Method and system for achieving user-informed digital signature by using mobile terminal

Abstract

The invention provides a method and a system for achieving user-informed digital signature by using a mobile terminal. When a business application requires a user to perform the digital signature on key data, firstly the key data content to be signed is completely presented on a screen of the mobile terminal, after the user checks and knows the key data content, if the user approves, a digital certificate on the mobile terminal is called to process and a digital signature value is generated, if the user does not approve, the signing request is refused and an operation result is returned, thereby the informed signature with the data information to be signed which is visible and confirmed by the user can be achieved, a business application foreground submits the key data and the digital signature value to a business application background through network, and a background signature processing unit is called to verify the validity of the signature. The system uses the mobile terminal as a device for presentation of the key data content to be signed and signature operation, and the safe and reliable digital signature in a high-risk personal computer (PC) environment can be achieved with a low cost.

Description

technical field [0001] The present invention relates to the field of network and information security technologies, and in particular to a method and system for realizing user-informed digital signatures using a mobile terminal, and specifically to a mobile terminal that enables users to see data to be signed and sign operations that must be confirmed by the user In order to process, the signature can be effectively verified using a secure digital signature system. Background technique [0002] With the promulgation and implementation of the Electronic Signature Law, digital signature technology has been widely used in electronic government affairs and electronic commerce. At present, the most commonly used digital signature application is a smart cryptographic key (USB Key) to store and manage the user's private key and digital certificate, and use the private key to perform digital signatures. [0003] With the proliferation of virus and Trojan horse programs in the PC en...

AI Technical Summary

Problems solved by technology

[0005] 2. The risk of tampering with the data to be signed. Before the user’s transaction data is sent to the USB Key for signature, the hacker uses a Trojan horse to modify the original text of the transaction, causing the user to sign the modified data without knowing it.

However, due to the complex system integration and high cost, the interactive USB Key has not been widely used

[0007] Therefore, in the existing methods, there is not yet a digital signature method that is convenient for users to use and safe and reliable without increasing user costs.

Images