Secret key acquisition method and identity card information transmission method and system

Abstract

The invention provides a secret key acquisition method and an identity card information transmission method and system. The secret key acquisition method comprises the steps that an authorization server receives authentication data transmitted by an authentication security control module, and the authentication data at least include signature data obtained in a way that the authentication security control module signs data to be signed, a digital certificate used for signature verification and a digital certificate used for encryption; the authorization server inquires the survival state of the digital certificate used for signature verification and the digital certificate used for encryption, if the survival state is the normal survival state, signature verification is performed on the signature data after the judgment result indicates that the digital certificate used for signature verification and the digital certificate used for encryption belong to the same user, and an authorization secret key is acquired after passing of signature verification; the authorization server encrypts the authorization secret key so that an authorization secret key ciphertext is generated and transmitted to the authentication security control module; and the authentication security control module decrypts the authorization secret key ciphertext so that the authorization secret key is obtained and saved in the random access memory of the authentication security control module.

Description

technical field [0001] The invention relates to the field of electronic technology, in particular to a method for obtaining a key, a method and a system for transmitting ID card information. Background technique [0002] The second-generation resident ID card stores the cipher text of the ID card information, which needs to be decrypted by the verification security control module authorized by the Ministry of Public Security. The existing front-end ID card reader terminal has at least two modules, including a reading module and a resident ID card verification security control module. Since each front-end ID card reader is provided with a resident ID card verification security control module, the manufacturing cost of the existing front-end ID card reader is high; and one resident ID card verification security control module can only read one The resident ID card information read by the module is used for identity verification. Therefore, the utilization rate of the existing...

AI Technical Summary

Problems solved by technology

Since each front-end ID card reader is provided with a resident ID card verification safety control module, the manufacturing cost of the existing front-end ID card reader is high; and a resident ID card verification safety control module can only be used for one reader The identity card information read by the module is used for identity verification. Therefore, the utilization rate of the existing front-end ID card reader is low. To solve this problem, there is currently an improvement plan: the front-end ID card reader no longer includes the resident ID card verification security control module, and set the resident ID card verification security control module on the background side, thereby improving the utilization rate of the resident ID card verification security control module

[0003] However, since the network environment in the background is an open network, any card reader can request the background to connect to the security control module for identity card verification, which greatly increases the security risk of the security control module for identity card verification. If the card verification security control module is breached by an illegal card reader, the root certificate of the ID card stored in the resident ID card verification security control module will be stolen or even tampered with by criminals, and the consequences will be disastrous

In addition, since the background side may be equipped with multiple ID card verification security control modules, due to uneven task distribution, some ID card verification security control modules will be idle and some ID card verification security control modules will be overloaded.

Images