公开(公告)号：US20220311751A1

公开(公告)日：2022-09-29

申请号：US17840806

申请日：2022-06-15

Applicant: Huawei Technologies Co., Ltd.

Inventor： Yong Li ,  Feng Geng ,  Li Duan ,  Pingping Yi ,  Min Li

IPC: H04L9/40 ,  H04L9/30 ,  H04L9/08

Abstract: A secure communications method includes: receiving, by a first network device, a second ephemeral public key of a second network device; determining, by the first network device, an ephemeral session key based on a first shared key, a first ephemeral secret key of the first network device, and the second ephemeral public key, where the first shared key is shared between the first network device and the second network device; and performing, by the first network device, secure communication with the second network device based on the ephemeral session key.

公开(公告)号：US12158945B2

公开(公告)日：2024-12-03

申请号：US17371712

申请日：2021-07-09

Applicant: HUAWEI TECHNOLOGIES CO., LTD.

Inventor： Ji Li ,  Leting Ren ,  Li Duan ,  Jun Xia

IPC: G06F21/45 ,  G06F21/31 ,  G06F21/60 ,  H04L9/08

Abstract: This application provides an authentication credential protection method and system. The protection method includes the following steps: generating authentication secret information based on a lock screen password and hardware secret information of a first device; randomly generating, by the first device, a symmetric key, and using the symmetric key as an encryption key for the authentication secret information; splitting the encryption key into at least two first key segments by using a multi-party data splitting algorithm, where one of the at least two first key segments is stored on the first device; and sending, by the first device, another first key segment to a trusted device. In the foregoing technical solution, the authentication secret information is generated by using the lock screen password and the hardware secret information, increasing information complexity. In addition, different trusted devices are used to store the split key segments, improving security of the encryption key.