by the server as a whole to the mobile terminal. The user may set the rule by himself according to the needs, which is not limited here. For example, the seed key is 128K bytes of data, the first 32K bytes of data can be used as a part of the information of the seed key, and the remaining 96K bytes of data can be used as another part of the information of the seed key, which is not limited here. Optionally, the seed key may be plain text or cipher text, which is not limited here. The second preset rule may refer to a rule set in advance by the user on how to divide several calculation factors for calculating the seed key sent by the server to the mobile terminal. The user can set the rule by himself according to needs, which is not limited here.

Step S102, saving at least a part of the seed key information by the user and/or a third party, and saving the rest, at least a part of the seed key information, in the mobile terminal.

In the embodiment of the present invention, the seed key can be divided into at least two parts, at least one part is recorded by the user and/or a third party, and the remaining part is stored in the mobile terminal, even if someone else cracks the seed key stored in the mobile terminal Password information, and the complete seed key cannot be obtained, because at least part of the seed key information of the seed key is stored by the user and/or a third party, and others cannot know the seed key information stored by the user and/or a third party . For example, the seed key can be divided into two parts, one part is saved by the user, and the other part is saved by the mobile terminal; Save, when the OTP of the mobile terminal is enabled, the server will send a part of the stored seed key to the user, and the user will submit a part of the seed key sent by the server and a part of the seed key saved by the user to the mobile terminal to communicate with the mobile terminal. A part of the seed key of the terminal is restored together to obtain the seed key.

Optionally, after at least a part of the seed key information is fed back to the user (for example, displayed to the user), if a confirmation instruction for at least a part of the seed key information is received (for example, after the user memorizes the at least part of the seed key information, Click on the area where the at least a part of the seed key information is located) or after a preset time (for example, 1 minute), the at least a part of the seed key information is no longer displayed.

Or after at least a part of the seed key information is sent to a third party, after the third party receives and saves the at least part of the key information, it will feed back a response instruction to the mobile terminal, and the mobile terminal will no longer display the at least part of the seed key information after receiving the response instruction. Part of the seed key information, wherein the response instruction is used to indicate that the third party has received and saved the seed key information sent by the mobile terminal. The third party may refer to equipment other than the user and the mobile terminal, such as a server preset by the user.

Optionally, the storing at least a part of the seed key information by the user and/or a third party includes:

A part of the seed key information is displayed to the user for storage, or a part of the seed key information is sent to a third party for storage, or a part of the seed key information is displayed for the user to save, and a part of the seed key information is sent to a third party for storage.

Optionally, the seed key information stored in the mobile terminal may be encrypted and then stored in the mobile terminal.

Optionally, the embodiment of the present invention also includes:

dividing the encryption factor of the encrypted seed key information into at least two parts of encryption factor information according to a third preset rule;

At least a part of the encryption factor information is stored by the user and/or a third party, and the rest, at least a part of the encryption factor information is stored or encrypted and stored in the mobile terminal.

Optionally, the storing at least part of the encryption factor information by the user and/or a third party includes:

A part of the encryption factor information is displayed to the user for storage, or a part of the encryption factor information is sent to a third party for storage, or a part of the encryption factor information is displayed for the user to save, and a part of the encryption factor information is sent to a third party for storage.

Wherein, the third preset rule may refer to a rule of how to divide the encryption factors set in advance by the user, and the user may set the rule by himself according to needs, which is not limited here.

In the embodiment of the present invention, the seed key is divided into at least two parts, one part is stored by the user and/or a third party, and the other part is stored by the mobile terminal, thereby realizing the separate storage of the seed key and increasing the chance of the seed key being cracked. Difficulty, improving the security of the seed key. Furthermore, the encryption factor is divided into at least two parts, which are stored by the user or a third party, and stored by the mobile terminal, which enhances the security of the storage of the seed key.

Referring to FIG. 2 , it is a schematic diagram of the implementation flow of the storage method of the seed key provided by Embodiment 2 of the present invention. The storage method of the seed key is applied to the OTP of the mobile terminal. As shown in the figure, the storage method of the seed key may include The following steps:

Step S201, in the OTP activation phase, the seed key is issued to the mobile terminal as a whole by the server, and the overall seed key is divided into at least two parts of seed key information according to the first preset rule; or in the OTP activation phase, the seed key The several calculation factors of the seed key are sent to the mobile terminal by the server, and the several calculation factors of the seed key are divided into at least two parts of seed key information according to a second preset rule.

