Digital certificate issuing method and system based on trusted timestamp

Abstract

The invention relates to a digital certificate issuing method based on a trusted timestamp. The method includes the following steps: an event application server acquires event information, and acquires the accurate time when an event occurs by calling a timestamp server; the event application server calls a certificate issuing interface of a certificate issuing authority to transmit the accurate time when the event occurs and the summary of the event information to the certificate issuing authority as part of parameters; the certificate issuing authority calls the timestamp server to obtain the accurate time when a certificate is generated, issues a digital certificate used by the event according to the received parameter information, and returns the digital certificate to the event application server; and the event application server compares the accurate time when the certificate is generated with the accurate time when the event occurs, and compares the event information summary inthe certificate with the event information summary of the local operation to verify the digital certificate of the event. According to the scheme of the invention, time information is written into theextension of the certificate, so that the time when the certificate is generated and the time when the event occurs cannot be changed, and the validity of the certificate can be verified more effectively.

Description

technical field [0001] The invention relates to the field of time stamps, in particular to a method and system for issuing digital certificates based on trusted time stamps. Background technique [0002] The trusted time stamp is authorized by the National Time Service Center and issued by the authoritative trusted time stamp authority (Time StampAuthority, TSA). A valid, verifiable and legally valid electronic certificate. No institution, including the timestamp institution itself, can modify the time to ensure the authority of the time. Trusted time stamps are mainly used for anti-tampering and post-repudiation of electronic files, and to determine the exact time when electronic files were generated. Trusted time stamps are now widely used in e-commerce, electronic documents, intellectual property rights, medical care and other fields to protect the legal validity of electronic data files. The use of credible time stamps in the grain industry also prevents the core data...

AI Technical Summary

Problems solved by technology

In this process, the process of calling the CA to issue the certificate has the risk of being intercepted, which will cause the malicious program to tamper with the parameters of the event occurrence time sent to the CA, resulting in the fact that the content of the event occurrence time contained in the extension of the digital certificate does not match the real situation. The data after signing and archiving with a certificate deviates from the real event, and the event signature loses its meaning

Images