Key spread and verification method and system

Abstract

The embodiment of the invention provides a key spread and verification method. The method includes: a signature provider brings up a key application to a trustable server side; the trustable server side verifies the key application of the signature provider and uses a preset main key to calculate a signature subkey after the verification is passed and then sends the signature subkey to the signature provider through a key envelope; and the signature provider verifies the key envelope and obtains the signature subkey after the verification is passed and then uses a security password device to store the signature subkey. The key spread and verification method reduces significantly key maintenance and custody work. In the verification process, a complex asymmetrical operation or CRL interaction is not needed so that the security is ensured and at the same time, the whole identification verification process is simplified and the response speed is improved.

Description

technical field [0001] The invention relates to the field of network and information security, in particular to a key diffusion and a verification method using the diffusion key. Background technique [0002] Public Key Infrastructure (PKI) is a technology often used to solve network security problems at present. It is a universal security infrastructure that uses asymmetric cryptographic algorithm principles and technologies to implement and provide security services. PKI technology uses certificates to manage public keys, which are issued by a third-party trusted organization, the certificate authority (CA), to verify the user's identity on the Internet. Thereby ensuring the confidentiality, integrity and non-repudiation of the transmitted data. [0003] Among them, CA, as a trusted third party, is the core of the entire PKI system, and is responsible for issuing certificates, updating certificates, and revoking certificates in the PKI system. A digital certificate is an...

AI Technical Summary

Problems solved by technology

Among them, the effective update of the certificate revocation list (CRL, Certificate Revocation List) is time-sensitive. If there is no real-time update, then the verified certificate is not accurate, and the signature authentication cannot be reliably guaranteed.

The entire certification process is relatively complicated, and affected by many factors at the same time, it puts forward higher requirements for the certification party. It can be seen that although the conventional certification method of the PKI system is safe and effective, there are certain difficulties in the specific implementation process.

Images