Electronic certificate security management method and system

Abstract

The invention discloses an electronic certificate security management method and system. The electronic certificate security management method comprises the following steps: issuing electronic certificate signing and issuing application; authenticating the receiving end, generating the electronic certificate, and issuing the electronic certificate and the signing and issuing information to the security basic module of electronic certificate; obtaining the electronic certificate and the electronic certificate signing and issuing results from the electronic certificate security basic module; issuing the electronic certificate authentication application to the electronic certificate security basic module; authenticating the receiving end by means of the electronic certificate security basic module, issuing the authentication confirmation information to the electronic certificate security basic module, and waiting for the receiver to confirm; confirming the authentication confirmation information by the receiving end; and obtaining the authentication results of the electronic certificate from the electronic certificate security basic module. By means of the scheme disclosed by the invention, the defects of the electronic certificate issuing, authentication and supervision platform in the prior art in the aspects of cost, safety and convenience can be solved.

Description

technical field [0001] The invention relates to the field of data security, in particular to an electronic certificate security management method and system. Background technique [0002] With the rapid development of information network technology, driven by policies, technologies, and markets, e-commerce and e-government industries are booming. Electronic certificates are legal documents that prove the occurrence of e-commerce and e-government business, clarify responsibilities, and are used for supervision. Electronic written proof of efficacy is widely used. [0003] Such as figure 1 , in the prior art, the electronic voucher issuance, certification, and supervision systems are mutually independent systems, which are used by the electronic voucher issuing agencies, certification agencies, and regulatory agencies to realize the issuance, authentication, and supervision of electronic vouchers. [0004] Issuing institution, the institution that issues the electronic certi...

AI Technical Summary

Problems solved by technology

[0019] 1) There is a lack of trust system for the issuing, certification, and supervision entities. The issuing agency, certification agency, regulatory agency, receiver, and certification party are at risk of being impersonated, and there are hidden safety hazards

[0020] 2) The receiving party may provide the electronic certificate to the authenticating party in the form of entrustment, and has not taken effective preventive measures. The electronic certificate is controlled by the authenticating party, and the receiving party loses the independent control of the electronic certificate, and there are risks of leakage and unauthorized use

[0021] 3) Electronic certificates exist in the form of electronic data, and there are no effective countermeasures against security threats such as copying, forgery, repudiation, and tampering

[0022] 4) The issuance and certification process information used as the audit and traceability basis is controlled by the electronic certificate issuance, certification and supervision system. There are risks of tampering and denial in technology, and the credibility is limited.

[0023] 5) The electronic certificate issuance, certification and supervision process is realized by relying on the electronic certificate issuance, certification and supervision system. The failure of the electronic certificate issuance, certification and supervision system will cause the business interruption of the electronic certificate issuance, certification and supervision process, and business continuity cannot be guaranteed

[0025] The electronic certificate issuance, certification and supervision system cannot realize the automatic delivery and personalized customization of the electronic certificate issuance, certification and supervision process

Images