Injection method, architecture and system of rsa key pair and certificate
A key management system and key pair technology, applied in the field of electronic payment, can solve the problems of increasing the construction and maintenance costs of safe rooms, a large amount of human resource expenditure, and large differences in terminal performance, so as to achieve low efficiency and reduce manual operations , the effect of ensuring confidentiality and integrity
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0091] Embodiment 1 of the present invention is: a method for injecting RSA key pairs and certificates, which can remotely and safely inject RSA key pairs and certificates into payment terminals; the method is based on asymmetric key technology, and based on figure 2 The shown RSA key pair and certificate injection architecture includes a payment terminal 100 , a key management system 200 and a CA center 300 that are sequentially connected by communication.
[0092] Since it is necessary to obtain the RSA key pair and certificate from the CA center, it is necessary to deploy the CA center and build its own KPI system. There are two options. One is to rely on a "trusted third-party CA organization" Affiliated institutions, the so-called "third-party CA institutions" are also commercial CAs, such as CFCA (China Financial Certification Center), CTCA (Citic Security Certification Center), etc.; the second is that the manufacturer establishes its own CA center, which involves this ...
Embodiment 2
[0106] Please refer to Figure 4 , this embodiment is a further extension of steps S2-S3 in Embodiment 1.
[0107] Described step S2 comprises:
[0108] S201: The payment terminal generates request data, and packages the request data with the first public key to obtain a request data packet;
[0109] S202: Use the first private key to sign the request data packet, and send the request data packet and its signature to a key management system.
[0110] Described step S3 comprises:
[0111] S301: The key management system receives the request data packet and its signature, and uses the first public key to verify the validity of the signature of the request data packet;
[0112] S302: If the verification is passed, send the request data to the CA center.
[0113] In this embodiment, by using the private key in the asymmetric key pair to digitally sign the request and the public key, the key management system uses the public key to verify the legitimacy of the payment terminal ...
Embodiment 3
[0115] Please refer to Image 6 , this embodiment is an injection system of a RSA key pair and a certificate corresponding to the above-mentioned embodiments, including:
[0116] The first generation module 1 is used to generate an asymmetric key pair for the payment terminal, and the asymmetric key pair includes a first public key and a first private key;
[0117] The first sending module 2 is used for the payment terminal to initiate a request, and send the request and the first public key to the key management system;
[0118] The second sending module 3 is used for the key management system to receive the request and the first public key, and send the request to the CA center;
[0119] The second generating module 4 is used for the CA center to generate an RSA private key and a certificate according to the request, and send the RSA private key and the certificate to the key management system through a secure link, including the RSA public key in the certificate;
[0120]...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More