Digital certificate processing method and related device

Abstract

Disclosed are a processing method for a digital certificate, and an apparatus. The method comprising: a CA of a first participant of a blockchain network recording a public key of the CA of the first participant in the blockchain network; when the CA of the first participant receives a certificate authorization request of any user, confirming, according to user identity information carried in the certificate authorization request, whether the user is a user of the CA of the first participant; if so, acquiring a public key of the user from the certificate authorization request, and acquiring, according to a ring signature certificate issuing rule, public keys of CAs of any N second participants from the blockchain network, wherein N is equal to the set number of public keys in the ring signature certificate issuing rule; and the CA of the first participant performing, according to the public key and a private key of the CA of the first participant and public keys of CAs of the N second participants, ring signature on the user identity information and the public key of the user and generating a digital certificate, and sending same to the user. Using the embodiments of the present application can improve the identity privacy of an issuer of a digital certificate.

Description

technical field [0001] The present application relates to the technical field of blockchain, and in particular to a digital certificate processing method and related devices. Background technique [0002] At present, many alliance chain applications have begun to introduce digital certificate authority (Certificate Authority, CA) to issue digital certificates for participants on the blockchain. Since many participants (for example, most banks) have their own CAs, they are required to issue digital certificates for their customers through their own CAs. For example, bank A has its own CA (such as CA-A), bank B has its own CA (such as CA-B), bank C has its own CA (such as CA-C), etc., each bank can use its own CAs issue digital certificates to their clients. In the alliance chain network, any participant such as bank A, bank B, and bank C will recognize the digital certificate issued by the CA of other participants to its customers. However, since all participants on the co...

AI Technical Summary

Problems solved by technology

The current way of issuing digital certificates on the alliance chain leads to the fact that the transaction information of the alliance chain transaction is completely open to all participants on the alliance chain, and the identities of both parties to the transaction are fully exposed. It is difficult to meet the transaction needs of each participant and has poor applicability.

Images