The OTP in the embodiment of the present invention refers to the soft OTP applied to the mobile terminal, which calculates the dynamic password through the dynamic password calculation method through the software according to the seed key and the current time. Among them, the dynamic password is based on a special algorithm to generate a time-related, unpredictable random number combination at regular intervals.

Wherein, the first preset rule may refer to a rule set in advance by the user on how to divide the seed key issued by the server as a whole to the mobile terminal. The key is 128K bytes of data, the first 32K bytes of data can be used as the first part of the seed key information, and the remaining 96K bytes of data can be used as the second part of the seed key information, which is not limited here. Optionally, the seed key may be plain text or cipher text, which is not limited here.

Wherein, the calculation factor may refer to parameters required when calculating the seed key. For example, the seed key is calculated from information such as user password, user name, and card number. At this time, the user password, user name, and card number can all be calculation factors of the seed key. Therefore, the seed key can be divided into at least two parts of seed key information by dividing the calculation factor for calculating the seed key.

The second preset rule may refer to a rule of how to divide several calculation factors set in advance by the user, and the user may set the rule by himself according to needs, which is not limited here.

Step S202, saving at least a part of the seed key information by the user and/or a third party, and saving the rest, at least a part of the seed key information, in the mobile terminal.

In the embodiment of the present invention, the seed key can be divided into at least two parts, at least one part is recorded by the user and/or a third party, and the remaining part is stored in the mobile terminal, even if someone else cracks the seed key stored in the mobile terminal Password information, and the complete seed key cannot be obtained, because at least part of the seed key information of the seed key is stored by the user and/or a third party, and others cannot know the seed key information stored by the user and/or a third party . For example, the seed key can be divided into two parts, one part is saved by the user, and the other part is saved by the mobile terminal; Save, when the OTP of the mobile terminal is enabled, the server will send a part of the stored seed key to the user, and the user will submit a part of the seed key sent by the server and a part of the seed key saved by the user to the mobile terminal to communicate with the mobile terminal. A part of the seed key of the terminal is restored together to obtain the seed key.

Optionally, after at least a part of the seed key information is fed back to the user (for example, displayed to the user), if a confirmation instruction for at least a part of the seed key information is received (for example, after the user memorizes the at least part of the seed key information, Click on the area where the at least a part of the seed key information is located) or after a preset time (for example, 1 minute), the at least a part of the seed key information is no longer displayed.

Or after at least a part of the seed key information is sent to a third party, after the third party receives and saves the at least part of the key information, it will feed back a response instruction to the mobile terminal, and the mobile terminal will no longer display the at least part of the seed key information after receiving the response instruction. Part of the seed key information, wherein the response instruction is used to indicate that the third party has received and saved the seed key information sent by the mobile terminal. The third party may refer to equipment other than the user and the mobile terminal, such as a server preset by the user.

Optionally, the storing at least a part of the seed key information by the user and/or a third party includes:

A part of the seed key information is displayed to the user for storage, or a part of the seed key information is sent to a third party for storage, or a part of the seed key information is displayed for the user to save, and a part of the seed key information is sent to a third party for storage.

Optionally, the seed key information stored in the mobile terminal may be encrypted and then stored in the mobile terminal.

Optionally, the embodiment of the present invention also includes:

dividing the encryption factor of the encrypted seed key information into at least two parts of encryption factor information according to a third preset rule;

At least a part of the encryption factor information is stored by the user and/or a third party, and the rest, at least a part of the encryption factor information is stored or encrypted and stored in the mobile terminal.

Optionally, the storing at least part of the encryption factor information by the user and/or a third party includes:

A part of the encryption factor information is displayed to the user for storage, or a part of the encryption factor information is sent to a third party for storage, or a part of the encryption factor information is displayed for the user to save, and a part of the encryption factor information is sent to a third party for storage.

Wherein, the third preset rule may refer to a rule of how to divide the encryption factors set in advance by the user, and the user may set the rule by himself according to needs, which is not limited here.

