Method for associating and verifying multiple digital certificates

Abstract

The invention discloses a method for associating and verifying multiple digital certificates. The method comprises the following steps of: taking one or more digital certificates as a primary certificate, performing digital signature and other operations on specified information in a signature request of a secondary certificate through the primary certificate, acquiring an identifier special for the primary certificate, taking the identifier special for the primary certificate as a component of the content of the secondary certificate through a certificate authority (CA) of the secondary certificate, wherein the component is contained in the signed secondary certificate. During verification, the identifier special for the primary certificate in the secondary certificate is extracted, and the validity of the special identifier is verified through a signature verification method and the like, so that the association validity is obtained. Because the identifier special for the primary certificate is contained in the secondary certificate, a comparison table of the primary certificate and the secondary certificate is not required to be established in an application system, the identifier can be directly obtained from the secondary certificate, the complexity of the application system is simplified, the management and maintenance cost of the application system is reduced, and the error of the comparison table caused by untimely information update can be avoided.

Description

technical field [0001] The present invention relates to the creation of one or more associated digital certificates (called secondary certificates) from one or more digital certificates (called primary certificates), and the verification of the validity of such associations. It is used to solve the problem that units or individuals who currently hold legal and valid digital certificates can create or obtain new associated digital certificates on the basis of existing valid certificates for use in other businesses and application systems. Background technique [0002] A digital certificate is an online identification that proves a user's identity. It identifies the identities of all communication parties in the network, that is, solves the problem of "who am I" in the virtual society. In layman's terms, a digital certificate is like the ID card of an online user, which can ensure that your transactions on the Internet are safe and credible. [0003] Digital certificates main...

AI Technical Summary

Problems solved by technology

Among them, certificate B belongs to certificate A in terms of scope of use and authority, and B is only valid when A is valid. However, the current certificate system does not reflect such relevance for similar situations.

Images