A backup method and system for private key of electronic signature token

Abstract

Provided are a method and system for backing up the private key of an electronic signature token, the method comprising: a first electronic signature token transmits a private key backup request data packet comprising a fist signature; a second electronic signature token authenticates the first signature in the private key backup request data packet; if the first signature passes authentication, then determining whether the first electronic signature token has a backup relationship with the second electronic signature token; if yes, then encrypting the private key of the second electronic signature token, and transmitting a private key backup response data packet comprising a second signature and the encrypted private key; the first electronic signature token authenticates the second signature in the private key backup response data packet; if the second signature passes authentication, then determining whether the second electronic signature token has a primary-standby relationship with the first electronic signature token; and if yes, then decrypting the encrypted private key.

Description

technical field [0001] The invention relates to the field of electronic technology, in particular to a method and system for backing up a private key of an electronic signature token. Background technique [0002] In the prior art, the user's private key and digital certificate are stored in the electronic signature token, and the user's identity is authenticated by using the built-in public key algorithm of the USBKey. Theoretically, the user's private key in the existing electronic signature token cannot be read by any means, so as to ensure the security of user authentication. However, once the electronic signature token is lost, the original private key cannot be obtained, and the user must re-apply for the electronic signature token. Key information such as the private key and serial number must be redistributed and obtained, and the activation of the electronic signature token needs to be triggered. The update process makes the maintenance cost of electronic signature...

AI Technical Summary

Problems solved by technology

However, once the electronic signature token is lost, the original private key cannot be obtained, and the user must re-apply for the electronic signature token. Key information such as the private key and serial number must be redistributed and obtained, and the activation of the electronic signature token needs to be triggered. Update process that makes electronic signature tokens more expensive to maintain

Images