Step S203, when starting the OTP, obtain the seed key information input by the user that is saved by the user and/or that the user obtains from a third party, and obtain the seed key information saved by the mobile terminal.

In the embodiment of the present invention, when starting OTP, the user can input the seed key information saved by the user or obtained by the user from a third party through the mobile terminal (such as inputting the seed key information on the touch screen of the mobile terminal) or saved by the user. and the seed key information obtained by the user from a third party, so as to obtain the seed key information input by the user, and obtain the seed key information stored by the mobile terminal itself.

Step S204, restore the plaintext of the seed key according to all the acquired seed key information.

In the embodiment of the present invention, since the seed key information input by the user and the seed key information stored by the mobile terminal itself are obtained by dividing the seed key, the seed key information input by the user and the seed key information stored by the mobile terminal itself Combining key information can obtain a complete seed key. If part of the seed key information stored in the mobile terminal is encrypted, first decrypt it and then restore it with the seed key information input by the user to obtain the plaintext of the seed key.

Step S205, calculating the dynamic password according to the plain text of the seed key and the dynamic password algorithm.

In the embodiment of the present invention, the seed key is divided into at least two parts, at least one part is stored by the user and/or a third party, and the other part is stored by the mobile terminal, so as to realize the separate storage of the seed key and increase the chance of the seed key being cracked. The difficulty improves the security of the seed key, and the calculated dynamic password is more secure and reliable.

Referring to FIG. 3 , it is a schematic diagram of a storage device for a seed key provided by Embodiment 3 of the present invention. For convenience of description, only parts related to the embodiment of the present invention are shown.

The devices include:

A seed key division module 31, configured to divide the seed key into at least two parts of seed key information according to preset rules;

The first information processing module 32 is configured to save at least a part of the first part of the seed key information by the user and/or a third party, and save the rest, at least a part of the seed key information, in the mobile terminal.

Optionally, the seed key division module 31 is specifically used for:

The preset rule is a first preset rule. In the OTP activation stage, the seed key is issued to the mobile terminal as a whole by the server, and the whole seed key is divided into at least two parts according to the first preset rule. seed key information; or

The preset rule is a second preset rule. In the OTP activation stage, several calculation factors of the seed key are sent to the mobile terminal by the server, and the seed key is calculated according to the second preset rule. Several calculation factors are divided into at least two parts of seed key information.

Optionally, the device also includes:

The information acquisition module 33 is used to obtain the seed key information that is saved by the user and/or the user obtains from a third party input by the user when starting the OTP, and obtains the seed key information saved by the mobile terminal;

Seed key recovery module 34, used for recovering the seed key plaintext according to all the seed key information obtained;

The dynamic password calculation module 35 is configured to calculate the dynamic password according to the plain text of the seed key and the dynamic password algorithm.

Optionally, the seed key information stored in the mobile terminal is encrypted and then stored in the mobile terminal.

Optionally, the device also includes:

An encryption factor division module, configured to divide the encryption factor of the encrypted seed key information into at least two parts of the encryption factor information according to a third preset rule;

The second information processing module is configured to store at least a part of the encryption factor information by the user and/or a third party, and store or encrypt the rest, at least a part of the encryption factor information, in the mobile terminal.

Wherein, the encryption factor dividing module and the second information processing module are not shown in FIG. 3 .

The device provided by the embodiment of the present invention can be applied in the foregoing method embodiment 1 and embodiment 2. For details, refer to the description of the foregoing method embodiment 1 and embodiment 2, which will not be repeated here.

FIG. 4 is a schematic diagram of a mobile terminal provided by Embodiment 4 of the present invention. The mobile terminal as shown in the figure may include: one or more processors 401 (only one is shown in the figure); one or more input devices 402 (only one is shown in the figure), one or more output devices 403 (only one is shown in the figure) and memory 404 . The aforementioned processor 401 , input device 402 , output device 403 and memory 404 are connected through a bus 405 . The memory 404 is used to store instructions, and the processor 401 is used to execute the instructions stored in the memory 404 . in:

The processor 401 is configured to divide the seed key into at least two parts of seed key information according to preset rules; store at least a part of the seed key information by the user and/or a third party, and store the rest, at least a part of the seed key information The key information is stored in the mobile terminal.

