Implicit certificate key extension method and device

Abstract

The invention provides an implicit certificate key expansion method and device, and the method comprises the steps that a first user side generates a first symmetric key, a second symmetric key, a first key pair and a second key pair, and transmits a certificate application request to a certificate application registration center; the certificate application registration center expands a first public key according to the first symmetric key and expands a second public key according to the second symmetric key to obtain a third public key and a fourth public key corresponding to each certificate index, and sends a certificate issuing request to a certificate authorization center for each certificate index; and the certificate authorization center generates a corresponding implicit certificate according to the third public key corresponding to each certificate index, encrypts the corresponding implicit certificate according to the fourth public key corresponding to each certificate index, and sends the encrypted implicit certificate corresponding to each certificate index to the certificate application registration center. According to the scheme, multiple implicit certificates can be obtained by sending the certificate application request once based on key extension, and the certificate generation efficiency is effectively improved.

Description

technical field

[0001] The present application relates to the technical field of information security, in particular to an implicit certificate key extension method and device. Background technique

[0002] With the increasing popularity of network information technology applications, network information security has increasingly become a subject of much concern. Using a digital certificate ensures that the public key cannot be impersonated. A digital certificate is a public key certified by an authority. By looking at the digital certificate, you can know which authority the certificate was issued by, the information about the user of the certificate, and the public key of the user.

[0003] At present, in order to obtain multiple digital certificates, the terminal device can send multiple requests, and each request carries a public key. In this case, multiple interactions are required, and the generation efficiency of the digital certificate is low. In addition, the ter...

Images