A key acquisition method, ID card information transmission method and system

Abstract

The invention provides a secret key obtaining method and an identity card information transmission method and system. The secret key obtaining method comprises the steps that a dispatching server receives authentication data transmitted by an authentication safety control module; the dispatching server queries the survival condition of a digital certificate for signature verification and the survival condition of a digital certificate for encryption, and transmits the authentication data to an authorization server if the survival conditions are normal survival conditions; the authorization server carries out the authentication of signature data after judging that the digital certificate for signature verification and the digital certificate for encryption belong to the same user, and then obtains an authorization secret key after signature verification; the authorization server carries out the encryption of the authorization secret key, generates an authorization secret key ciphertext, and transmits the authorization secret key ciphertext to the dispatching server; the dispatching server enables the authorization secret key ciphertext to be transmitted to the authentication safety control module; the authentication safety control module carries out the decryption of the authorization secret key ciphertext, obtains the authorization secret key, and stores the authorization secret key in a random access memory of the authentication safety control module.

Description

technical field [0001] The invention relates to the field of electronic technology, in particular to a key acquisition method, an ID card information transmission method and a system. Background technique [0002] The ciphertext of the ID card information is stored in the second-generation resident ID card, and the verification security control module authorized by the Ministry of Public Security is required to decrypt the ciphertext of the ID card information stored in the resident ID card. The existing front-end ID card reading terminal has at least two modules, including a reading module and a resident ID card verification security control module. Since each front-end ID card reader is provided with a resident ID card verification safety control module, the manufacturing cost of the existing front-end ID card reader is high; and a resident ID card verification safety control module can only be used for one reader The identity card information read by the module is used f...

AI Technical Summary

Problems solved by technology

Since each front-end ID card reader is provided with a resident ID card verification safety control module, the manufacturing cost of the existing front-end ID card reader is high; and a resident ID card verification safety control module can only be used for one reader The identity card information read by the module is used for identity verification. Therefore, the utilization rate of the existing front-end ID card reader is low. To solve this problem, there is currently an improvement plan: the front-end ID card reader no longer includes the resident ID card verification security control module, and set the resident ID card verification security control module on the background side, thereby improving the utilization rate of the resident ID card verification security control module

[0003] However, since the network environment in the background is an open network, any card reader can request the background to connect to the security control module for identity card verification, which greatly increases the security risk of the security control module for identity card verification. If the card verification security control module is breached by an illegal card reader, the root certificate of the ID card stored in the resident ID card verification security control module will be stolen or even tampered with by criminals, and the consequences will be disastrous

In addition, since the background side may be equipped with multiple ID card verification security control modules, due to uneven task distribution, some ID card verification security control modules will be idle and some ID card verification security control modules will be overloaded.

Images