Optionally, the processor 401 is specifically configured to:

The preset rule is a first preset rule. In the OTP activation stage, the seed key is issued to the mobile terminal as a whole by the server, and the whole seed key is divided into at least two parts according to the first preset rule. seed key information; or

The preset rule is a second preset rule. In the OTP activation stage, several calculation factors of the seed key are sent to the mobile terminal by the server, and the seed key is calculated according to the second preset rule. Several calculation factors are divided into at least two parts of seed key information.

Optionally, the processor 401 is further configured to:

When starting the OTP, obtain the seed key information that is saved by the user and/or the user obtains from a third party input by the user, and obtain the seed key information saved by the mobile terminal;

Recover the plaintext of the seed key according to all the obtained seed key information;

Calculate the dynamic password according to the plain text of the seed key and the dynamic password algorithm.

Optionally, the seed key information stored in the mobile terminal is encrypted and then stored in the mobile terminal.

Optionally, the processor 401 is further configured to:

dividing the encryption factor of the encrypted seed key information into at least two parts of encryption factor information according to a third preset rule;

At least a part of the encryption factor information is stored by the user and/or a third party, and the rest, at least a part of the encryption factor information is stored or encrypted and stored in the mobile terminal.

It should be understood that, in the embodiment of the present invention, the processor 401 may be a central processing unit (Central Processing Unit, CPU), and the processor may also be other general-purpose processors, digital signal processors (Digital Signal Processor, DSP), dedicated Integrated Circuit (Application Specific Integrated Circuit, ASIC), off-the-shelf programmable gate array (Field-Programmable Gate Array, FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

The input device 402 may include a touch panel, a fingerprint sensor (for collecting user's fingerprint information and fingerprint direction information), a microphone, a data receiving interface, and the like. The output device 403 may include a display (LCD, etc.), a speaker, a data sending interface, and the like.

The memory 404 may include read-only memory and random-access memory, and provides instructions and data to the processor 401 . A portion of memory 404 may also include non-volatile random access memory. For example, memory 404 may also store device type information.

In a specific implementation, the processor 401, input device 402, output device 403, and memory 404 described in the embodiment of the present invention can execute the implementation described in the embodiment of the seed key storage method provided in the embodiment of the present invention, The implementation manner described in the storage device for the seed key described in Embodiment 3 may also be implemented, and details are not repeated here.

FIG. 5 is a schematic diagram of a mobile terminal provided by Embodiment 5 of the present invention. As shown in FIG. 5 , the mobile terminal 5 of this embodiment includes: a processor 50 , a memory 51 , and a computer program 52 stored in the memory 51 and operable on the processor 50 . When the processor 50 executes the computer program 52, it implements the steps in the above embodiments of the method for storing various seed keys, such as steps S101 to S102 shown in FIG. 1 . Alternatively, when the processor 50 executes the computer program 52, the functions of the modules/units in the above-mentioned device embodiments are implemented.

Exemplarily, the computer program 52 can be divided into one or more modules/units, and the one or more modules/units are stored in the memory 51 and executed by the processor 50 to complete this invention. The one or more modules/units may be a series of computer program instruction segments capable of accomplishing specific functions, and the instruction segments are used to describe the execution process of the computer program 52 in the mobile terminal 5 . For example, the computer program 52 can be divided into a seed key division module, a first information processing module, an information acquisition module, a seed key recovery module, a dynamic password calculation module, an encryption factor division module and a second information processing module, each The specific functions of the module are as follows:

A seed key division module, configured to divide the seed key into at least two parts of seed key information according to preset rules;

The first information processing module is configured to store at least a part of the seed key information by the user and/or a third party, and store the rest, at least a part of the seed key information, in the mobile terminal.

Optionally, the seed key division module is specifically used for:

The preset rule is a first preset rule. In the OTP activation stage, the seed key is issued to the mobile terminal as a whole by the server, and the whole seed key is divided into at least two parts according to the first preset rule. seed key information; or

The preset rule is a second preset rule. In the OTP activation stage, several calculation factors of the seed key are sent to the mobile terminal by the server, and the seed key is calculated according to the second preset rule. Several calculation factors are divided into at least two parts of seed key information.

