Method and system based on wireless terminal for applying digital certificate and wireless terminal

Abstract

The embodiment of the invention provides a method and a system based on a wireless terminal for applying a digital certificate and a wireless terminal. The method comprises the following steps: generating a key pair, a private key of the key pair is stored in a user identity module of the wireless terminal; sending a public key of the key pair, a user identity module number, application certificate information of user information to a certificate server; receiving a digital certificate issued by the certificate server; and storing the digital certificate into a nonvolatile storage of the wireless terminal. The technical scheme of the embodiment of the invention adopts the method separately storing the private key and the digital certificate to store the private key into an SIM card and store the digital certificate into a FLASH. Since the digital certificate can prove the hard core of a user ID to be the private key, the mode of storage can improve the safety of the private key.

Description

technical field [0001] The invention relates to the field of communication security, in particular to a wireless terminal-based digital certificate application method, system and wireless terminal. Background technique [0002] Computer security involves many fields, but the most basic security issue is the control method of access rights. In terms of identity authentication, the current mainstream methods can be divided into three types: one is to simply use the combination of user name and password to identify the identity. The system constructed is easy to be broken by hackers in the network, and it is basically not used in systems involving a slightly higher security level. The second is to use biometric technology to identify user identities. This method is relatively expensive to implement, requires relatively high hardware performance and computing capabilities of the system, and has the risk of identification errors. The third is to use digital certificates as the ...

AI Technical Summary

Problems solved by technology

In terms of identity authentication, the current mainstream methods can be divided into three types: one is to simply use the combination of user name and password to identify the identity. The built system is easily broken by hackers in the network, and it is basically not used in systems involving slightly higher security levels.

The second is to use biometric technology to identify user identities. This method is relatively expensive to implement, requires relatively high hardware performance and computing capabilities of the system, and has the risk of identification errors.

However, the USB Key method is only applicable to fixed networks. When the fixed network does not exist, it will be inconvenient to use due to network problems.

Images