Method and device for using digital certificate

Abstract

The invention discloses a digital certificate use method and apparatus. The method includes the steps of: obtaining a verification code and generating a public and private key pair in a trading process; when a client side performs digital certificate signature on information needing to be signed in the trading process by using a private key, obtaining a client private key digital signature of the trading, and generating a digital certificate request including a public key; sending the digital certificate request including the public key, the verification code, and the client private key digital signature of the trading to a network side, wherein the digital certificate request includes trading information, and / or the public and private key pair is generated according to the trading information. After a client user passes the verification according to the verification code and the digital certificate request, the public key is used to perform legality verification on the digital signature according to the trading information at the network side. The trading information and the client private key digital signature of the trading are saved at the network side. By using the digital certificate use method and apparatus, the digital certificate is not dependent on the client side in the use process. Because the trading information is included, the digital certificate can be used as an effective electronicevidence.

Description

technical field [0001] The invention relates to the technical field of data security, in particular to a method and device for using a digital certificate. Background technique [0002] A digital certificate is a string of numbers that marks the identity information of all parties in the Internet communication. It provides a way to verify the identity of the communication entity on the Internet. A stamp or seal (or a signature added to a digital ID card). It is issued by the authoritative organization - CA organization, also known as the Certificate Authority (Certificate Authority) center, and people can use it to identify each other's identity on the Internet. [0003] Its encryption technology (encrypted transmission, digital signature, digital envelope and other security technologies) based on digital certificates can encrypt and decrypt information transmitted on the network, digital signature and signature verification, to ensure the confidentiality and integrity of i...

AI Technical Summary

Problems solved by technology

[0004] However, in the current digital certificate application scenarios, it is always necessary to install software and hardware on the client side to store, use and protect the certificate private key and other information. Therefore, the deficiency of the existing technology lies in: the requirements on the client side seriously hinder the digital certificate. The wide range of use and the huge customer learning costs brought about by the knowledge necessary to use these software and hardware

Images