Method for generating core identity digital certificate and identity side surface digital certificate

Abstract

The invention discloses a method for generating a core identity digital certificate and an identity side surface digital certificate. The method comprises the steps of S1, performing negotiation between a certificate authority (CA) and a preset sanitization party, generating two pairs of correlated public key and private key pairs by means of a sanitizable signature key generating algorithm, wherein one pair of public key and private key pair is held by the CA for core identity certificate signature and verification, and the other pair is held by the sanitization party for performing sanitization operation and verifying a signature which is regenerated after purification; S2, applying for issuing the core identity digital certificate by a user to CA; and S3, applying for issuing the identity side surface digital certificate by the user to the sanitization party which is preset by CA by the user according to the core identity digital certificate. The method according to the invention reduces auditing cost of the CA in repeated issuing the digital certificates and improves privacy information protection.

Description

technical field [0001] The invention relates to the field of digital certificates, in particular to a method for generating core identity digital certificates and identity side digital certificates. Background technique [0002] Digital identity is a proxy for the real identity of people participating in network activities, which has many manifestations, such as traditional username / password mechanism, human biometrics, physical tokens and digital certificates. Among them, the digital certificate is a highly secure authentication method, but in the process of use, since each new digital certificate must be audited and signed by the CA certification authority, the cost is relatively high, so it is generally avoided to frequently generate new ones. digital certificate. However, in consideration of privacy issues, users sometimes hope to generate digital certificates containing different identity attribute information for different application scenarios, so as to prevent poten...

AI Technical Summary

Problems solved by technology

If the user applies for a new digital identity CA certificate from the CA certification authority for each application scenario, the CA certification authority will repeatedly review many identity attribute information of the user, which greatly wastes resources and reduces user experience.

Users need digital certificates with multiple identities. This requirement conflicts with the high cost of issuing digital certificates, thus limiting the scope of use of digital certificates and leaving hidden dangers to users' privacy.

Images