X509 digital certificate quick analyzing and verifying method

Abstract

The invention relates to a fast analysis and verification method of X509 digital certificate, which comprises following steps: 1) on the basis of structure characteristics, dismantling the X509 digital certificate into a certificate main body, a certificate signature algorithm identification and a certificate signature value; 2) on the basis of coding format of X509 digital certificate, locating and analyzing the respective primary key from the certificate main body; 3) establishing an index list on the basis the location information of all of the analyzed primary key, and storing the location information of all of the primary key in the index list; when reusing the certificate primary key information, directly reading the index list established in step 3. The invention improves the security transaction processing efficiency and reduces the consumption of the system resource and then provides a huge convenience to the follow-up access.

Description

technical field [0001] The invention relates to a fast parsing and verification method of an X509 digital certificate used in the Internet to verify the identity of both parties conducting electronic transactions. Background technique [0002] With the development of the Internet, people rely more and more on the Internet to complete transaction processing of some sensitive data, such as: electronic banking, e-commerce and so on. The electronicization of these sensitive data transactions has resulted in very important and private data being frequently transmitted across the network. To this end, people have invented many new technologies to ensure that these important and private data can be transmitted safely and reliably in the network. More and more users use SSL (Secure Socket Layer, Secure Socket Layer) and TLS (Transport Layer Security , Transport Layer Security) and other encryption mechanisms, they can construct a secure channel between the client / browser and the se...

AI Technical Summary

Problems solved by technology

The advantage of this is that it can be realized by using the ready-made general ASN.1 encoding method and program, but the structural characteristics of the X509 digital certificate itself are not used enough, and the analysis can only be compared according to the identifier defined in ASN.1, and then Determine the content

This method usually uses a recursive call method, so it consumes a lot of CPU and other system time, and at the same time, the speed of security transaction processing will be greatly reduced, and many customers' security transaction requests will respond very slowly.

Images