Double CA (certificate authority) system and implementation method thereof

Abstract

The invention discloses a double CA (certificate authority) system which comprises a first certificate system, a second certificate system, interfaces and an account opening business machine. The first certificate system is used for authenticating a first certificate of devices or businesses, the second certificate system is used for authenticating a second certificate of the devices or businesses, the interfaces are used for issuing the first certificate and an authentication certificate to the devices or businesses authenticated by the first certificate system and the second certificate system, the account opening business machine is used for interconnecting the devices or businesses after the interfaces issue the first certificate and the second certificate to the devices or businesses, and the first certificate system and the second certificate system communicate with the account opening business machine through the interfaces. The invention further provides an implementation method of the double CA system. Mutual trust of the certificates is effectively realized, so that the problem of business overlapping is solved, the first certificate and the second certificate are authenticated by the first certificate system and the second certificate system, and interaction of the devices or businesses is facilitated by interconnection of the interfaces and the account opening business machine.

Description

technical field [0001] The invention relates to the technical field of certificate authentication, in particular to a dual-certificate CA system and an implementation method thereof. Background technique [0002] Public key cryptography is one of the core technologies to realize network information security. PKI (Public Key Infrastructure) is the supporting infrastructure for the actual deployment of public key cryptography. Generating digital certificates is a key link in the PKI system: in the PKI system, CA (Certificate Authority, Certificate Center) is responsible for generating digital certificates to bind user identities and user public keys, that is, when declaring that "the user owns the public key" Digital signature on electronic text. [0003] When equipment or business interacts, it is necessary to authenticate the device or business, which requires the acquisition of equipment or business information. The existing authentication system either authenticates the ...

AI Technical Summary

Problems solved by technology

[0003] When equipment or business interacts, it is necessary to authenticate the device or business, which requires the acquisition of equipment or business information. The existing authentication system either authenticates the device or authenticates the business, all of which are single certificates System; a single certificate system will cause the business to be unable to expand and cross, and certificates can only be issued for one type of application. Therefore, there are now a series of certificate issuing systems and institutions, such as issuing certificates for web pages, and for a device such as UKEY Those who issue certificates, those who issue certificates to cards, etc., they are maintained by different certificate systems, there is no overlap between them, and they operate independently

Images