Method, device and system for realizing mobile signature

Abstract

The invention discloses a method for realizing mobile signature, which comprises that: a service application system allows for the access by a user, generates data to be signed representation and data to be displayed, encrypts the data to be displayed by using the public key of the user and sends the data to a mobile signature server; the mobile signature server sends the data to be signed representation and the encrypted data to be displayed to the mobile terminal of a user; subscriber identity module (SIM) / universally (USIM) in the mobile terminal uses the private key of the user to decryptthe received encrypted data to be displayed and shows the data to the user for confirmation; after a confirmation instruction of the user is acquired, the SIM / USIM uses the private key of the user toperform signature calculation on the data to be signed representation and forwards the signature result obtained after signature calculation to a service application system through the mobile signature server. The service application system uses the public key of the user to perform signature verification on the result of the signature. The invention also discloses a corresponding device and a system. When the method, device and system are used, the mobile signature of end-to-end protection is realized on the basis of the SIM / USIM in the mobile terminal.

Description

technical field [0001] The invention relates to a wireless network and a data service, in particular to a method for realizing a mobile signature, a corresponding device and a system. Background technique [0002] The digital signature technology based on the public key system can provide authenticity and integrity protection for the data message of the electronic transaction, and can prevent the trader from denying his transaction behavior afterwards, so it is relatively popular in the electronic transaction with high security requirements. Wide range of applications, such as online banking, online payment, etc. [0003] The premise of using digital signatures to protect messages is that each entity must have a pair of public and private keys, the private key is kept secret, the public key is made public, and a binding relationship between the public key and the identity of the entity must be established. In practical operation, this binding relationship is accomplished by...

AI Technical Summary

Problems solved by technology

When MSCA is a terminal application, the interaction between MSCA and the mobile signature generation device, that is, the Subscriber Identity Module (SIM) in the 2G mobile terminal or the Universal Subscriber Identity Module (USIM) in the 3G mobile terminal is A problem, the reason is that this needs to expand the interaction instruction set between the terminal and SIM / USIM, and there is currently a lack of relevant standards in this regard; when MSCA is a card application, the processing capacity of the card is very limited, and often cannot handle SD that may have a complex format , such as eXtensible Markup Language (eXtensible Markup Language, XML) is a file format often used by APs, and this file format cannot be processed correctly on the SIM / USIM, so the SD content cannot be displayed to the user

Images