Multi-certificate issuing and verifying method based on intelligent security chip

Abstract

The invention relates to a multi-certificate issuing and verifying method based on an intelligent security chip, can use a single smart security chip carrier to apply to multiple CAs for certificatesand store the certificates, wherein only one CA (hereinafter referred to as the first CA) needs to perform strict identity checking for certificate issuing and a unique signature PIN code is set, andwhen applying to other CAs for certificates, an applicant only needs to use the certificate issued by the first CA to prove user identity to complete online certificate application. By adoption of themulti-certificate issuing and verifying method based on an intelligent security chip, the problem of previous inconvenience of applying to multiple CAs for certificates and electronic signatures by auser is solved, strict identity checking needs to be performed only once, then the user can apply to multiple CAs for digital certificates, the certificate applied through strict identity checking isused for identity authentication, other certificates can be used for electronic signatures of business systems, and during signature verification, the first certificate is utilized to complete identity authentication first and then a designated certificate is utilized to perform electronic signature verification of business data.

Description

technical field [0001] The invention relates to the field of computer technology, in particular to the field of information security technology, and specifically refers to a method for issuing and verifying multiple certificates based on an intelligent security chip. Background technique [0002] With the development of e-government and e-commerce business on the Internet and the promulgation of the "Electronic Signature Law", electronic signatures using PKI (Public Key Infrastructure) technology are more and more widely used, so users may need to use their own signatures in different application scenarios. private key for electronic signature. Since the trust domains to which the applications belong are different, the user needs to apply for a digital certificate for verifying the electronic signature from a digital certificate issuing authority (hereinafter referred to as CA (Certificate Authority)) in different trust domains. When CA issues a digital certificate to a use...

AI Technical Summary

Problems solved by technology

The offline method requires the user to be present in person, which is time-consuming and laborious, while the online method requires the user to transmit their private information, which has the risk of leakage, and the CA cannot effectively verify the authenticity of the identity

Moreover, in the past, CAs needed to provide users with an independent certificate carrier to store the certificates they issued, and set up independent PIN codes for management, which added a lot of burden to users to use these certificates.

Images