Optionally, the information acquisition module is used to acquire the seed key information input by the user and saved by the user and/or obtained by the user from a third party when starting the OTP, and obtain the seed key information saved by the mobile terminal;

The seed key recovery module is used to restore the plaintext of the seed key according to all the obtained seed key information;

The dynamic password calculation module is used to calculate the dynamic password according to the plain text of the seed key and the dynamic password algorithm.

Optionally, an encryption factor division module, configured to divide the encryption factor of the encrypted seed key information into at least two parts of the encryption factor information according to a third preset rule;

The second information processing module is configured to store at least a part of the encryption factor information by the user and/or a third party, and store or encrypt the rest, at least a part of the encryption factor information, in the mobile terminal.

The mobile terminal 5 may be a computing device such as a desktop computer, a notebook, a palmtop computer, or a cloud server. The mobile terminal may include, but not limited to, a processor 50 and a memory 51 . Those skilled in the art can understand that FIG. 5 is only an example of the mobile terminal 5, and does not constitute a limitation to the mobile terminal 5. It may include more or less components than those shown in the figure, or combine certain components, or different components. , for example, the mobile terminal may further include an input and output device, a network access device, a bus, and the like.

The so-called processor 50 can be a central processing unit CPU, and can also be other general-purpose processors, digital signal processors DSP, application-specific integrated circuits ASIC, off-the-shelf programmable gate array FPGA or other programmable logic devices, discrete gates or transistor logic devices , discrete hardware components, etc. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like.

The memory 51 may be an internal storage unit of the mobile terminal 5 , such as a hard disk or memory of the mobile terminal 5 . The memory 51 can also be an external storage device of the mobile terminal 5, such as a plug-in hard disk equipped on the mobile terminal 5, a smart memory card (Smart Media Card, SMC), a secure digital (Secure Digital, SD) card, flash memory card (Flash Card), etc. Further, the memory 51 may also include both an internal storage unit of the mobile terminal 5 and an external storage device. The memory 51 is used to store the computer program and other programs and data required by the mobile terminal. The memory 51 can also be used to temporarily store data that has been output or will be output.

Those skilled in the art can clearly understand that for the convenience and brevity of description, only the division of the above-mentioned functional units and modules is used for illustration. In practical applications, the above-mentioned functions can be assigned to different functional units, Completion of modules means that the internal structure of the device is divided into different functional units or modules to complete all or part of the functions described above. Each functional unit and module in the embodiment may be integrated into one processing unit, or each unit may exist separately physically, or two or more units may be integrated into one unit, and the above-mentioned integrated units may adopt hardware It can also be implemented in the form of software functional units. In addition, the specific names of the functional units and modules are only for the convenience of distinguishing each other, and are not used to limit the protection scope of the present application. For the specific working process of the units and modules in the above system, reference may be made to the corresponding process in the foregoing method embodiments, and details will not be repeated here.

In the above-mentioned embodiments, the descriptions of each embodiment have their own emphases, and for parts that are not detailed or recorded in a certain embodiment, refer to the relevant descriptions of other embodiments.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present invention.

In the embodiments provided in the present invention, it should be understood that the disclosed device/mobile terminal and method may be implemented in other ways. For example, the device/mobile terminal embodiments described above are only illustrative. For example, the division of the modules or units is only a logical function division. In actual implementation, there may be other division methods, such as multiple units Or components may be combined or may be integrated into another system, or some features may be omitted, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated module/unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the present invention realizes all or part of the processes in the methods of the above embodiments, and can also be completed by instructing related hardware through a computer program. The computer program can be stored in a computer-readable storage medium, and the computer When the program is executed by the processor, the steps in the above-mentioned various method embodiments can be realized. Wherein, the computer program includes computer program code, and the computer program code may be in the form of source code, object code, executable file or some intermediate form. The computer-readable medium may include: any entity or device capable of carrying the computer program code, a recording medium, a U disk, a removable hard disk, a magnetic disk, an optical disk, a computer memory, and a read-only memory (ROM, Read-Only Memory) , Random Access Memory (RAM, Random Access Memory), electrical carrier signal, telecommunication signal, and software distribution medium, etc. It should be noted that the content contained in the computer-readable medium may be appropriately increased or decreased according to the requirements of legislation and patent practice in the jurisdiction. For example, in some jurisdictions, computer-readable media Excludes electrical carrier signals and telecommunication signals.

