Method and system for secure management and use of key and certificate based on virtual machine technology

Abstract

The invention relates to a method and system for secure management and use of a key and a certificate based on a virtual machine technology. In the method, a key / certificate management program is isolated from a user operation system in different hardware resource spaces through a virtual machine monitor (VMM), therefore the security in management and use of the key and the certificate with a software method is improved. Accordingly, the invention integrates the advantages of good user experience of a software certificate and high security of a USB key certificate, meanwhile further solves the difficult problem of insufficient storage capacity of a USB key, reduces the customer service and hardware costs, and provides the secure management and use of the key and the certificate with a universal solution taking the interests of users, developers and service providers into consideration.

Description

technical field [0001] The present invention generally relates to enabling secure transactions over a network through credentials, such as PKI certificates. More specifically, the present invention relates to methods and systems for enhancing the security of network identity authentication using soft certificates on computers. Background technique [0002] With the advent of the Internet, the number of online transactions has also increased dramatically. As such transactions increase, so do issues such as transaction security, authentication of transaction parties, non-repudiation of transactions, and authentication and verification of devices used in such transactions. In response to these problems, a public key infrastructure (PKI) has been developed in which a certification authority (CA) issues a digital certificate and a pair of associated keys to individuals and organizations participating in electronic commerce through an open network such as the Internet. These cer...

AI Technical Summary

Problems solved by technology

And this new architecture cannot be the way of hardware+Windows+Windows software. As we all know, in the Windows architecture, Windows is the direct controller of the hardware, and Windows has opened up the development interface of the kernel-level driver, so that third parties can build on Windows. If the task of this driver is to steal keys and certificates, theoretically we cannot use another software to completely prevent it in Windows

Images