Key certificate processing method and device, and key certificate authentication method and device

Abstract

The invention provides a key certificate processing method and device as well as a key certificate authentication method and device. The key certificate processing method includes the following steps:if a key certificate application request sent by an online banking server is received, updating a key certificate opening state and a key certificate state, and generating a key certificate validityperiod and a random code; if a key certificate download request sent by the online banking server is received, performing certificate download verification on a customer number, and generating an initial certificate unique identifier after the verification is successful; generating a private key certificate based on the initial certificate unique identifier; if feedback information sent by the online banking server is received, updating the key certificate state, the key certificate validity period and the random code; and generating a certificate unique identifier, and establishing a mappingrelationship between the customer number and the certificate unique identifier. Thereby, the uniqueness of the private key certificate of a customer can be realized, and as the private key certificatecan be directly managed by using the customer number, the problem of solving the binding of the identifier and the key through third-party notarization can be avoided.

Description

technical field [0001] The invention relates to the technical field of authentication, and more specifically, to a key certificate processing method and device, and a key certificate authentication method and device. Background technique [0002] The authentication system is a proof system for e-commerce to establish a trust system. Its core is to establish a reasonable signature mechanism, and the realization of the signature mechanism requires reasonable key management. Therefore, the key certificate management technology becomes the core problem of constructing the authentication system. [0003] Most of the existing key certificate management systems are established based on PKI technology. PKI itself is operated by a hierarchical CA organization (Certification Authority) and a huge certificate library LDAP, and relies on third-party notarization to solve the problem of binding identification and keys. For this reason, the key certificate management system not only nee...

AI Technical Summary

Problems solved by technology

[0004] In view of this, the present invention provides a key certificate processing method and device, and a key certificate authentication method and device to solve the problem of relying on third-party notarization to solve the identification and authentication problems caused by the existing key certificate management system based on PKI technology certification. The key bundling problem, the technical solution is as follows:

Images