Processing methods and related devices of digital certificate

Abstract

The embodiment of the application discloses processing methods and devices of a digital certificate. The method includes: recording a CA (Certificate Authority) public key of a first participant intoa blockchain network by a CA of the first participant of the blockchain network; when the CA of the first participant receives a certificate authorization request of any user, confirming, according touser identity information carried in the certificate authorization request, whether the same is a user of the CA of the first participant; if yes, obtaining a public key of the user from the certificate authorization request, and obtaining CA public keys of any N second participants from the blockchain network according to a ring signature certificate signing and issuing rule, wherein N is equalto a public key number set in the ring signature certificate signing and issuing rule; and carrying out ring signature on the user identity information and the public key of the user by the CA of thefirst participant according to the CA public key and a private key of the first participant and the CA public keys of the N second participants to form the digital certificate, and sending the same tothe user. By adopting the embodiment of the application, identity privacy of signing and issuing sides of digital certificates can be enhanced.

Description

Technical field [0001] This application relates to the field of blockchain technology, and in particular to a digital certificate processing method and related devices. Background technique [0002] At present, many consortium chain applications have begun to introduce digital certificate authority (Certificate Authority, CA) to issue digital certificates to participants on the blockchain. Since many participants (such as most banks) have their own CA, they will require that they can issue digital certificates for their customers through their own CA. For example, bank A has its own CA (for example, CA-A), bank B has its own CA (for example, CA-B), bank C has its own CA (for example, CA-C), etc. Each bank can pass its own CA CA issues digital certificates for its customers. In the consortium chain network, any participant such as Bank A, Bank B, and Bank C will recognize the digital certificates issued by other participants' CAs to their customers. However, since all participa...

AI Technical Summary

Problems solved by technology

The current way of issuing digital certificates on the alliance chain leads to the fact that the transaction information of the alliance chain transaction is completely open to all participants on the alliance chain, and the identities of both parties to the transaction are fully exposed. It is difficult to meet the transaction needs of each participant and has poor applicability.

Images