Digital certificate issuing method, verification method and system

Abstract

The invention relates to a digital certificate issuing method, a verification method and a system thereof. The digital certificate issuing method comprises the following steps that a certificate issuing mechanism issues a digital certificate according to a certificate request of a digital certificate requester, and the digital certificate comprises key information of the certificate; and the certificate issuing mechanism sends the digital certificate and the public query information of the digital certificate to the digital certificate requester. The digital certificate public inquiry system has the advantages that the certificate issuing mechanism sends the HASH value of the digital certificate, the public inquiry information of the digital certificate and the public key of the digital certificate requester to the public inquiry system, and due to the fact that the HASH of the data is encrypted in a one-way irreversible mode, the accuracy of information can be marked, and the information cannot be exposed. Digital certificate verification is based on a non-interactive zero-knowledge proof (NIZK) method, and it is guaranteed that sensitive information is not prone to being leaked.

Description

technical field [0001] The invention relates to the field of information security, in particular to a digital certificate issuing method, a verification method and a system thereof. It is used in the unified management requirements of non-password authentication scenarios and key certificates (such as ID cards). Background technique [0002] If the certificates exist in paper form, each person will have hundreds of certificates in his lifetime, which is difficult to store and manage. At the same time, the certificate-using units need to review a large number of paper certificates when using the certificates, and the work efficiency is low. The certificates produced by the existing technology cannot guarantee the authenticity of the certificates, which leads to the proliferation of false certificates. People repeatedly submit certificates and certificates, and even submit strange certificates to prove their identity or qualifications. If the certificate-using unit accidentall...

AI Technical Summary

Problems solved by technology

[0004] At present, the authentication methods of digital certificates are all changed and transformed based on account number / password. Whether the digital certificates are stored in plaintext or ciphertext, the user information of the central server is easily attacked and leaked in large quantities.

[0005] The current digital certificate management method is stored and managed by a single centralized system of the certificate issuing department. The certificate issuing unit, the certificate user unit, and the certificate holder are both independent and interrelated, and the management of certificates is scattered. It is difficult for the key certificate system to communicate and trust each other, it is difficult for certificates to be circulated among all participants, certificates cannot be trusted and transmitted, and cross-departmental collaboration is difficult

When the system is breached, it is easy to cause problems such as information tampering and privacy leakage, and the centralized organization even has the phenomenon of tampering information by internal personnel

Images