The above-described embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that: it can still carry out the foregoing embodiments Modifications to the technical solutions recorded in the examples, or equivalent replacement of some of the technical features; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention, and should be included in within the protection scope of the present invention.

Claims (10)

1. A storage method for a seed key, comprising: dividing the seed key into at least two parts of seed key information according to preset rules; At least a part of the seed key information is stored by the user and/or a third party, and the rest, at least a part of the seed key information is stored in the mobile terminal. 2. The storage method of the seed key as claimed in claim 1, wherein the seed key is divided into at least two parts according to preset rules and the seed key information comprises: The preset rule is a first preset rule. In the OTP activation stage, the seed key is issued to the mobile terminal as a whole by the server, and the whole seed key is divided into at least two parts according to the first preset rule. seed key information; or The preset rule is a second preset rule. In the OTP activation stage, several calculation factors of the seed key are sent to the mobile terminal by the server, and the seed key is calculated according to the second preset rule. Several calculation factors are divided into at least two parts of seed key information. 3. The storage method of the seed key as claimed in claim 1, further comprising: When starting the OTP, obtain the seed key information that is saved by the user and/or the user obtains from a third party input by the user, and obtain the seed key information saved by the mobile terminal; Recover the plaintext of the seed key according to all the obtained seed key information; Calculate the dynamic password according to the plain text of the seed key and the dynamic password algorithm. 4. The method for storing the seed key according to claim 1, wherein the seed key information stored in the mobile terminal is encrypted and then stored in the mobile terminal. 5. The storage method of the seed key as claimed in claim 4, further comprising: dividing the encryption factor of the encrypted seed key information into at least two parts of encryption factor information according to a third preset rule; At least a part of the encryption factor information is stored by the user and/or a third party, and the rest, at least a part of the encryption factor information is stored or encrypted and stored in the mobile terminal. 6. A storage device for a seed key, comprising: A seed key division module, configured to divide the seed key into at least two parts of seed key information according to preset rules; The first information processing module is configured to store at least a part of the seed key information by the user and/or a third party, and store the rest, at least a part of the seed key information, in the mobile terminal. 7. The storage device of the seed key as claimed in claim 6, wherein the seed key division module is specifically used for: The preset rule is a first preset rule. In the OTP activation stage, the seed key is issued to the mobile terminal as a whole by the server, and the whole seed key is divided into at least two parts according to the first preset rule. seed key information; or The preset rule is a second preset rule. In the OTP activation stage, several calculation factors of the seed key are sent to the mobile terminal by the server, and the seed key is calculated according to the second preset rule. Several calculation factors are divided into at least two parts of seed key information; The device also includes: The information acquisition module is used to obtain the seed key information that is saved by the user and/or obtained by the user from a third party input by the user when starting the OTP, and obtains the seed key information saved by the mobile terminal; The seed key recovery module is used to restore the plaintext of the seed key according to all the obtained seed key information; The dynamic password calculation module is used to calculate the dynamic password according to the plain text of the seed key and the dynamic password algorithm. 8. The storage device of the seed key according to claim 6, wherein the seed key information stored in the mobile terminal is encrypted and then stored in the mobile terminal; The device also includes: An encryption factor division module, configured to divide the encryption factor of the encrypted seed key information into at least two parts of the encryption factor information according to a third preset rule; The second information processing module is configured to store at least a part of the encryption factor information by the user and/or a third party, and store or encrypt the rest, at least a part of the encryption factor information, in the mobile terminal. 9. A mobile terminal, comprising a memory, a processor, and a computer program stored in the memory and operable on the processor, characterized in that, when the processor executes the computer program, the computer program according to claim The step of any one of 1 to 5. 10. A computer-readable storage medium, the computer-readable storage medium storing a computer program, characterized in that, when the computer program is executed by a processor, the steps of the method according to any one of claims 1 to 5 are implemented .