Security identification system of wireless application service and login and entry method thereof

Abstract

The invention discloses a safety certification system for wireless application service and the registration and login method. The system comprises a plurality of mobile communication terminals, a business server, a CA certificate server, and a certificate storage server, wherein the mobile communication terminals, the business server and the CA certificate server are orderly connected with each other though the wireless network or wired network, and the certificate server is connected with the business server; the registration method is as follow: a couple of public key and private key are generated by the mobile communication terminal; the registration request is sent to the business server; the registration result is sent back to the business server; the user digital certificate is generated by the OA certificate server, and stored in the certificate storage server; the login method is as follow: the login request is sent to the business server by the mobile communication terminal, and checked by the business server; the checked result is sent back. The invention is characterized in that the public key and the private key are generated by the mobile communication terminal, and protected by the local safety code which is never transmitted in the network. The invention has the advantages of great risk reduction of the public key and the private key acquired, and improved use security of application service in wireless network.

Description

technical field [0001] The invention relates to the technical field of information security authentication, in particular to a mobile communication terminal security certificate authentication system and a registration and login method thereof. Background technique [0002] The Chinese patent "A Method for Conducting Transactions in the Field of Wireless Electronic Commerce" was published on April 17, 2002, and the publication number is CN1345514. The main technical features of this patent are: [0003] 1. The system needs to include a wireless network operator certification authority with a root public key certificate and at least one attribute authority with a digital certificate independent of the root public key certificate. The attribute authority can be authenticated by a wireless client device through a wireless network access; [0004] 2. This method requires digital certificates to be transferred from the attribute authority to wireless devices; wireless client dev...

AI Technical Summary

Problems solved by technology

[0007] 1. The existing security certificate schemes in the wireless network field are mainly aimed at the e-commerce field, but not all wireless application fields

[0008]2. Existing schemes require a wireless network operator certification authority with a root public key certificate and at least one digital certificate with a separate root public key certificate The attribute agency

In practice, for general wireless application services, the cost of obtaining service support from a wireless network operator certification authority with a root public key certificate is relatively high; and the security level is high, which is not conducive to general security services. Promotion

[0009]3. The existing scheme needs to transmit the digital certificate from the attribute organization to the wireless device, and the digital certificate file of 10K-a dozen K is transmitted in the wireless network. Service efficiency and user experience are affected

Images